azure-devops-extension-api 5.274.0 → 5.275.0

package/AdvancedSecurity.Reporting/Reporting.d.ts

@@ -124,7 +124,11 @@ export declare enum AlertType {
     /**
      * The code uses a dependency with potential license incompliance.
      */
-    License = 4
+    License = 4,
+    /**
+     * The code contains a weakness determined by AI-powered analysis.
+     */
+    AICode = 5
 }
 export declare enum AlertValidityStatus {
     /**
@@ -705,7 +709,11 @@ export declare enum State {
     /**
      * The tool has determined that the issue is no longer a risk
      */
-    AutoDismissed = 8
+    AutoDismissed = 8,
+    /**
+     * Alert is in a draft state and is only visible to identities in the Advanced Security draft-alert privileged identity list. Filtered out of all Get alert responses (results and counts) for non-privileged callers.
+     */
+    Draft = 16
 }
 export declare enum TimePeriod {
     Undefined = 0,

package/AdvancedSecurity.Reporting/Reporting.js

@@ -28,6 +28,10 @@ var AlertType;
      * The code uses a dependency with potential license incompliance.
      */
     AlertType[AlertType["License"] = 4] = "License";
+    /**
+     * The code contains a weakness determined by AI-powered analysis.
+     */
+    AlertType[AlertType["AICode"] = 5] = "AICode";
 })(AlertType || (exports.AlertType = AlertType = {}));
 var AlertValidityStatus;
 (function (AlertValidityStatus) {
@@ -191,6 +195,10 @@ var State;
      * The tool has determined that the issue is no longer a risk
      */
     State[State["AutoDismissed"] = 8] = "AutoDismissed";
+    /**
+     * Alert is in a draft state and is only visible to identities in the Advanced Security draft-alert privileged identity list. Filtered out of all Get alert responses (results and counts) for non-privileged callers.
+     */
+    State[State["Draft"] = 16] = "Draft";
 })(State || (exports.State = State = {}));
 var TimePeriod;
 (function (TimePeriod) {

package/AdvancedSecurity.Reporting/Reporting.min.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.TimePeriod=exports.State=exports.Severity=exports.DismissalType=exports.DashboardAlertState=exports.ComponentType=exports.AlertValidityStatus=exports.AlertType=void 0;var AlertType;!function(e){e[e.Unknown=0]="Unknown",e[e.Dependency=1]="Dependency",e[e.Secret=2]="Secret",e[e.Code=3]="Code",e[e.License=4]="License"}(AlertType||(exports.AlertType=AlertType={}));var AlertValidityStatus;!function(e){e[e.None=0]="None",e[e.Unknown=1]="Unknown",e[e.Active=2]="Active",e[e.Inactive=3]="Inactive"}(AlertValidityStatus||(exports.AlertValidityStatus=AlertValidityStatus={}));var ComponentType;!function(e){e[e.Unknown=0]="Unknown",e[e.NuGet=1]="NuGet",e[e.Npm=2]="Npm",e[e.Maven=3]="Maven",e[e.Git=4]="Git",e[e.Other=5]="Other",e[e.RubyGems=6]="RubyGems",e[e.Cargo=7]="Cargo",e[e.Pip=8]="Pip",e[e.File=9]="File",e[e.Go=10]="Go",e[e.DockerImage=11]="DockerImage",e[e.Pod=12]="Pod",e[e.Linux=13]="Linux",e[e.Conda=14]="Conda",e[e.DockerReference=15]="DockerReference",e[e.Vcpkg=16]="Vcpkg"}(ComponentType||(exports.ComponentType=ComponentType={}));var DashboardAlertState;!function(e){e[e.Open=0]="Open",e[e.Closed=1]="Closed"}(DashboardAlertState||(exports.DashboardAlertState=DashboardAlertState={}));var DismissalType;!function(e){e[e.Unknown=0]="Unknown",e[e.Fixed=1]="Fixed",e[e.AcceptedRisk=2]="AcceptedRisk",e[e.FalsePositive=3]="FalsePositive",e[e.AgreedToGuidance=4]="AgreedToGuidance",e[e.ToolUpgrade=5]="ToolUpgrade",e[e.NotDistributed=6]="NotDistributed"}(DismissalType||(exports.DismissalType=DismissalType={}));var Severity;!function(e){e[e.Low=0]="Low",e[e.Medium=1]="Medium",e[e.High=2]="High",e[e.Critical=3]="Critical",e[e.Note=4]="Note",e[e.Warning=5]="Warning",e[e.Error=6]="Error",e[e.Undefined=7]="Undefined"}(Severity||(exports.Severity=Severity={}));var State;!function(e){e[e.Unknown=0]="Unknown",e[e.Active=1]="Active",e[e.Dismissed=2]="Dismissed",e[e.Fixed=4]="Fixed",e[e.AutoDismissed=8]="AutoDismissed"}(State||(exports.State=State={}));var TimePeriod;!function(e){e[e.Undefined=0]="Undefined",e[e.Last24Hours=5]="Last24Hours",e[e.Last7Days=6]="Last7Days",e[e.Last14Days=7]="Last14Days",e[e.Last30Days=8]="Last30Days",e[e.Last90Days=9]="Last90Days"}(TimePeriod||(exports.TimePeriod=TimePeriod={}));
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.TimePeriod=exports.State=exports.Severity=exports.DismissalType=exports.DashboardAlertState=exports.ComponentType=exports.AlertValidityStatus=exports.AlertType=void 0;var AlertType;!function(e){e[e.Unknown=0]="Unknown",e[e.Dependency=1]="Dependency",e[e.Secret=2]="Secret",e[e.Code=3]="Code",e[e.License=4]="License",e[e.AICode=5]="AICode"}(AlertType||(exports.AlertType=AlertType={}));var AlertValidityStatus;!function(e){e[e.None=0]="None",e[e.Unknown=1]="Unknown",e[e.Active=2]="Active",e[e.Inactive=3]="Inactive"}(AlertValidityStatus||(exports.AlertValidityStatus=AlertValidityStatus={}));var ComponentType;!function(e){e[e.Unknown=0]="Unknown",e[e.NuGet=1]="NuGet",e[e.Npm=2]="Npm",e[e.Maven=3]="Maven",e[e.Git=4]="Git",e[e.Other=5]="Other",e[e.RubyGems=6]="RubyGems",e[e.Cargo=7]="Cargo",e[e.Pip=8]="Pip",e[e.File=9]="File",e[e.Go=10]="Go",e[e.DockerImage=11]="DockerImage",e[e.Pod=12]="Pod",e[e.Linux=13]="Linux",e[e.Conda=14]="Conda",e[e.DockerReference=15]="DockerReference",e[e.Vcpkg=16]="Vcpkg"}(ComponentType||(exports.ComponentType=ComponentType={}));var DashboardAlertState;!function(e){e[e.Open=0]="Open",e[e.Closed=1]="Closed"}(DashboardAlertState||(exports.DashboardAlertState=DashboardAlertState={}));var DismissalType;!function(e){e[e.Unknown=0]="Unknown",e[e.Fixed=1]="Fixed",e[e.AcceptedRisk=2]="AcceptedRisk",e[e.FalsePositive=3]="FalsePositive",e[e.AgreedToGuidance=4]="AgreedToGuidance",e[e.ToolUpgrade=5]="ToolUpgrade",e[e.NotDistributed=6]="NotDistributed"}(DismissalType||(exports.DismissalType=DismissalType={}));var Severity;!function(e){e[e.Low=0]="Low",e[e.Medium=1]="Medium",e[e.High=2]="High",e[e.Critical=3]="Critical",e[e.Note=4]="Note",e[e.Warning=5]="Warning",e[e.Error=6]="Error",e[e.Undefined=7]="Undefined"}(Severity||(exports.Severity=Severity={}));var State;!function(e){e[e.Unknown=0]="Unknown",e[e.Active=1]="Active",e[e.Dismissed=2]="Dismissed",e[e.Fixed=4]="Fixed",e[e.AutoDismissed=8]="AutoDismissed",e[e.Draft=16]="Draft"}(State||(exports.State=State={}));var TimePeriod;!function(e){e[e.Undefined=0]="Undefined",e[e.Last24Hours=5]="Last24Hours",e[e.Last7Days=6]="Last7Days",e[e.Last14Days=7]="Last14Days",e[e.Last30Days=8]="Last30Days",e[e.Last90Days=9]="Last90Days"}(TimePeriod||(exports.TimePeriod=TimePeriod={}));

