azure-devops-extension-api 5.274.0 → 5.276.0

package/AdvancedSecurity.Reporting/Reporting.d.ts

@@ -124,7 +124,11 @@ export declare enum AlertType {
     /**
      * The code uses a dependency with potential license incompliance.
      */
-    License = 4
+    License = 4,
+    /**
+     * The code contains a weakness determined by AI-powered analysis.
+     */
+    AICode = 5
 }
 export declare enum AlertValidityStatus {
     /**
@@ -705,7 +709,11 @@ export declare enum State {
     /**
      * The tool has determined that the issue is no longer a risk
      */
-    AutoDismissed = 8
+    AutoDismissed = 8,
+    /**
+     * Alert is in a draft state and is only visible to identities in the Advanced Security draft-alert privileged identity list. Filtered out of all Get alert responses (results and counts) for non-privileged callers.
+     */
+    Draft = 16
 }
 export declare enum TimePeriod {
     Undefined = 0,

package/AdvancedSecurity.Reporting/Reporting.js

@@ -28,6 +28,10 @@ var AlertType;
      * The code uses a dependency with potential license incompliance.
      */
     AlertType[AlertType["License"] = 4] = "License";
+    /**
+     * The code contains a weakness determined by AI-powered analysis.
+     */
+    AlertType[AlertType["AICode"] = 5] = "AICode";
 })(AlertType || (exports.AlertType = AlertType = {}));
 var AlertValidityStatus;
 (function (AlertValidityStatus) {
@@ -191,6 +195,10 @@ var State;
      * The tool has determined that the issue is no longer a risk
      */
     State[State["AutoDismissed"] = 8] = "AutoDismissed";
+    /**
+     * Alert is in a draft state and is only visible to identities in the Advanced Security draft-alert privileged identity list. Filtered out of all Get alert responses (results and counts) for non-privileged callers.
+     */
+    State[State["Draft"] = 16] = "Draft";
 })(State || (exports.State = State = {}));
 var TimePeriod;
 (function (TimePeriod) {

package/AdvancedSecurity.Reporting/Reporting.min.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.TimePeriod=exports.State=exports.Severity=exports.DismissalType=exports.DashboardAlertState=exports.ComponentType=exports.AlertValidityStatus=exports.AlertType=void 0;var AlertType;!function(e){e[e.Unknown=0]="Unknown",e[e.Dependency=1]="Dependency",e[e.Secret=2]="Secret",e[e.Code=3]="Code",e[e.License=4]="License"}(AlertType||(exports.AlertType=AlertType={}));var AlertValidityStatus;!function(e){e[e.None=0]="None",e[e.Unknown=1]="Unknown",e[e.Active=2]="Active",e[e.Inactive=3]="Inactive"}(AlertValidityStatus||(exports.AlertValidityStatus=AlertValidityStatus={}));var ComponentType;!function(e){e[e.Unknown=0]="Unknown",e[e.NuGet=1]="NuGet",e[e.Npm=2]="Npm",e[e.Maven=3]="Maven",e[e.Git=4]="Git",e[e.Other=5]="Other",e[e.RubyGems=6]="RubyGems",e[e.Cargo=7]="Cargo",e[e.Pip=8]="Pip",e[e.File=9]="File",e[e.Go=10]="Go",e[e.DockerImage=11]="DockerImage",e[e.Pod=12]="Pod",e[e.Linux=13]="Linux",e[e.Conda=14]="Conda",e[e.DockerReference=15]="DockerReference",e[e.Vcpkg=16]="Vcpkg"}(ComponentType||(exports.ComponentType=ComponentType={}));var DashboardAlertState;!function(e){e[e.Open=0]="Open",e[e.Closed=1]="Closed"}(DashboardAlertState||(exports.DashboardAlertState=DashboardAlertState={}));var DismissalType;!function(e){e[e.Unknown=0]="Unknown",e[e.Fixed=1]="Fixed",e[e.AcceptedRisk=2]="AcceptedRisk",e[e.FalsePositive=3]="FalsePositive",e[e.AgreedToGuidance=4]="AgreedToGuidance",e[e.ToolUpgrade=5]="ToolUpgrade",e[e.NotDistributed=6]="NotDistributed"}(DismissalType||(exports.DismissalType=DismissalType={}));var Severity;!function(e){e[e.Low=0]="Low",e[e.Medium=1]="Medium",e[e.High=2]="High",e[e.Critical=3]="Critical",e[e.Note=4]="Note",e[e.Warning=5]="Warning",e[e.Error=6]="Error",e[e.Undefined=7]="Undefined"}(Severity||(exports.Severity=Severity={}));var State;!function(e){e[e.Unknown=0]="Unknown",e[e.Active=1]="Active",e[e.Dismissed=2]="Dismissed",e[e.Fixed=4]="Fixed",e[e.AutoDismissed=8]="AutoDismissed"}(State||(exports.State=State={}));var TimePeriod;!function(e){e[e.Undefined=0]="Undefined",e[e.Last24Hours=5]="Last24Hours",e[e.Last7Days=6]="Last7Days",e[e.Last14Days=7]="Last14Days",e[e.Last30Days=8]="Last30Days",e[e.Last90Days=9]="Last90Days"}(TimePeriod||(exports.TimePeriod=TimePeriod={}));