package/Alert/Alert.d.ts

@@ -145,6 +145,19 @@ export interface AlertBatchRequest {
      */
     alertType: AlertType;
 }
+/**
+ * Request model for batch-updating alert states.
+ */
+export interface AlertBatchStateUpdateRequest {
+    /**
+     * The list of individual alert state changes to apply. Max 100 items per request.
+     */
+    alertStateUpdateList: AlertStateUpdateForAlert[];
+    /**
+     * The alert type of the alerts being updated. Defaults to AICode if not specified.
+     */
+    alertType: AlertType;
+}
 export declare enum AlertListExpandOption {
     /**
      * No Expands.
@@ -216,6 +229,27 @@ export interface AlertStateUpdate {
     dismissedReason: DismissalType;
     state: State;
 }
+/**
+ * Represents a state update for a single alert within a batch request.
+ */
+export interface AlertStateUpdateForAlert {
+    /**
+     * The ID of the alert to update.
+     */
+    alertId: number;
+    /**
+     * Comment for dismissal (e.g., "Dismissed by AI scan validation").
+     */
+    dismissedComment: string;
+    /**
+     * Reason for dismissal. Required when State == Dismissed.
+     */
+    dismissedReason: DismissalType;
+    /**
+     * The state to transition the alert to (Active, Dismissed, or Draft). Draft means the alert is indeterminate and should remain in its current state.
+     */
+    state: State;
+}
 export declare enum AlertType {
     /**
      * The code has an unspecified vulnerability type
@@ -236,7 +270,11 @@ export declare enum AlertType {
     /**
      * The code uses a dependency with potential license incompliance.
      */
-    License = 4
+    License = 4,
+    /**
+     * The code contains a weakness determined by AI-powered analysis.
+     */
+    AICode = 5
 }
 export declare enum AlertValidationRequestStatus {
     /**
@@ -399,12 +437,24 @@ export interface AnalysisResult {
  * Payload sent by the autofix pipeline to report the outcome of a run.
  */
 export interface AutofixCallbackRequest {
+    /**
+     * Optional diagnostic detail captured by the pipeline when the run fails — the tail of the pipeline run log (where the failing step's output is), bounded by the pipeline to fit the trace message size limit. Null or empty for successful runs or when no output was captured.
+     */
+    errorDetails: string;
+    /**
+     * Orchestration plan id (System.PlanId) of the pipeline run reporting this callback.
+     */
+    pipelinePlanId: string;
     pullRequestId: number;
     requestId: number;
     /**
      * Terminal status reported by the pipeline.
      */
     status: AutofixCallbackStatus;
+    /**
+     * Total nanoAIU consumed by the autofix binary.
+     */
+    tokenUsage: number;
 }
 export declare enum AutofixCallbackStatus {
     /**
@@ -421,6 +471,7 @@ export declare enum AutofixCallbackStatus {
  */
 export interface AutofixRequest {
     createdDate: Date;
+    pipelinePlanId: string;
     requestId: number;
     status: AutofixRequestStatus;
 }
@@ -1146,7 +1197,11 @@ export declare enum State {
     /**
      * The tool has determined that the issue is no longer a risk
      */
-    AutoDismissed = 8
+    AutoDismissed = 8,
+    /**
+     * Alert is in a draft state and is only visible to identities in the Advanced Security draft-alert privileged identity list. Filtered out of all Get alert responses (results and counts) for non-privileged callers.
+     */
+    Draft = 16
 }
 /**
  * An Analysis tool that can generate security alerts

package/Alert/Alert.js

@@ -57,6 +57,10 @@ var AlertType;
      * The code uses a dependency with potential license incompliance.
      */
     AlertType[AlertType["License"] = 4] = "License";
+    /**
+     * The code contains a weakness determined by AI-powered analysis.
+     */
+    AlertType[AlertType["AICode"] = 5] = "AICode";
 })(AlertType || (exports.AlertType = AlertType = {}));
 var AlertValidationRequestStatus;
 (function (AlertValidationRequestStatus) {
@@ -440,6 +444,10 @@ var State;
      * The tool has determined that the issue is no longer a risk
      */
     State[State["AutoDismissed"] = 8] = "AutoDismissed";
+    /**
+     * Alert is in a draft state and is only visible to identities in the Advanced Security draft-alert privileged identity list. Filtered out of all Get alert responses (results and counts) for non-privileged callers.
+     */
+    State[State["Draft"] = 16] = "Draft";
 })(State || (exports.State = State = {}));
 var ValidationResult;
 (function (ValidationResult) {