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.TimePeriod=exports.State=exports.Severity=exports.DismissalType=exports.DashboardAlertState=exports.ComponentType=exports.AlertValidityStatus=exports.AlertType=void 0;var AlertType;!function(e){e[e.Unknown=0]="Unknown",e[e.Dependency=1]="Dependency",e[e.Secret=2]="Secret",e[e.Code=3]="Code",e[e.License=4]="License",e[e.AICode=5]="AICode"}(AlertType||(exports.AlertType=AlertType={}));var AlertValidityStatus;!function(e){e[e.None=0]="None",e[e.Unknown=1]="Unknown",e[e.Active=2]="Active",e[e.Inactive=3]="Inactive"}(AlertValidityStatus||(exports.AlertValidityStatus=AlertValidityStatus={}));var ComponentType;!function(e){e[e.Unknown=0]="Unknown",e[e.NuGet=1]="NuGet",e[e.Npm=2]="Npm",e[e.Maven=3]="Maven",e[e.Git=4]="Git",e[e.Other=5]="Other",e[e.RubyGems=6]="RubyGems",e[e.Cargo=7]="Cargo",e[e.Pip=8]="Pip",e[e.File=9]="File",e[e.Go=10]="Go",e[e.DockerImage=11]="DockerImage",e[e.Pod=12]="Pod",e[e.Linux=13]="Linux",e[e.Conda=14]="Conda",e[e.DockerReference=15]="DockerReference",e[e.Vcpkg=16]="Vcpkg"}(ComponentType||(exports.ComponentType=ComponentType={}));var DashboardAlertState;!function(e){e[e.Open=0]="Open",e[e.Closed=1]="Closed"}(DashboardAlertState||(exports.DashboardAlertState=DashboardAlertState={}));var DismissalType;!function(e){e[e.Unknown=0]="Unknown",e[e.Fixed=1]="Fixed",e[e.AcceptedRisk=2]="AcceptedRisk",e[e.FalsePositive=3]="FalsePositive",e[e.AgreedToGuidance=4]="AgreedToGuidance",e[e.ToolUpgrade=5]="ToolUpgrade",e[e.NotDistributed=6]="NotDistributed"}(DismissalType||(exports.DismissalType=DismissalType={}));var Severity;!function(e){e[e.Low=0]="Low",e[e.Medium=1]="Medium",e[e.High=2]="High",e[e.Critical=3]="Critical",e[e.Note=4]="Note",e[e.Warning=5]="Warning",e[e.Error=6]="Error",e[e.Undefined=7]="Undefined"}(Severity||(exports.Severity=Severity={}));var State;!function(e){e[e.Unknown=0]="Unknown",e[e.Active=1]="Active",e[e.Dismissed=2]="Dismissed",e[e.Fixed=4]="Fixed",e[e.AutoDismissed=8]="AutoDismissed",e[e.Draft=16]="Draft"}(State||(exports.State=State={}));var TimePeriod;!function(e){e[e.Undefined=0]="Undefined",e[e.Last24Hours=5]="Last24Hours",e[e.Last7Days=6]="Last7Days",e[e.Last14Days=7]="Last14Days",e[e.Last30Days=8]="Last30Days",e[e.Last90Days=9]="Last90Days"}(TimePeriod||(exports.TimePeriod=TimePeriod={}));

package/Alert/Alert.d.ts

@@ -1,11 +1,28 @@
 import * as WebApi from "../WebApi/WebApi";
+/**
+ * Reference to the AI metadata blob associated with an AI code alert. Allows a consumer to download the full metadata blob. No querying over the blob contents is supported.
+ */
+export interface AIMetadataBlobReference {
+    /**
+     * URL to download the full AI metadata blob.
+     */
+    downloadUrl: string;
+}
 export interface Alert {
+    /**
+     * Additional information message to display for this alert. For ASAN tools, contains crash details formatted in code blocks. For AI code scanning tools, contains markdown content from result.message.markdown.
+     */
+    additionalInformationMessage: string;
     /**
      * Additional properties of this alert.
      */
     additionalProperties: {
         [key: string]: any;
     };
+    /**
+     * Reference to the AI metadata blob associated with the alert (AI code alerts only). Only returned on demand in Get API with Expand parameter set to be AIMetadataBlobReference (not returned in List API).
+     */
+    aiMetadataBlobReference: AIMetadataBlobReference;
     /**
      * Identifier for the alert. It is unique within Azure DevOps organization.
      */
@@ -46,6 +63,10 @@ export interface Alert {
      * Value indicates whether the alert can be auto-fixed by Copilot Autofix. True when the alert is a code scanning alert detected by CodeQL with a supported rule. Null when the value has not been computed for this code path.
      */
     isAutoFixable: boolean;
+    /**
+     * Value indicates whether the alert was generated for a development dependency. True indicates development dependency, false indicates runtime dependency, and null indicates unknown or not applicable.
+     */
+    isDevDependency: boolean;
     /**
      * This value is computed and returned by the service. This value represents the last time the service has seen this issue reported in an analysis instance.
      */
@@ -145,6 +166,19 @@ export interface AlertBatchRequest {
      */
     alertType: AlertType;
 }
+/**
+ * Request model for batch-updating alert states.
+ */
+export interface AlertBatchStateUpdateRequest {
+    /**
+     * The list of individual alert state changes to apply. Max 100 items per request.
+     */
+    alertStateUpdateList: AlertStateUpdateForAlert[];
+    /**
+     * The alert type of the alerts being updated. Defaults to AICode if not specified.
+     */
+    alertType: AlertType;
+}
 export declare enum AlertListExpandOption {
     /**
      * No Expands.
@@ -216,6 +250,27 @@ export interface AlertStateUpdate {
     dismissedReason: DismissalType;
     state: State;
 }
+/**
+ * Represents a state update for a single alert within a batch request.
+ */
+export interface AlertStateUpdateForAlert {
+    /**
+     * The ID of the alert to update.
+     */
+    alertId: number;
+    /**
+     * Comment for dismissal (e.g., "Dismissed by AI scan validation").
+     */
+    dismissedComment: string;
+    /**
+     * Reason for dismissal. Required when State == Dismissed.
+     */
+    dismissedReason: DismissalType;
+    /**
+     * The state to transition the alert to (Active, Dismissed, or Draft). Draft means the alert is indeterminate and should remain in its current state.