package/Alert/Alert.min.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.ValidationResult=exports.State=exports.Severity=exports.SarifJobStatus=exports.ResultType=exports.MetadataOperation=exports.MetadataChangeType=exports.LicenseType=exports.LicenseState=exports.ExpandOption=exports.DismissalType=exports.DependencyKind=exports.Confidence=exports.ComponentType=exports.AutofixRequestStatus=exports.AutofixCallbackStatus=exports.AnalysisConfigurationType=exports.AlertValidityStatus=exports.AlertValidationRequestStatus=exports.AlertType=exports.AlertMetadataErrorPolicy=exports.AlertListExpandOption=void 0;var AlertListExpandOption;!function(e){e[e.None=0]="None",e[e.Minimal=1]="Minimal",e[e.Count=2]="Count"}(AlertListExpandOption||(exports.AlertListExpandOption=AlertListExpandOption={}));var AlertMetadataErrorPolicy;!function(e){e[e.Fail=1]="Fail",e[e.Omit=2]="Omit"}(AlertMetadataErrorPolicy||(exports.AlertMetadataErrorPolicy=AlertMetadataErrorPolicy={}));var AlertType;!function(e){e[e.Unknown=0]="Unknown",e[e.Dependency=1]="Dependency",e[e.Secret=2]="Secret",e[e.Code=3]="Code",e[e.License=4]="License"}(AlertType||(exports.AlertType=AlertType={}));var AlertValidationRequestStatus;!function(e){e[e.None=0]="None",e[e.Created=1]="Created",e[e.InProgress=2]="InProgress",e[e.Completed=3]="Completed",e[e.Failed=4]="Failed"}(AlertValidationRequestStatus||(exports.AlertValidationRequestStatus=AlertValidationRequestStatus={}));var AlertValidityStatus;!function(e){e[e.None=0]="None",e[e.Unknown=1]="Unknown",e[e.Active=2]="Active",e[e.Inactive=3]="Inactive"}(AlertValidityStatus||(exports.AlertValidityStatus=AlertValidityStatus={}));var AnalysisConfigurationType;!function(e){e[e.Default=0]="Default",e[e.AdoPipeline=1]="AdoPipeline"}(AnalysisConfigurationType||(exports.AnalysisConfigurationType=AnalysisConfigurationType={}));var AutofixCallbackStatus;!function(e){e[e.Done=0]="Done",e[e.Failed=1]="Failed"}(AutofixCallbackStatus||(exports.AutofixCallbackStatus=AutofixCallbackStatus={}));var AutofixRequestStatus;!function(e){e[e.None=0]="None",e[e.Pending=1]="Pending",e[e.PipelineRunning=2]="PipelineRunning",e[e.Done=3]="Done",e[e.Failed=4]="Failed"}(AutofixRequestStatus||(exports.AutofixRequestStatus=AutofixRequestStatus={}));var ComponentType;!function(e){e[e.Unknown=0]="Unknown",e[e.NuGet=1]="NuGet",e[e.Npm=2]="Npm",e[e.Maven=3]="Maven",e[e.Git=4]="Git",e[e.Other=5]="Other",e[e.RubyGems=6]="RubyGems",e[e.Cargo=7]="Cargo",e[e.Pip=8]="Pip",e[e.File=9]="File",e[e.Go=10]="Go",e[e.DockerImage=11]="DockerImage",e[e.Pod=12]="Pod",e[e.Linux=13]="Linux",e[e.Conda=14]="Conda",e[e.DockerReference=15]="DockerReference",e[e.Vcpkg=16]="Vcpkg"}(ComponentType||(exports.ComponentType=ComponentType={}));var Confidence;!function(e){e[e.High=0]="High",e[e.Other=1]="Other"}(Confidence||(exports.Confidence=Confidence={}));var DependencyKind;!function(e){e[e.Unknown=0]="Unknown",e[e.RootDependency=1]="RootDependency",e[e.Component=2]="Component",e[e.VulnerableDependency=3]="VulnerableDependency"}(DependencyKind||(exports.DependencyKind=DependencyKind={}));var DismissalType;!function(e){e[e.Unknown=0]="Unknown",e[e.Fixed=1]="Fixed",e[e.AcceptedRisk=2]="AcceptedRisk",e[e.FalsePositive=3]="FalsePositive",e[e.AgreedToGuidance=4]="AgreedToGuidance",e[e.ToolUpgrade=5]="ToolUpgrade",e[e.NotDistributed=6]="NotDistributed"}(DismissalType||(exports.DismissalType=DismissalType={}));var ExpandOption;!function(e){e[e.None=0]="None",e[e.ValidationFingerprint=1]="ValidationFingerprint"}(ExpandOption||(exports.ExpandOption=ExpandOption={}));var LicenseState;!function(e){e[e.Unknown=0]="Unknown",e[e.NotHarvested=1]="NotHarvested",e[e.Harvested=2]="Harvested"}(LicenseState||(exports.LicenseState=LicenseState={}));var LicenseType;!function(e){e[e.Unknown=0]="Unknown",e[e.Permissive=1]="Permissive",e[e.WeakCopyleft=2]="WeakCopyleft",e[e.StrongCopyleft=3]="StrongCopyleft",e[e.NetworkCopyleft=4]="NetworkCopyleft",e[e.Other=5]="Other",e[e.NoAssertion=6]="NoAssertion"}(LicenseType||(exports.LicenseType=LicenseType={}));var MetadataChangeType;!function(e){e[e.None=0]="None",e[e.Created=1]="Created",e[e.Updated=2]="Updated",e[e.Deleted=3]="Deleted"}(MetadataChangeType||(exports.MetadataChangeType=MetadataChangeType={}));var MetadataOperation;!function(e){e[e.None=0]="None",e[e.Add=1]="Add",e[e.Remove=2]="Remove"}(MetadataOperation||(exports.MetadataOperation=MetadataOperation={}));var ResultType;!function(e){e[e.Unknown=0]="Unknown",e[e.Dependency=1]="Dependency",e[e.VersionControl=2]="VersionControl"}(ResultType||(exports.ResultType=ResultType={}));var SarifJobStatus;!function(e){e[e.New=0]="New",e[e.Queued=1]="Queued",e[e.Completed=2]="Completed",e[e.Failed=3]="Failed",e[e.Requeued=4]="Requeued",e[e.ConcurrentProcessing=5]="ConcurrentProcessing"}(SarifJobStatus||(exports.SarifJobStatus=SarifJobStatus={}));var Severity;!function(e){e[e.Low=0]="Low",e[e.Medium=1]="Medium",e[e.High=2]="High",e[e.Critical=3]="Critical",e[e.Note=4]="Note",e[e.Warning=5]="Warning",e[e.Error=6]="Error",e[e.Undefined=7]="Undefined"}(Severity||(exports.Severity=Severity={}));var State;!function(e){e[e.Unknown=0]="Unknown",e[e.Active=1]="Active",e[e.Dismissed=2]="Dismissed",e[e.Fixed=4]="Fixed",e[e.AutoDismissed=8]="AutoDismissed"}(State||(exports.State=State={}));var ValidationResult;!function(e){e[e.None=0]="None",e[e.Exploitable=1]="Exploitable",e[e.NotExploitable=2]="NotExploitable",e[e.Inconclusive=3]="Inconclusive",e[e.ValidationNotSupported=4]="ValidationNotSupported",e[e.TransientError=5]="TransientError"}(ValidationResult||(exports.ValidationResult=ValidationResult={}));
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.ValidationResult=exports.State=exports.Severity=exports.SarifJobStatus=exports.ResultType=exports.MetadataOperation=exports.MetadataChangeType=exports.LicenseType=exports.LicenseState=exports.ExpandOption=exports.DismissalType=exports.DependencyKind=exports.Confidence=exports.ComponentType=exports.AutofixRequestStatus=exports.AutofixCallbackStatus=exports.AnalysisConfigurationType=exports.AlertValidityStatus=exports.AlertValidationRequestStatus=exports.AlertType=exports.AlertMetadataErrorPolicy=exports.AlertListExpandOption=void 0;var AlertListExpandOption;!function(e){e[e.None=0]="None",e[e.Minimal=1]="Minimal",e[e.Count=2]="Count"}(AlertListExpandOption||(exports.AlertListExpandOption=AlertListExpandOption={}));var AlertMetadataErrorPolicy;!function(e){e[e.Fail=1]="Fail",e[e.Omit=2]="Omit"}(AlertMetadataErrorPolicy||(exports.AlertMetadataErrorPolicy=AlertMetadataErrorPolicy={}));var AlertType;!function(e){e[e.Unknown=0]="Unknown",e[e.Dependency=1]="Dependency",e[e.Secret=2]="Secret",e[e.Code=3]="Code",e[e.License=4]="License",e[e.AICode=5]="AICode"}(AlertType||(exports.AlertType=AlertType={}));var AlertValidationRequestStatus;!function(e){e[e.None=0]="None",e[e.Created=1]="Created",e[e.InProgress=2]="InProgress",e[e.Completed=3]="Completed",e[e.Failed=4]="Failed"}(AlertValidationRequestStatus||(exports.AlertValidationRequestStatus=AlertValidationRequestStatus={}));var AlertValidityStatus;!function(e){e[e.None=0]="None",e[e.Unknown=1]="Unknown",e[e.Active=2]="Active",e[e.Inactive=3]="Inactive"}(AlertValidityStatus||(exports.AlertValidityStatus=AlertValidityStatus={}));var AnalysisConfigurationType;!function(e){e[e.Default=0]="Default",e[e.AdoPipeline=1]="AdoPipeline"}(AnalysisConfigurationType||(exports.AnalysisConfigurationType=AnalysisConfigurationType={}));var AutofixCallbackStatus;!function(e){e[e.Done=0]="Done",e[e.Failed=1]="Failed"}(AutofixCallbackStatus||(exports.AutofixCallbackStatus=AutofixCallbackStatus={}));var AutofixRequestStatus;!function(e){e[e.None=0]="None",e[e.Pending=1]="Pending",e[e.PipelineRunning=2]="PipelineRunning",e[e.Done=3]="Done",e[e.Failed=4]="Failed"}(AutofixRequestStatus||(exports.AutofixRequestStatus=AutofixRequestStatus={}));var ComponentType;!function(e){e[e.Unknown=0]="Unknown",e[e.NuGet=1]="NuGet",e[e.Npm=2]="Npm",e[e.Maven=3]="Maven",e[e.Git=4]="Git",e[e.Other=5]="Other",e[e.RubyGems=6]="RubyGems",e[e.Cargo=7]="Cargo",e[e.Pip=8]="Pip",e[e.File=9]="File",e[e.Go=10]="Go",e[e.DockerImage=11]="DockerImage",e[e.Pod=12]="Pod",e[e.Linux=13]="Linux",e[e.Conda=14]="Conda",e[e.DockerReference=15]="DockerReference",e[e.Vcpkg=16]="Vcpkg"}(ComponentType||(exports.ComponentType=ComponentType={}));var Confidence;!function(e){e[e.High=0]="High",e[e.Other=1]="Other"}(Confidence||(exports.Confidence=Confidence={}));var DependencyKind;!function(e){e[e.Unknown=0]="Unknown",e[e.RootDependency=1]="RootDependency",e[e.Component=2]="Component",e[e.VulnerableDependency=3]="VulnerableDependency"}(DependencyKind||(exports.DependencyKind=DependencyKind={}));var DismissalType;!function(e){e[e.Unknown=0]="Unknown",e[e.Fixed=1]="Fixed",e[e.AcceptedRisk=2]="AcceptedRisk",e[e.FalsePositive=3]="FalsePositive",e[e.AgreedToGuidance=4]="AgreedToGuidance",e[e.ToolUpgrade=5]="ToolUpgrade",e[e.NotDistributed=6]="NotDistributed"}(DismissalType||(exports.DismissalType=DismissalType={}));var ExpandOption;!function(e){e[e.None=0]="None",e[e.ValidationFingerprint=1]="ValidationFingerprint"}(ExpandOption||(exports.ExpandOption=ExpandOption={}));var LicenseState;!function(e){e[e.Unknown=0]="Unknown",e[e.NotHarvested=1]="NotHarvested",e[e.Harvested=2]="Harvested"}(LicenseState||(exports.LicenseState=LicenseState={}));var LicenseType;!function(e){e[e.Unknown=0]="Unknown",e[e.Permissive=1]="Permissive",e[e.WeakCopyleft=2]="WeakCopyleft",e[e.StrongCopyleft=3]="StrongCopyleft",e[e.NetworkCopyleft=4]="NetworkCopyleft",e[e.Other=5]="Other",e[e.NoAssertion=6]="NoAssertion"}(LicenseType||(exports.LicenseType=LicenseType={}));var MetadataChangeType;!function(e){e[e.None=0]="None",e[e.Created=1]="Created",e[e.Updated=2]="Updated",e[e.Deleted=3]="Deleted"}(MetadataChangeType||(exports.MetadataChangeType=MetadataChangeType={}));var MetadataOperation;!function(e){e[e.None=0]="None",e[e.Add=1]="Add",e[e.Remove=2]="Remove"}(MetadataOperation||(exports.MetadataOperation=MetadataOperation={}));var ResultType;!function(e){e[e.Unknown=0]="Unknown",e[e.Dependency=1]="Dependency",e[e.VersionControl=2]="VersionControl"}(ResultType||(exports.ResultType=ResultType={}));var SarifJobStatus;!function(e){e[e.New=0]="New",e[e.Queued=1]="Queued",e[e.Completed=2]="Completed",e[e.Failed=3]="Failed",e[e.Requeued=4]="Requeued",e[e.ConcurrentProcessing=5]="ConcurrentProcessing"}(SarifJobStatus||(exports.SarifJobStatus=SarifJobStatus={}));var Severity;!function(e){e[e.Low=0]="Low",e[e.Medium=1]="Medium",e[e.High=2]="High",e[e.Critical=3]="Critical",e[e.Note=4]="Note",e[e.Warning=5]="Warning",e[e.Error=6]="Error",e[e.Undefined=7]="Undefined"}(Severity||(exports.Severity=Severity={}));var State;!function(e){e[e.Unknown=0]="Unknown",e[e.Active=1]="Active",e[e.Dismissed=2]="Dismissed",e[e.Fixed=4]="Fixed",e[e.AutoDismissed=8]="AutoDismissed",e[e.Draft=16]="Draft"}(State||(exports.State=State={}));var ValidationResult;!function(e){e[e.None=0]="None",e[e.Exploitable=1]="Exploitable",e[e.NotExploitable=2]="NotExploitable",e[e.Inconclusive=3]="Inconclusive",e[e.ValidationNotSupported=4]="ValidationNotSupported",e[e.TransientError=5]="TransientError"}(ValidationResult||(exports.ValidationResult=ValidationResult={}));

package/Alert/AlertClient.d.ts

@@ -4,6 +4,10 @@ import * as Alert from "../Alert/Alert";
 import * as WebApi from "../WebApi/WebApi";
 export declare class AlertRestClient extends RestClientBase {
     constructor(options: IVssRestClientOptions);
+    /**
+     * @param submissionId -
+     */
+    getSarifContent(submissionId: number): Promise<any>;
     /**
      * Get an alert.
      *
@@ -51,8 +55,17 @@ export declare class AlertRestClient extends RestClientBase {
      * @param request - Request containing alert IDs and optional alert type filter
      * @param project - Project ID or project name
      * @param repository - The name or ID of the repository
+     * @param includeSensitiveInformation - Applies to secret alerts only. When false (the default), the 'ValidationFingerprintJson' of each secret alert's validation fingerprints is omitted from the response. Set to true to include it; be aware that the validation fingerprint JSON may contain the unencrypted secret and other sensitive data, so exercise caution when requesting it.
+     */
+    getAlertsByIds(request: Alert.AlertBatchRequest, project: string, repository: string, includeSensitiveInformation?: boolean): Promise<Alert.Alert[]>;
+    /**
+     * Batch update alert states. Internal use only — used by proof scanners to transition AI-generated draft alerts to Active or Dismissed. Alerts marked as Draft (indeterminate) are left unchanged.
+     *
+     * @param request - Request containing alert state updates
+     * @param project - Project ID or project name
+     * @param repository - The name or ID of the repository
      */
-    getAlertsByIds(request: Alert.AlertBatchRequest, project: string, repository: string): Promise<Alert.Alert[]>;
+    updateAlertsBatch(request: Alert.AlertBatchStateUpdateRequest, project: string, repository: string): Promise<Alert.Alert[]>;
     /**
      * Returns the branches for which analysis results were submitted.
      *
@@ -86,16 +99,18 @@ export declare class AlertRestClient extends RestClientBase {
      * @param project - Project ID or project name
      * @param alertId - The ID of the alert to create an autofix for.
      * @param repository - The name or ID of the repository.
+     * @param ref - Optional Git ref (e.g. refs/heads/feature/x) the autofix should target. When omitted, the repository's default branch is used.
      */
-    createAutofixRequest(project: string, alertId: number, repository: string): Promise<Alert.AutofixRequest>;
+    createAutofixRequest(project: string, alertId: number, repository: string, ref?: string): Promise<Alert.AutofixRequest>;
     /**
      * Get all autofix requests for the specified alert.
      *
      * @param project - Project ID or project name
      * @param alertId - The ID of the alert.
      * @param repository - The name or ID of the repository.
+     * @param ref - Optional Git ref (e.g. refs/heads/feature/x) the autofix should target. When omitted, the repository's default branch is used.
      */
-    getAutofixRequestsByAlertId(project: string, alertId: number, repository: string): Promise<Alert.AutofixRequest[]>;
+    getAutofixRequestsByAlertId(project: string, alertId: number, repository: string, ref?: string): Promise<Alert.AutofixRequest[]>;
     /**
      * Upload a SARIF to GitHub Code Scanning via a GitOps app.
      *