+     */
+    state: State;
+}
 export declare enum AlertType {
     /**
      * The code has an unspecified vulnerability type
@@ -236,7 +291,11 @@ export declare enum AlertType {
     /**
      * The code uses a dependency with potential license incompliance.
      */
-    License = 4
+    License = 4,
+    /**
+     * The code contains a weakness determined by AI-powered analysis.
+     */
+    AICode = 5
 }
 export declare enum AlertValidationRequestStatus {
     /**
@@ -399,12 +458,24 @@ export interface AnalysisResult {
  * Payload sent by the autofix pipeline to report the outcome of a run.
  */
 export interface AutofixCallbackRequest {
+    /**
+     * Optional diagnostic detail captured by the pipeline when the run fails — the tail of the pipeline run log (where the failing step's output is), bounded by the pipeline to fit the trace message size limit. Null or empty for successful runs or when no output was captured.
+     */
+    errorDetails: string;
+    /**
+     * Orchestration plan id (System.PlanId) of the pipeline run reporting this callback.
+     */
+    pipelinePlanId: string;
     pullRequestId: number;
     requestId: number;
     /**
      * Terminal status reported by the pipeline.
      */
     status: AutofixCallbackStatus;
+    /**
+     * Total nanoAIU consumed by the autofix binary.
+     */
+    tokenUsage: number;
 }
 export declare enum AutofixCallbackStatus {
     /**
@@ -414,16 +485,51 @@ export declare enum AutofixCallbackStatus {
     /**
      * The pipeline or post-processing failed.
      */
-    Failed = 1
+    Failed = 1,
+    /**
+     * The pipeline completed successfully but the autofix binary produced no changes, so no pull request was created.
+     */
+    NoChangesProduced = 2
 }
 /**
  * Represents an autofix request resource.
  */
 export interface AutofixRequest {
     createdDate: Date;
+    failedReason: AutofixRequestFailedReason;
+    pipelinePlanId: string;
     requestId: number;
     status: AutofixRequestStatus;
 }
+/**
+ * Indicates the reason an autofix request failed. Maps to TINYINT (nullable) in the database.
+ */
+export declare enum AutofixRequestFailedReason {
+    /**
+     * Default sentinel value; not a valid failure reason.
+     */
+    None = 0,
+    /**
+     * The autofix pipeline run completed with a failure status.
+     */
+    PipelineFailed = 1,
+    /**
+     * The autofix pipeline did not complete within the allowed time window.
+     */
+    PipelineTimedOut = 2,
+    /**
+     * The expected callback from the pipeline was never received.
+     */
+    CallbackNotReceived = 3,
+    /**
+     * The processor job encountered an error.
+     */
+    ProcessorJobFailed = 4,
+    /**
+     * The pipeline completed successfully but produced no changes, so no pull request was created. A valid terminal outcome surfaced as a failure with this distinct reason.
+     */
+    NoChanges = 5
+}
 /**
  * Indicates the lifecycle status of an autofix request. Maps to TINYINT in the database.
  */
@@ -596,6 +702,10 @@ export interface DependencyResult {
      */
     versionControlFilePath: VersionControlFilePath;
 }
+export declare enum DependencyScope {
+    Runtime = 0,
+    Development = 1
+}
 /**
  * Information about an alert dismissal
  */
@@ -660,7 +770,11 @@ export declare enum ExpandOption {
     /**
      * Return validationFingerprints in Alert.
      */
-    ValidationFingerprint = 1
+    ValidationFingerprint = 1,
+    /**
+     * Return the AI metadata blob reference in Alert.
+     */
+    AIMetadataBlobReference = 2
 }
 /**
  * Details for a legal review for a given component
@@ -1011,7 +1125,15 @@ export declare enum SarifJobStatus {
     /**
      * The job is currently being processed in the concurrent processing workflow exclusive for no autofix flows
      */
-    ConcurrentProcessing = 5
+    ConcurrentProcessing = 5,
+    /**
+     * The original AI SARIF has been superseded by a consolidated SARIF (AI alert consolidation experiment). Terminal status: the original is never processed for alerts and is never re-consolidated.
+     */
+    Consolidated = 6,
+    /**
+     * An original AI SARIF awaiting consolidation (AI alert consolidation experiment). Excluded from normal alert processing; selected by the consolidation job, which moves it to Consolidated once it has launched the consolidation pipeline.
+     */
+    WaitingConsolidation = 7
 }
 export interface SarifUploadStatus {
     errors: SarifValidationError[];
@@ -1039,6 +1161,10 @@ export interface SearchCriteria {
      * If provided, only alerts for this dependency are returned. \<br /\>Otherwise, return alerts for all dependencies. \<br /\>In a sarif submission, a dependency (or a component) is specified in result.RelatedLocations[].logicalLocation. \<br /\>Not applicable for secret alerts.
      */
     dependencyName: string;
+    /**
+     * If provided, only alerts for dependencies in this scope are returned. \<br /\>Otherwise, return alerts regardless of scope. \<br /\>Only applicable for dependency alerts.
+     */
+    dependencyScope: DependencyScope;
     /**
      * If provided, only return alerts last seen after this date. \<br /\>Otherwise return all alerts.
      */
@@ -1111,6 +1237,10 @@ export interface SearchCriteria {
      * If provided with toolName, only return alerts detected by this tool. \<br /\>Otherwise, return alerts detected by all tools.
      */
     toolName: string;
+    /**
+     * If provided, only return alerts detected by these tools. \<br /\>Takes precedence over ToolName when populated. \<br /\>Requires the EnableMultiToolSelection feature flag.