package/Alert/AlertClient.js

@@ -21,6 +21,20 @@ class AlertRestClient extends RestClientBase_1.RestClientBase {
     constructor(options) {
         super(options);
     }
+    /**
+     * @param submissionId -
+     */
+    getSarifContent(submissionId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.beginRequest({
+                apiVersion: "7.2-preview.1",
+                routeTemplate: "_apis/Alert/sarifs/download/{submissionId}",
+                routeValues: {
+                    submissionId: submissionId
+                }
+            });
+        });
+    }
     /**
      * Get an alert.
      *
@@ -140,9 +154,13 @@ class AlertRestClient extends RestClientBase_1.RestClientBase {
      * @param request - Request containing alert IDs and optional alert type filter
      * @param project - Project ID or project name
      * @param repository - The name or ID of the repository
+     * @param includeSensitiveInformation - Applies to secret alerts only. When false (the default), the 'ValidationFingerprintJson' of each secret alert's validation fingerprints is omitted from the response. Set to true to include it; be aware that the validation fingerprint JSON may contain the unencrypted secret and other sensitive data, so exercise caution when requesting it.
      */
-    getAlertsByIds(request, project, repository) {
+    getAlertsByIds(request, project, repository, includeSensitiveInformation) {
         return __awaiter(this, void 0, void 0, function* () {
+            const queryValues = {
+                includeSensitiveInformation: includeSensitiveInformation
+            };
             return this.beginRequest({
                 apiVersion: "7.2-preview.1",
                 method: "POST",
@@ -151,6 +169,28 @@ class AlertRestClient extends RestClientBase_1.RestClientBase {
                     project: project,
                     repository: repository
                 },
+                queryParams: queryValues,
+                body: request
+            });
+        });
+    }
+    /**
+     * Batch update alert states. Internal use only — used by proof scanners to transition AI-generated draft alerts to Active or Dismissed. Alerts marked as Draft (indeterminate) are left unchanged.
+     *
+     * @param request - Request containing alert state updates
+     * @param project - Project ID or project name
+     * @param repository - The name or ID of the repository
+     */
+    updateAlertsBatch(request, project, repository) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.beginRequest({
+                apiVersion: "7.2-preview.1",
+                method: "PATCH",
+                routeTemplate: "{project}/_apis/Alert/repositories/{repository}/AlertsBatch",
+                routeValues: {
+                    project: project,
+                    repository: repository
+                },
                 body: request
             });
         });
@@ -239,9 +279,13 @@ class AlertRestClient extends RestClientBase_1.RestClientBase {
      * @param project - Project ID or project name
      * @param alertId - The ID of the alert to create an autofix for.
      * @param repository - The name or ID of the repository.
+     * @param ref - Optional Git ref (e.g. refs/heads/feature/x) the autofix should target. When omitted, the repository's default branch is used.
      */
-    createAutofixRequest(project, alertId, repository) {
+    createAutofixRequest(project, alertId, repository, ref) {
         return __awaiter(this, void 0, void 0, function* () {
+            const queryValues = {
+                ref: ref
+            };
             return this.beginRequest({
                 apiVersion: "7.2-preview.1",
                 method: "POST",
@@ -251,7 +295,8 @@ class AlertRestClient extends RestClientBase_1.RestClientBase {
                     alertId: alertId,
                     repository: repository,
                     action: "Default"
-                }
+                },
+                queryParams: queryValues
             });
         });
     }
@@ -261,9 +306,13 @@ class AlertRestClient extends RestClientBase_1.RestClientBase {
      * @param project - Project ID or project name
      * @param alertId - The ID of the alert.
      * @param repository - The name or ID of the repository.
+     * @param ref - Optional Git ref (e.g. refs/heads/feature/x) the autofix should target. When omitted, the repository's default branch is used.
      */
-    getAutofixRequestsByAlertId(project, alertId, repository) {
+    getAutofixRequestsByAlertId(project, alertId, repository, ref) {
         return __awaiter(this, void 0, void 0, function* () {
+            const queryValues = {
+                ref: ref
+            };
             return this.beginRequest({
                 apiVersion: "7.2-preview.1",
                 routeTemplate: "{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}/Autofix/{action}",
@@ -272,7 +321,8 @@ class AlertRestClient extends RestClientBase_1.RestClientBase {
                     alertId: alertId,
                     repository: repository,
                     action: "Default"
-                }
+                },
+                queryParams: queryValues
             });
         });
     }

package/Alert/AlertClient.min.js

@@ -1 +1 @@
-"use strict";var __awaiter=this&&this.__awaiter||function(e,t,r,i){return new(r||(r=Promise))(function(o,s){function a(e){try{p(i.next(e))}catch(e){s(e)}}function n(e){try{p(i.throw(e))}catch(e){s(e)}}function p(e){e.done?o(e.value):function(e){return e instanceof r?e:new r(function(t){t(e)})}(e.value).then(a,n)}p((i=i.apply(e,t||[])).next())})};Object.defineProperty(exports,"__esModule",{value:!0}),exports.AlertRestClient=void 0;const RestClientBase_1=require("../Common/RestClientBase"),Serialization_1=require("../Common/Util/Serialization");class AlertRestClient extends RestClientBase_1.RestClientBase{constructor(e){super(e)}getAlert(e,t,r,i,o){return __awaiter(this,void 0,void 0,function*(){const s={ref:i,expand:o};return this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}",routeValues:{project:e,alertId:t,repository:r},queryParams:s})})}getAlerts(e,t,r,i,o,s,a){return __awaiter(this,void 0,void 0,function*(){const n={top:r,orderBy:i,criteria:o,expand:s,continuationToken:a};return this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}",routeValues:{project:e,repository:t},queryParams:n,returnRawResponse:!0}).then(e=>__awaiter(this,void 0,void 0,function*(){const t=yield e.text().then(Serialization_1.deserializeVssJsonObject);return t.continuationToken=e.headers.get("x-ms-continuationtoken"),t}))})}getAlertSarif(e,t,r,i,o){return __awaiter(this,void 0,void 0,function*(){const s={ref:i,expand:o};return this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}",routeValues:{project:e,alertId:t,repository:r},queryParams:s})})}updateAlert(e,t,r,i){return __awaiter(this,void 0,void 0,function*(){return this.beginRequest({apiVersion:"7.2-preview.1",method:"PATCH",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}",routeValues:{project:t,alertId:r,repository:i},body:e})})}getAlertsByIds(e,t,r){return __awaiter(this,void 0,void 0,function*(){return this.beginRequest({apiVersion:"7.2-preview.1",method:"POST",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/AlertsBatch",routeValues:{project:t,repository:r},body:e})})}getBranches(e,t,r,i,o,s,a){return __awaiter(this,void 0,void 0,function*(){const n={alertType:r,continuationToken:i,branchNameContains:o,top:s,includePullRequestBranches:a};return this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/filters/{action}",routeValues:{project:e,repository:t,action:"Branches"},queryParams:n})})}getUxFilters(e,t,r){return __awaiter(this,void 0,void 0,function*(){const i={alertType:r};return this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/filters/{action}",routeValues:{project:e,repository:t,action:"Default"},queryParams:i})})}autofixCallback(e,t,r,i){return __awaiter(this,void 0,void 0,function*(){return this.beginRequest({apiVersion:"7.2-preview.1",method:"POST",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}/Autofix/{action}",routeValues:{project:t,repository:r,alertId:i,action:"Callback"},body:e})})}createAutofixRequest(e,t,r){return __awaiter(this,void 0,void 0,function*(){return this.beginRequest({apiVersion:"7.2-preview.1",method:"POST",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}/Autofix/{action}",routeValues:{project:e,alertId:t,repository:r,action:"Default"}})})}getAutofixRequestsByAlertId(e,t,r){return __awaiter(this,void 0,void 0,function*(){return this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}/Autofix/{action}",routeValues:{project:e,alertId:t,repository:r,action:"Default"}})})}uploadSarifToGitHub(e,t,r,i,o){return __awaiter(this,void 0,void 0,function*(){return this.beginRequest({apiVersion:"7.2-preview.1",method:"POST",routeTemplate:"{project}/_apis/Alert/github/{hostname}/{owner}/{repo}/sarifs",routeValues:{project:t,hostname:r,owner:i,repo:o},customHeaders:{"Content-Type":"application/octet-stream"},body:e})})}getAlertInstances(e,t,r,i){return __awaiter(this,void 0,void 0,function*(){const o={ref:i};return this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}/Instances",routeValues:{project:e,alertId:t,repository:r},queryParams:o})})}createLegalReview(e,t,r,i){return __awaiter(this,void 0,void 0,function*(){const o={alertId:r,ref:i};return this.beginRequest({apiVersion:"7.2-preview.1",method:"POST",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/Metadata",routeValues:{project:e,repository:t},queryParams:o})})}updateAlertsMetadata(e,t,r){return __awaiter(this,void 0,void 0,function*(){return this.beginRequest({apiVersion:"7.2-preview.1",method:"PATCH",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/Metadata",routeValues:{project:t,repository:r},body:e})})}getAlertMetadata(e,t,r){return __awaiter(this,void 0,void 0,function*(){return this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}/metadata",routeValues:{project:e,alertId:t,repository:r}})})}getAlertMetadataBatch(e,t,r){return __awaiter(this,void 0,void 0,function*(){return this.beginRequest({apiVersion:"7.2-preview.1",method:"POST",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/MetadataBatch",routeValues:{project:t,repository:r},body:e})})}getOrgLevelAlertsByIds(e){return __awaiter(this,void 0,void 0,function*(){const t={alertIds:e&&e.join(",")};return this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"_apis/Alert/alerts",queryParams:t})})}deleteAllPipelineAnalyses(e,t){return __awaiter(this,void 0,void 0,function*(){return this.beginRequest({apiVersion:"7.2-preview.1",method:"DELETE",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/pipelineAnalyses",routeValues:{project:e,repository:t}})})}deletePipelineAnalysis(e,t,r){return __awaiter(this,void 0,void 0,function*(){return this.beginRequest({apiVersion:"7.2-preview.1",method:"DELETE",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/pipelineAnalysis/{adoPipelineId}",routeValues:{project:e,repository:t,adoPipelineId:r}})})}exportSarif(e,t,r,i){return __awaiter(this,void 0,void 0,function*(){const o={alertIds:r,branchName:i};return this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/sarifs",routeValues:{project:e,repository:t},queryParams:o})})}uploadSarif(e,t,r,i){return __awaiter(this,void 0,void 0,function*(){return this.beginRequest({apiVersion:"7.2-preview.1",method:"POST",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/sarifs",routeValues:{project:t,repository:r},customHeaders:{"Content-Type":"application/octet-stream","X-AdvSec-NotificationSarif":i},body:e})})}getSarif(e){return __awaiter(this,void 0,void 0,function*(){return this.beginRequest({apiVersion:"7.2-preview.2",routeTemplate:"_apis/Alert/Sarifs/{sarifId}",routeValues:{sarifId:e}})})}uploadOrgSarif(e){return __awaiter(this,void 0,void 0,function*(){return this.beginRequest({apiVersion:"7.2-preview.2",method:"POST",routeTemplate:"_apis/Alert/Sarifs/{sarifId}",customHeaders:{"Content-Type":"application/octet-stream"},body:e})})}getValidityData(e,t,r){return __awaiter(this,void 0,void 0,function*(){return this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}/Validate",routeValues:{project:e,repository:t,alertId:r}})})}initiateValidation(e,t,r){return __awaiter(this,void 0,void 0,function*(){return this.beginRequest({apiVersion:"7.2-preview.1",method:"POST",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}/Validate",routeValues:{project:e,repository:t,alertId:r}})})}}exports.AlertRestClient=AlertRestClient;
+"use strict";var __awaiter=this&&this.__awaiter||function(e,t,r,i){return new(r||(r=Promise))(function(o,s){function a(e){try{p(i.next(e))}catch(e){s(e)}}function n(e){try{p(i.throw(e))}catch(e){s(e)}}function p(e){e.done?o(e.value):function(e){return e instanceof r?e:new r(function(t){t(e)})}(e.value).then(a,n)}p((i=i.apply(e,t||[])).next())})};Object.defineProperty(exports,"__esModule",{value:!0}),exports.AlertRestClient=void 0;const RestClientBase_1=require("../Common/RestClientBase"),Serialization_1=require("../Common/Util/Serialization");class AlertRestClient extends RestClientBase_1.RestClientBase{constructor(e){super(e)}getSarifContent(e){return __awaiter(this,void 0,void 0,function*(){return this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"_apis/Alert/sarifs/download/{submissionId}",routeValues:{submissionId:e}})})}getAlert(e,t,r,i,o){return __awaiter(this,void 0,void 0,function*(){const s={ref:i,expand:o};return this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}",routeValues:{project:e,alertId:t,repository:r},queryParams:s})})}getAlerts(e,t,r,i,o,s,a){return __awaiter(this,void 0,void 0,function*(){const n={top:r,orderBy:i,criteria:o,expand:s,continuationToken:a};return this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}",routeValues:{project:e,repository:t},queryParams:n,returnRawResponse:!0}).then(e=>__awaiter(this,void 0,void 0,function*(){const t=yield e.text().then(Serialization_1.deserializeVssJsonObject);return t.continuationToken=e.headers.get("x-ms-continuationtoken"),t}))})}getAlertSarif(e,t,r,i,o){return __awaiter(this,void 0,void 0,function*(){const s={ref:i,expand:o};return this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}",routeValues:{project:e,alertId:t,repository:r},queryParams:s})})}updateAlert(e,t,r,i){return __awaiter(this,void 0,void 0,function*(){return this.beginRequest({apiVersion:"7.2-preview.1",method:"PATCH",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}",routeValues:{project:t,alertId:r,repository:i},body:e})})}getAlertsByIds(e,t,r,i){return __awaiter(this,void 0,void 0,function*(){const o={includeSensitiveInformation:i};return this.beginRequest({apiVersion:"7.2-preview.1",method:"POST",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/AlertsBatch",routeValues:{project:t,repository:r},queryParams:o,body:e})})}updateAlertsBatch(e,t,r){return __awaiter(this,void 0,void 0,function*(){return this.beginRequest({apiVersion:"7.2-preview.1",method:"PATCH",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/AlertsBatch",routeValues:{project:t,repository:r},body:e})})}getBranches(e,t,r,i,o,s,a){return __awaiter(this,void 0,void 0,function*(){const n={alertType:r,continuationToken:i,branchNameContains:o,top:s,includePullRequestBranches:a};return this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/filters/{action}",routeValues:{project:e,repository:t,action:"Branches"},queryParams:n})})}getUxFilters(e,t,r){return __awaiter(this,void 0,void 0,function*(){const i={alertType:r};return this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/filters/{action}",routeValues:{project:e,repository:t,action:"Default"},queryParams:i})})}autofixCallback(e,t,r,i){return __awaiter(this,void 0,void 0,function*(){return this.beginRequest({apiVersion:"7.2-preview.1",method:"POST",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}/Autofix/{action}",routeValues:{project:t,repository:r,alertId:i,action:"Callback"},body:e})})}createAutofixRequest(e,t,r,i){return __awaiter(this,void 0,void 0,function*(){const o={ref:i};return this.beginRequest({apiVersion:"7.2-preview.1",method:"POST",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}/Autofix/{action}",routeValues:{project:e,alertId:t,repository:r,action:"Default"},queryParams:o})})}getAutofixRequestsByAlertId(e,t,r,i){return __awaiter(this,void 0,void 0,function*(){const o={ref:i};return this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}/Autofix/{action}",routeValues:{project:e,alertId:t,repository:r,action:"Default"},queryParams:o})})}uploadSarifToGitHub(e,t,r,i,o){return __awaiter(this,void 0,void 0,function*(){return this.beginRequest({apiVersion:"7.2-preview.1",method:"POST",routeTemplate:"{project}/_apis/Alert/github/{hostname}/{owner}/{repo}/sarifs",routeValues:{project:t,hostname:r,owner:i,repo:o},customHeaders:{"Content-Type":"application/octet-stream"},body:e})})}getAlertInstances(e,t,r,i){return __awaiter(this,void 0,void 0,function*(){const o={ref:i};return this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}/Instances",routeValues:{project:e,alertId:t,repository:r},queryParams:o})})}createLegalReview(e,t,r,i){return __awaiter(this,void 0,void 0,function*(){const o={alertId:r,ref:i};return this.beginRequest({apiVersion:"7.2-preview.1",method:"POST",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/Metadata",routeValues:{project:e,repository:t},queryParams:o})})}updateAlertsMetadata(e,t,r){return __awaiter(this,void 0,void 0,function*(){return this.beginRequest({apiVersion:"7.2-preview.1",method:"PATCH",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/Metadata",routeValues:{project:t,repository:r},body:e})})}getAlertMetadata(e,t,r){return __awaiter(this,void 0,void 0,function*(){return this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}/metadata",routeValues:{project:e,alertId:t,repository:r}})})}getAlertMetadataBatch(e,t,r){return __awaiter(this,void 0,void 0,function*(){return this.beginRequest({apiVersion:"7.2-preview.1",method:"POST",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/MetadataBatch",routeValues:{project:t,repository:r},body:e})})}getOrgLevelAlertsByIds(e){return __awaiter(this,void 0,void 0,function*(){const t={alertIds:e&&e.join(",")};return this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"_apis/Alert/alerts",queryParams:t})})}deleteAllPipelineAnalyses(e,t){return __awaiter(this,void 0,void 0,function*(){return this.beginRequest({apiVersion:"7.2-preview.1",method:"DELETE",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/pipelineAnalyses",routeValues:{project:e,repository:t}})})}deletePipelineAnalysis(e,t,r){return __awaiter(this,void 0,void 0,function*(){return this.beginRequest({apiVersion:"7.2-preview.1",method:"DELETE",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/pipelineAnalysis/{adoPipelineId}",routeValues:{project:e,repository:t,adoPipelineId:r}})})}exportSarif(e,t,r,i){return __awaiter(this,void 0,void 0,function*(){const o={alertIds:r,branchName:i};return this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/sarifs",routeValues:{project:e,repository:t},queryParams:o})})}uploadSarif(e,t,r,i){return __awaiter(this,void 0,void 0,function*(){return this.beginRequest({apiVersion:"7.2-preview.1",method:"POST",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/sarifs",routeValues:{project:t,repository:r},customHeaders:{"Content-Type":"application/octet-stream","X-AdvSec-NotificationSarif":i},body:e})})}getSarif(e){return __awaiter(this,void 0,void 0,function*(){return this.beginRequest({apiVersion:"7.2-preview.2",routeTemplate:"_apis/Alert/Sarifs/{sarifId}",routeValues:{sarifId:e}})})}uploadOrgSarif(e){return __awaiter(this,void 0,void 0,function*(){return this.beginRequest({apiVersion:"7.2-preview.2",method:"POST",routeTemplate:"_apis/Alert/Sarifs/{sarifId}",customHeaders:{"Content-Type":"application/octet-stream"},body:e})})}getValidityData(e,t,r){return __awaiter(this,void 0,void 0,function*(){return this.beginRequest({apiVersion:"7.2-preview.1",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}/Validate",routeValues:{project:e,repository:t,alertId:r}})})}initiateValidation(e,t,r){return __awaiter(this,void 0,void 0,function*(){return this.beginRequest({apiVersion:"7.2-preview.1",method:"POST",routeTemplate:"{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}/Validate",routeValues:{project:e,repository:t,alertId:r}})})}}exports.AlertRestClient=AlertRestClient;