+     */
+    toolNames: string[];
     /**
      * If provided, only return alerts with the validity specified here. If the validity status is Unknown, fetch alerts of all validity results. \<br /\>Only applicable for secret alerts. \<br /\>Filtering by validity status may cause less alerts to be returned than requested with TOP parameter. \<br /\>Due to this behavior, the ContinuationToken(\<![CDATA[\<header name\>]]\>) in the response header should be relied on to decide if another batch needs to be fetched.
      */
@@ -1146,12 +1276,20 @@ export declare enum State {
     /**
      * The tool has determined that the issue is no longer a risk
      */
-    AutoDismissed = 8
+    AutoDismissed = 8,
+    /**
+     * Alert is in a draft state and is only visible to identities in the Advanced Security draft-alert privileged identity list. Filtered out of all Get alert responses (results and counts) for non-privileged callers.
+     */
+    Draft = 16
 }
 /**
  * An Analysis tool that can generate security alerts
  */
 export interface Tool {
+    /**
+     * Whether the tool produces deterministic results. Used to group tools in the alerts filter UI.
+     */
+    isDeterministic: boolean;
     /**
      * Name of the tool
      */

package/Alert/Alert.js

@@ -5,7 +5,7 @@
  * ---------------------------------------------------------
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ValidationResult = exports.State = exports.Severity = exports.SarifJobStatus = exports.ResultType = exports.MetadataOperation = exports.MetadataChangeType = exports.LicenseType = exports.LicenseState = exports.ExpandOption = exports.DismissalType = exports.DependencyKind = exports.Confidence = exports.ComponentType = exports.AutofixRequestStatus = exports.AutofixCallbackStatus = exports.AnalysisConfigurationType = exports.AlertValidityStatus = exports.AlertValidationRequestStatus = exports.AlertType = exports.AlertMetadataErrorPolicy = exports.AlertListExpandOption = void 0;
+exports.ValidationResult = exports.State = exports.Severity = exports.SarifJobStatus = exports.ResultType = exports.MetadataOperation = exports.MetadataChangeType = exports.LicenseType = exports.LicenseState = exports.ExpandOption = exports.DismissalType = exports.DependencyScope = exports.DependencyKind = exports.Confidence = exports.ComponentType = exports.AutofixRequestStatus = exports.AutofixRequestFailedReason = exports.AutofixCallbackStatus = exports.AnalysisConfigurationType = exports.AlertValidityStatus = exports.AlertValidationRequestStatus = exports.AlertType = exports.AlertMetadataErrorPolicy = exports.AlertListExpandOption = void 0;
 var AlertListExpandOption;
 (function (AlertListExpandOption) {
     /**
@@ -57,6 +57,10 @@ var AlertType;
      * The code uses a dependency with potential license incompliance.
      */
     AlertType[AlertType["License"] = 4] = "License";
+    /**
+     * The code contains a weakness determined by AI-powered analysis.
+     */
+    AlertType[AlertType["AICode"] = 5] = "AICode";
 })(AlertType || (exports.AlertType = AlertType = {}));
 var AlertValidationRequestStatus;
 (function (AlertValidationRequestStatus) {
@@ -121,7 +125,41 @@ var AutofixCallbackStatus;
      * The pipeline or post-processing failed.
      */
     AutofixCallbackStatus[AutofixCallbackStatus["Failed"] = 1] = "Failed";
+    /**
+     * The pipeline completed successfully but the autofix binary produced no changes, so no pull request was created.
+     */
+    AutofixCallbackStatus[AutofixCallbackStatus["NoChangesProduced"] = 2] = "NoChangesProduced";
 })(AutofixCallbackStatus || (exports.AutofixCallbackStatus = AutofixCallbackStatus = {}));
+/**
+ * Indicates the reason an autofix request failed. Maps to TINYINT (nullable) in the database.
+ */
+var AutofixRequestFailedReason;
+(function (AutofixRequestFailedReason) {
+    /**
+     * Default sentinel value; not a valid failure reason.
+     */
+    AutofixRequestFailedReason[AutofixRequestFailedReason["None"] = 0] = "None";
+    /**
+     * The autofix pipeline run completed with a failure status.
+     */
+    AutofixRequestFailedReason[AutofixRequestFailedReason["PipelineFailed"] = 1] = "PipelineFailed";
+    /**
+     * The autofix pipeline did not complete within the allowed time window.
+     */
+    AutofixRequestFailedReason[AutofixRequestFailedReason["PipelineTimedOut"] = 2] = "PipelineTimedOut";
+    /**
+     * The expected callback from the pipeline was never received.
+     */
+    AutofixRequestFailedReason[AutofixRequestFailedReason["CallbackNotReceived"] = 3] = "CallbackNotReceived";
+    /**
+     * The processor job encountered an error.
+     */
+    AutofixRequestFailedReason[AutofixRequestFailedReason["ProcessorJobFailed"] = 4] = "ProcessorJobFailed";
+    /**
+     * The pipeline completed successfully but produced no changes, so no pull request was created. A valid terminal outcome surfaced as a failure with this distinct reason.
+     */
+    AutofixRequestFailedReason[AutofixRequestFailedReason["NoChanges"] = 5] = "NoChanges";
+})(AutofixRequestFailedReason || (exports.AutofixRequestFailedReason = AutofixRequestFailedReason = {}));
 /**
  * Indicates the lifecycle status of an autofix request. Maps to TINYINT in the database.
  */
@@ -243,6 +281,11 @@ var DependencyKind;
      */
     DependencyKind[DependencyKind["VulnerableDependency"] = 3] = "VulnerableDependency";
 })(DependencyKind || (exports.DependencyKind = DependencyKind = {}));
+var DependencyScope;
+(function (DependencyScope) {
+    DependencyScope[DependencyScope["Runtime"] = 0] = "Runtime";
+    DependencyScope[DependencyScope["Development"] = 1] = "Development";
+})(DependencyScope || (exports.DependencyScope = DependencyScope = {}));
 var DismissalType;
 (function (DismissalType) {
     /**
@@ -284,6 +327,10 @@ var ExpandOption;
      * Return validationFingerprints in Alert.