package/Build/Build.d.ts

@@ -2142,33 +2142,33 @@ export interface PipelineTriggerSettings {
      */
     buildsEnabledForForks: boolean;
     /**
-     * Enforce job auth scope for builds of forked repositories.
+     * The comment trigger option for pull requests from forks.
      */
-    enforceJobAuthScopeForForks: boolean;
+    commentOptionForks: CommentTriggerOption;
     /**
-     * Enforce no access to secrets for builds of forked repositories.
+     * The comment trigger option for repository-internal pull requests.
      */
-    enforceNoAccessToSecretsFromForks: boolean;
+    commentOptionInternalRepos: CommentTriggerOption;
     /**
-     * The comment trigger option for pull requests from forks.
+     * Enforce job auth scope for builds of forked repositories.
      */
-    forkCommentOption: CommentTriggerOption;
+    enforceJobAuthScopeForForks: boolean;
     /**
-     * Make comments required to have builds in pull requests from forks.
+     * Enforce no access to secrets for builds of forked repositories.
      */
-    forkIsCommentRequiredForPullRequest: boolean;
+    enforceNoAccessToSecretsFromForks: boolean;
     /**
      * Enable settings that enforce certain levels of protection for building pull requests from forks globally.
      */
     forkProtectionEnabled: boolean;
     /**
-     * The comment trigger option for repository-internal pull requests.
+     * Make comments required to have builds in pull requests from forks.
      */
-    internalRepoCommentOption: CommentTriggerOption;
+    isCommentRequiredForForkedPullRequests: boolean;
     /**
      * Make comments required to have builds in repository-internal pull requests.
      */
-    internalRepoIsCommentRequiredForPullRequest: boolean;
+    isCommentRequiredForInternalRepoPRs: boolean;
     /**
      * [Deprecated] Make comments required to have builds in all pull requests.
      */
@@ -2279,11 +2279,11 @@ export interface PullRequestTrigger extends BuildTrigger {
      */
     autoCancel: boolean;
     branchFilters: string[];
-    forkCommentOption: CommentTriggerOption;
-    forkIsCommentRequiredForPullRequest: boolean;
+    commentOptionForks: CommentTriggerOption;
+    commentOptionInternalRepos: CommentTriggerOption;
     forks: Forks;
-    internalRepoCommentOption: CommentTriggerOption;
-    internalRepoIsCommentRequiredForPullRequest: boolean;
+    isCommentRequiredForForkedPullRequests: boolean;
+    isCommentRequiredForInternalRepoPRs: boolean;
     isCommentRequiredForPullRequest: boolean;
     pathFilters: string[];
     pipelineTriggerSettings: PipelineTriggerSettings;
@@ -2911,6 +2911,10 @@ export interface TimelineAttempt {
      * Gets or sets the record identifier located within the specified timeline.
      */
     recordId: string;
+    /**
+     * Gets or sets the identity that requested this attempt. For the initial attempt this is typically the build orchestration service identity; for re-run attempts this is the user that initiated the retry.
+     */
+    requestedBy: WebApi.IdentityRef;
     /**
      * Gets or sets the timeline identifier which owns the record representing this attempt.
      */