      */
     ExpandOption[ExpandOption["ValidationFingerprint"] = 1] = "ValidationFingerprint";
+    /**
+     * Return the AI metadata blob reference in Alert.
+     */
+    ExpandOption[ExpandOption["AIMetadataBlobReference"] = 2] = "AIMetadataBlobReference";
 })(ExpandOption || (exports.ExpandOption = ExpandOption = {}));
 var LicenseState;
 (function (LicenseState) {
@@ -406,6 +453,14 @@ var SarifJobStatus;
      * The job is currently being processed in the concurrent processing workflow exclusive for no autofix flows
      */
     SarifJobStatus[SarifJobStatus["ConcurrentProcessing"] = 5] = "ConcurrentProcessing";
+    /**
+     * The original AI SARIF has been superseded by a consolidated SARIF (AI alert consolidation experiment). Terminal status: the original is never processed for alerts and is never re-consolidated.
+     */
+    SarifJobStatus[SarifJobStatus["Consolidated"] = 6] = "Consolidated";
+    /**
+     * An original AI SARIF awaiting consolidation (AI alert consolidation experiment). Excluded from normal alert processing; selected by the consolidation job, which moves it to Consolidated once it has launched the consolidation pipeline.
+     */
+    SarifJobStatus[SarifJobStatus["WaitingConsolidation"] = 7] = "WaitingConsolidation";
 })(SarifJobStatus || (exports.SarifJobStatus = SarifJobStatus = {}));
 var Severity;
 (function (Severity) {
@@ -440,6 +495,10 @@ var State;
      * The tool has determined that the issue is no longer a risk
      */
     State[State["AutoDismissed"] = 8] = "AutoDismissed";
+    /**
+     * Alert is in a draft state and is only visible to identities in the Advanced Security draft-alert privileged identity list. Filtered out of all Get alert responses (results and counts) for non-privileged callers.
+     */
+    State[State["Draft"] = 16] = "Draft";
 })(State || (exports.State = State = {}));
 var ValidationResult;
 (function (ValidationResult) {

package/Alert/Alert.min.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.ValidationResult=exports.State=exports.Severity=exports.SarifJobStatus=exports.ResultType=exports.MetadataOperation=exports.MetadataChangeType=exports.LicenseType=exports.LicenseState=exports.ExpandOption=exports.DismissalType=exports.DependencyKind=exports.Confidence=exports.ComponentType=exports.AutofixRequestStatus=exports.AutofixCallbackStatus=exports.AnalysisConfigurationType=exports.AlertValidityStatus=exports.AlertValidationRequestStatus=exports.AlertType=exports.AlertMetadataErrorPolicy=exports.AlertListExpandOption=void 0;var AlertListExpandOption;!function(e){e[e.None=0]="None",e[e.Minimal=1]="Minimal",e[e.Count=2]="Count"}(AlertListExpandOption||(exports.AlertListExpandOption=AlertListExpandOption={}));var AlertMetadataErrorPolicy;!function(e){e[e.Fail=1]="Fail",e[e.Omit=2]="Omit"}(AlertMetadataErrorPolicy||(exports.AlertMetadataErrorPolicy=AlertMetadataErrorPolicy={}));var AlertType;!function(e){e[e.Unknown=0]="Unknown",e[e.Dependency=1]="Dependency",e[e.Secret=2]="Secret",e[e.Code=3]="Code",e[e.License=4]="License"}(AlertType||(exports.AlertType=AlertType={}));var AlertValidationRequestStatus;!function(e){e[e.None=0]="None",e[e.Created=1]="Created",e[e.InProgress=2]="InProgress",e[e.Completed=3]="Completed",e[e.Failed=4]="Failed"}(AlertValidationRequestStatus||(exports.AlertValidationRequestStatus=AlertValidationRequestStatus={}));var AlertValidityStatus;!function(e){e[e.None=0]="None",e[e.Unknown=1]="Unknown",e[e.Active=2]="Active",e[e.Inactive=3]="Inactive"}(AlertValidityStatus||(exports.AlertValidityStatus=AlertValidityStatus={}));var AnalysisConfigurationType;!function(e){e[e.Default=0]="Default",e[e.AdoPipeline=1]="AdoPipeline"}(AnalysisConfigurationType||(exports.AnalysisConfigurationType=AnalysisConfigurationType={}));var AutofixCallbackStatus;!function(e){e[e.Done=0]="Done",e[e.Failed=1]="Failed"}(AutofixCallbackStatus||(exports.AutofixCallbackStatus=AutofixCallbackStatus={}));var AutofixRequestStatus;!function(e){e[e.None=0]="None",e[e.Pending=1]="Pending",e[e.PipelineRunning=2]="PipelineRunning",e[e.Done=3]="Done",e[e.Failed=4]="Failed"}(AutofixRequestStatus||(exports.AutofixRequestStatus=AutofixRequestStatus={}));var ComponentType;!function(e){e[e.Unknown=0]="Unknown",e[e.NuGet=1]="NuGet",e[e.Npm=2]="Npm",e[e.Maven=3]="Maven",e[e.Git=4]="Git",e[e.Other=5]="Other",e[e.RubyGems=6]="RubyGems",e[e.Cargo=7]="Cargo",e[e.Pip=8]="Pip",e[e.File=9]="File",e[e.Go=10]="Go",e[e.DockerImage=11]="DockerImage",e[e.Pod=12]="Pod",e[e.Linux=13]="Linux",e[e.Conda=14]="Conda",e[e.DockerReference=15]="DockerReference",e[e.Vcpkg=16]="Vcpkg"}(ComponentType||(exports.ComponentType=ComponentType={}));var Confidence;!function(e){e[e.High=0]="High",e[e.Other=1]="Other"}(Confidence||(exports.Confidence=Confidence={}));var