package/Git/Git.d.ts

@@ -586,7 +586,7 @@ export interface CreateMigrationRequest {
      */
     gitHubUserToken: string;
     /**
-     * Optional. The ID of a GitHub Enterprise service connection to use for pipeline rewiring. May be supplied at create time or attached later via PUT /pipelines. When EnableAutoDiscoverPipelines is opted in but no connection is attached, auto-discovery and clone-definition creation no-op during sync, and cutover is blocked by the cutover-readiness check until a connection is attached.
+     * Optional. The ID of a GitHub Enterprise service connection to use for pipeline rewiring. May be supplied at create time or attached later via PUT /pipelines. Required at create time when EnableAutoDiscoverPipelines is opted in: a create request that enables auto-discovery without a pipeline service connection is rejected with HTTP 400.
      */
     pipelineServiceConnectionId: string;
     /**
@@ -737,6 +737,22 @@ export interface FileDiff {
  * Provides properties that describe detailed file differences including line content
  */
 export interface FileDiffDetail {
+    /**
+     * The type of change (add, delete, rename, edit, etc.)
+     */
+    changeType: VersionControlChangeType;
+    /**
+     * Whether the item is a folder.
+     */
+    isFolder: boolean;
+    /**
+     * Whether the item has the Linux executable bit set.
+     */
+    isLinuxExecutable: boolean;
+    /**
+     * Whether the item is a symbolic link.
+     */
+    isSymbolicLink: boolean;
     /**
      * The collection of detailed line diff blocks
      */

package/Management/Management.d.ts

@@ -121,7 +121,11 @@ export declare enum AlertType {
     /**
      * The code uses a dependency with potential license incompliance.
      */
-    License = 4
+    License = 4,
+    /**
+     * The code contains a weakness determined by AI-powered analysis.
+     */
+    AICode = 5
 }
 /**
  * Billable Committers Details for Advanced Security Services

package/Management/Management.js

@@ -28,6 +28,10 @@ var AlertType;
      * The code uses a dependency with potential license incompliance.
      */
     AlertType[AlertType["License"] = 4] = "License";
+    /**
+     * The code contains a weakness determined by AI-powered analysis.
+     */
+    AlertType[AlertType["AICode"] = 5] = "AICode";
 })(AlertType || (exports.AlertType = AlertType = {}));
 var Plan;
 (function (Plan) {

package/Management/Management.min.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.Plan=exports.AlertType=void 0;var AlertType;!function(e){e[e.Unknown=0]="Unknown",e[e.Dependency=1]="Dependency",e[e.Secret=2]="Secret",e[e.Code=3]="Code",e[e.License=4]="License"}(AlertType||(exports.AlertType=AlertType={}));var Plan;!function(e){e[e.None=0]="None",e[e.CodeSecurity=1]="CodeSecurity",e[e.SecretProtection=2]="SecretProtection",e[e.All=3]="All"}(Plan||(exports.Plan=Plan={}));
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.Plan=exports.AlertType=void 0;var AlertType;!function(e){e[e.Unknown=0]="Unknown",e[e.Dependency=1]="Dependency",e[e.Secret=2]="Secret",e[e.Code=3]="Code",e[e.License=4]="License",e[e.AICode=5]="AICode"}(AlertType||(exports.AlertType=AlertType={}));var Plan;!function(e){e[e.None=0]="None",e[e.CodeSecurity=1]="CodeSecurity",e[e.SecretProtection=2]="SecretProtection",e[e.All=3]="All"}(Plan||(exports.Plan=Plan={}));

package/TaskAgent/TaskAgent.d.ts

@@ -2697,7 +2697,7 @@ export interface TaskAgentSkuUsageSummaryQuery {
      */
     queueId: number;
     /**
-     * Optional: narrow results to a specific project before grouping. Typically used when drilling down from pool → project, with GroupBy set to DefinitionId to see pipelines within that project.
+     * Optional: narrow results to a specific project before grouping. Typically used when drilling down from pool to project, with GroupBy set to DefinitionId to see pipelines within that project.
      */
     scopeIdentifier: string;
     /**
@@ -2713,6 +2713,10 @@ export interface TaskAgentSkuUsageSummaryQuery {
  * Result of a SKU usage query. Contains the original query and the ranked usage rows.
  */
 export interface TaskAgentSkuUsageSummaryResult {
+    /**
+     * Freshness marker on the result: jobs that finished after this moment are not yet reflected in Usages.
+     */
+    lastBilledAt: Date;
     /**
      * The query that produced this result.
      */
@@ -2763,6 +2767,10 @@ export interface TaskAgentSkuUsageTrendQuery {
  * Result of a SKU usage trend query. Contains the original query and the daily usage data points.
  */
 export interface TaskAgentSkuUsageTrendResult {
+    /**
+     * Freshness marker on the result: jobs that finished after this moment are not yet reflected in Points.
+     */
+    lastBilledAt: Date;
     /**
      * Usage data points, ordered by date ascending. Buckets with no usage are not included.
      */

package/Test/Test.d.ts

@@ -1589,10 +1589,18 @@ export interface PipelineDebuggerResponse {
      * When the analysis has already completed for this build, contains the cached result so the caller does not need a separate GET request. Null when the job is newly queued or still in progress.
      */
     analysisResult: PipelineDebuggerAnalysisOutput;
+    /**
+     * GitHub OAuth authorization URL. Present only when NeedsAuth is true.
+     */
+    authUrl: string;
     /**
      * Human-readable status message (e.g. "queued successfully", "already running", or "Analysis already completed").
      */
     message: string;
+    /**
+     * True when the user needs to authorize the GitHub Copilot app before analysis can proceed. The client should open a popup to AuthUrl and retry after authorization completes.
+     */
+    needsAuth: boolean;
 }
 /**
  * Pipeline reference
@@ -2912,11 +2920,17 @@ export interface TestActionResultModel extends TestResultModelBase {
     url: string;
 }
 export interface TestAgentCallbackRequest {
+    buildId: number;
+    resultPayload: string;
     success: boolean;
     task: string;
     workItemId: number;
 }
 export interface TestAgentTriggerRequest {
+    branchName: string;
+    configJsonPath: string;
+    repoName: string;
+    scriptFolderName: string;
     task: string;
     workItemId: number;
 }