DependencyKind;!function(e){e[e.Unknown=0]="Unknown",e[e.RootDependency=1]="RootDependency",e[e.Component=2]="Component",e[e.VulnerableDependency=3]="VulnerableDependency"}(DependencyKind||(exports.DependencyKind=DependencyKind={}));var DismissalType;!function(e){e[e.Unknown=0]="Unknown",e[e.Fixed=1]="Fixed",e[e.AcceptedRisk=2]="AcceptedRisk",e[e.FalsePositive=3]="FalsePositive",e[e.AgreedToGuidance=4]="AgreedToGuidance",e[e.ToolUpgrade=5]="ToolUpgrade",e[e.NotDistributed=6]="NotDistributed"}(DismissalType||(exports.DismissalType=DismissalType={}));var ExpandOption;!function(e){e[e.None=0]="None",e[e.ValidationFingerprint=1]="ValidationFingerprint"}(ExpandOption||(exports.ExpandOption=ExpandOption={}));var LicenseState;!function(e){e[e.Unknown=0]="Unknown",e[e.NotHarvested=1]="NotHarvested",e[e.Harvested=2]="Harvested"}(LicenseState||(exports.LicenseState=LicenseState={}));var LicenseType;!function(e){e[e.Unknown=0]="Unknown",e[e.Permissive=1]="Permissive",e[e.WeakCopyleft=2]="WeakCopyleft",e[e.StrongCopyleft=3]="StrongCopyleft",e[e.NetworkCopyleft=4]="NetworkCopyleft",e[e.Other=5]="Other",e[e.NoAssertion=6]="NoAssertion"}(LicenseType||(exports.LicenseType=LicenseType={}));var MetadataChangeType;!function(e){e[e.None=0]="None",e[e.Created=1]="Created",e[e.Updated=2]="Updated",e[e.Deleted=3]="Deleted"}(MetadataChangeType||(exports.MetadataChangeType=MetadataChangeType={}));var MetadataOperation;!function(e){e[e.None=0]="None",e[e.Add=1]="Add",e[e.Remove=2]="Remove"}(MetadataOperation||(exports.MetadataOperation=MetadataOperation={}));var ResultType;!function(e){e[e.Unknown=0]="Unknown",e[e.Dependency=1]="Dependency",e[e.VersionControl=2]="VersionControl"}(ResultType||(exports.ResultType=ResultType={}));var SarifJobStatus;!function(e){e[e.New=0]="New",e[e.Queued=1]="Queued",e[e.Completed=2]="Completed",e[e.Failed=3]="Failed",e[e.Requeued=4]="Requeued",e[e.ConcurrentProcessing=5]="ConcurrentProcessing"}(SarifJobStatus||(exports.SarifJobStatus=SarifJobStatus={}));var Severity;!function(e){e[e.Low=0]="Low",e[e.Medium=1]="Medium",e[e.High=2]="High",e[e.Critical=3]="Critical",e[e.Note=4]="Note",e[e.Warning=5]="Warning",e[e.Error=6]="Error",e[e.Undefined=7]="Undefined"}(Severity||(exports.Severity=Severity={}));var State;!function(e){e[e.Unknown=0]="Unknown",e[e.Active=1]="Active",e[e.Dismissed=2]="Dismissed",e[e.Fixed=4]="Fixed",e[e.AutoDismissed=8]="AutoDismissed"}(State||(exports.State=State={}));var ValidationResult;!function(e){e[e.None=0]="None",e[e.Exploitable=1]="Exploitable",e[e.NotExploitable=2]="NotExploitable",e[e.Inconclusive=3]="Inconclusive",e[e.ValidationNotSupported=4]="ValidationNotSupported",e[e.TransientError=5]="TransientError"}(ValidationResult||(exports.ValidationResult=ValidationResult={}));
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.ValidationResult=exports.State=exports.Severity=exports.SarifJobStatus=exports.ResultType=exports.MetadataOperation=exports.MetadataChangeType=exports.LicenseType=exports.LicenseState=exports.ExpandOption=exports.DismissalType=exports.DependencyScope=exports.DependencyKind=exports.Confidence=exports.ComponentType=exports.AutofixRequestStatus=exports.AutofixRequestFailedReason=exports.AutofixCallbackStatus=exports.AnalysisConfigurationType=exports.AlertValidityStatus=exports.AlertValidationRequestStatus=exports.AlertType=exports.AlertMetadataErrorPolicy=exports.AlertListExpandOption=void 0;var AlertListExpandOption;!function(e){e[e.None=0]="None",e[e.Minimal=1]="Minimal",e[e.Count=2]="Count"}(AlertListExpandOption||(exports.AlertListExpandOption=AlertListExpandOption={}));var AlertMetadataErrorPolicy;!function(e){e[e.Fail=1]="Fail",e[e.Omit=2]="Omit"}(AlertMetadataErrorPolicy||(exports.AlertMetadataErrorPolicy=AlertMetadataErrorPolicy={}));var AlertType;!function(e){e[e.Unknown=0]="Unknown",e[e.Dependency=1]="Dependency",e[e.Secret=2]="Secret",e[e.Code=3]="Code",e[e.License=4]="License",e[e.AICode=5]="AICode"}(AlertType||(exports.AlertType=AlertType={}));var AlertValidationRequestStatus;!function(e){e[e.None=0]="None",e[e.Created=1]="Created",e[e.InProgress=2]="InProgress",e[e.Completed=3]="Completed",e[e.Failed=4]="Failed"}(AlertValidationRequestStatus||(exports.AlertValidationRequestStatus=AlertValidationRequestStatus={}));var AlertValidityStatus;!function(e){e[e.None=0]="None",e[e.Unknown=1]="Unknown",e[e.Active=2]="Active",e[e.Inactive=3]="Inactive"}(AlertValidityStatus||(exports.AlertValidityStatus=AlertValidityStatus={}));var AnalysisConfigurationType;!function(e){e[e.Default=0]="Default",e[e.AdoPipeline=1]="AdoPipeline"}(AnalysisConfigurationType||(exports.AnalysisConfigurationType=AnalysisConfigurationType={}));var AutofixCallbackStatus;!function(e){e[e.Done=0]="Done",e[e.Failed=1]="Failed",e[e.NoChangesProduced=2]="NoChangesProduced"}(AutofixCallbackStatus||(exports.AutofixCallbackStatus=AutofixCallbackStatus={}));var AutofixRequestFailedReason;!function(e){e[e.None=0]="None",e[e.PipelineFailed=1]="PipelineFailed",e[e.PipelineTimedOut=2]="PipelineTimedOut",e[e.CallbackNotReceived=3]="CallbackNotReceived",e[e.ProcessorJobFailed=4]="ProcessorJobFailed",e[e.NoChanges=5]="NoChanges"}(AutofixRequestFailedReason||(exports.AutofixRequestFailedReason=AutofixRequestFailedReason={}));var AutofixRequestStatus;!function(e){e[e.None=0]="None",e[e.Pending=1]="Pending",e[e.PipelineRunning=2]="PipelineRunning",e[e.Done=3]="Done",e[e.Failed=4]="Failed"}(AutofixRequestStatus||(exports.AutofixRequestStatus=AutofixRequestStatus={}));var ComponentType;!function(e){e[e.Unknown=0]="Unknown",e[e.NuGet=1]="NuGet",e[e.Npm=2]="Npm",e[e.Maven=3]="Maven",e[e.Git=4]="Git",e[e.Other=5]="Other",e[e.RubyGems=6]="RubyGems",e[e.Cargo=7]="Cargo",e[e.Pip=8]="Pip",e[e.File=9]="File",e[e.Go=10]="Go",e[e.DockerImage=11]="DockerImage",e[e.Pod=12]="Pod",e[e.Linux=13]="Linux",e[e.Conda=14]="Conda",e[e.DockerReference=15]="DockerReference",e[e.Vcpkg=16]="Vcpkg"}(ComponentType||(exports.ComponentType=ComponentType={}));var Confidence;!function(e){e[e.High=0]="High",e[e.Other=1]="Other"}(Confidence||(exports.Confidence=Confidence={}));var DependencyKind;!function(e){e[e.Unknown=0]="Unknown",e[e.RootDependency=1]="RootDependency",e[e.Component=2]="Component",e[e.VulnerableDependency=3]="VulnerableDependency"}(DependencyKind||(exports.DependencyKind=DependencyKind={}));var DependencyScope;!function(e){e[e.Runtime=0]="Runtime",e[e.Development=1]="Development"}(DependencyScope||(exports.DependencyScope=DependencyScope={}));var DismissalType;!function(e){e[e.Unknown=0]="Unknown",e[e.Fixed=1]="Fixed",e[e.AcceptedRisk=2]="AcceptedRisk",e[e.FalsePositive=3]="FalsePositive",e[e.AgreedToGuidance=4]="AgreedToGuidance",e[e.ToolUpgrade=5]="ToolUpgrade",e[e.NotDistributed=6]="NotDistributed"}(DismissalType||(exports.DismissalType=DismissalType={}));var ExpandOption;!function(e){e[e.None=0]="None",e[e.ValidationFingerprint=1]="ValidationFingerprint",e[e.AIMetadataBlobReference=2]="AIMetadataBlobReference"}(ExpandOption||(exports.ExpandOption=ExpandOption={}));var LicenseState;!function(e){e[e.Unknown=0]="Unknown",e[e.NotHarvested=1]="NotHarvested",e[e.Harvested=2]="Harvested"}(LicenseState||(exports.LicenseState=LicenseState={}));var LicenseType;!function(e){e[e.Unknown=0]="Unknown",e[e.Permissive=1]="Permissive",e[e.WeakCopyleft=2]="WeakCopyleft",e[e.StrongCopyleft=3]="StrongCopyleft",e[e.NetworkCopyleft=4]="NetworkCopyleft",e[e.Other=5]="Other",e[e.NoAssertion=6]="NoAssertion"}(LicenseType||(exports.LicenseType=LicenseType={}));var MetadataChangeType;!function(e){e[e.None=0]="None",e[e.Created=1]="Created",e[e.Updated=2]="Updated",e[e.Deleted=3]="Deleted"}(MetadataChangeType||(exports.MetadataChangeType=MetadataChangeType={}));var MetadataOperation;!function(e){e[e.None=0]="None",e[e.Add=1]="Add",e[e.Remove=2]="Remove"}(MetadataOperation||(exports.MetadataOperation=MetadataOperation={}));var ResultType;!function(e){e[e.Unknown=0]="Unknown",e[e.Dependency=1]="Dependency",e[e.VersionControl=2]="VersionControl"}(ResultType||(exports.ResultType=ResultType={}));var SarifJobStatus;!function(e){e[e.New=0]="New",e[e.Queued=1]="Queued",e[e.Completed=2]="Completed",e[e.Failed=3]="Failed",e[e.Requeued=4]="Requeued",e[e.ConcurrentProcessing=5]="ConcurrentProcessing",e[e.Consolidated=6]="Consolidated",e[e.WaitingConsolidation=7]="WaitingConsolidation"}(SarifJobStatus||(exports.SarifJobStatus=SarifJobStatus={}));var Severity;!function(e){e[e.Low=0]="Low",e[e.Medium=1]="Medium",e[e.High=2]="High",e[e.Critical=3]="Critical",e[e.Note=4]="Note",e[e.Warning=5]="Warning",e[e.Error=6]="Error",e[e.Undefined=7]="Undefined"}(Severity||(exports.Severity=Severity={}));var State;!function(e){e[e.Unknown=0]="Unknown",e[e.Active=1]="Active",e[e.Dismissed=2]="Dismissed",e[e.Fixed=4]="Fixed",e[e.AutoDismissed=8]="AutoDismissed",e[e.Draft=16]="Draft"}(State||(exports.State=State={}));var ValidationResult;!function(e){e[e.None=0]="None",e[e.Exploitable=1]="Exploitable",e[e.NotExploitable=2]="NotExploitable",e[e.Inconclusive=3]="Inconclusive",e[e.ValidationNotSupported=4]="ValidationNotSupported",e[e.TransientError=5]="TransientError"}(ValidationResult||(exports.ValidationResult=ValidationResult={}));

package/Alert/AlertClient.d.ts

@@ -4,6 +4,18 @@ import * as Alert from "../Alert/Alert";
 import * as WebApi from "../WebApi/WebApi";
 export declare class AlertRestClient extends RestClientBase {
     constructor(options: IVssRestClientOptions);
+    /**
+     * Download the full AI metadata blob for an AI code alert.
+     *
+     * @param project - Project ID or project name
+     * @param alertId - ID of the alert whose AI metadata blob should be downloaded.
+     * @param repository - Name or id of the repository that the alert is part of.
+     */
+    getAiMetadataContent(project: string, alertId: number, repository: string): Promise<any>;
+    /**
+     * @param submissionId -
+     */
+    getSarifContent(submissionId: number): Promise<any>;
     /**
      * Get an alert.
      *
@@ -51,8 +63,17 @@ export declare class AlertRestClient extends RestClientBase {
      * @param request - Request containing alert IDs and optional alert type filter
      * @param project - Project ID or project name
      * @param repository - The name or ID of the repository
+     * @param includeSensitiveInformation - Applies to secret alerts only. When false (the default), the 'ValidationFingerprintJson' of each secret alert's validation fingerprints is omitted from the response. Set to true to include it; be aware that the validation fingerprint JSON may contain the unencrypted secret and other sensitive data, so exercise caution when requesting it.
+     */
+    getAlertsByIds(request: Alert.AlertBatchRequest, project: string, repository: string, includeSensitiveInformation?: boolean): Promise<Alert.Alert[]>;
+    /**
+     * Batch update alert states. Internal use only — used by proof scanners to transition AI-generated draft alerts to Active or Dismissed. Alerts marked as Draft (indeterminate) are left unchanged.
+     *
+     * @param request - Request containing alert state updates
+     * @param project - Project ID or project name
+     * @param repository - The name or ID of the repository
      */
-    getAlertsByIds(request: Alert.AlertBatchRequest, project: string, repository: string): Promise<Alert.Alert[]>;
+    updateAlertsBatch(request: Alert.AlertBatchStateUpdateRequest, project: string, repository: string): Promise<Alert.Alert[]>;
     /**
      * Returns the branches for which analysis results were submitted.
      *
@@ -86,16 +107,18 @@ export declare class AlertRestClient extends RestClientBase {
      * @param project - Project ID or project name
      * @param alertId - The ID of the alert to create an autofix for.
      * @param repository - The name or ID of the repository.
+     * @param ref - Optional Git ref (e.g. refs/heads/feature/x) the autofix should target. When omitted, the repository's default branch is used.
      */
-    createAutofixRequest(project: string, alertId: number, repository: string): Promise<Alert.AutofixRequest>;
+    createAutofixRequest(project: string, alertId: number, repository: string, ref?: string): Promise<Alert.AutofixRequest>;
     /**
      * Get all autofix requests for the specified alert.
      *
      * @param project - Project ID or project name
      * @param alertId - The ID of the alert.
      * @param repository - The name or ID of the repository.
+     * @param ref - Optional Git ref (e.g. refs/heads/feature/x) the autofix should target. When omitted, the repository's default branch is used.
      */
-    getAutofixRequestsByAlertId(project: string, alertId: number, repository: string): Promise<Alert.AutofixRequest[]>;
+    getAutofixRequestsByAlertId(project: string, alertId: number, repository: string, ref?: string): Promise<Alert.AutofixRequest[]>;
     /**
      * Upload a SARIF to GitHub Code Scanning via a GitOps app.
      *

package/Alert/AlertClient.js

@@ -21,6 +21,40 @@ class AlertRestClient extends RestClientBase_1.RestClientBase {
     constructor(options) {
         super(options);
     }
+    /**
+     * Download the full AI metadata blob for an AI code alert.
+     *
+     * @param project - Project ID or project name
+     * @param alertId - ID of the alert whose AI metadata blob should be downloaded.
+     * @param repository - Name or id of the repository that the alert is part of.
+     */
+    getAiMetadataContent(project, alertId, repository) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.beginRequest({
+                apiVersion: "7.2-preview.1",
+                routeTemplate: "{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}/aimetadata",
+                routeValues: {
+                    project: project,
+                    alertId: alertId,
+                    repository: repository
+                }
+            });
+        });
+    }
+    /**
+     * @param submissionId -
+     */
+    getSarifContent(submissionId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.beginRequest({
+                apiVersion: "7.2-preview.1",
+                routeTemplate: "_apis/Alert/sarifs/download/{submissionId}",
+                routeValues: {
+                    submissionId: submissionId
+                }
+            });
+        });
+    }
     /**
      * Get an alert.
      *
@@ -140,9 +174,13 @@ class AlertRestClient extends RestClientBase_1.RestClientBase {
      * @param request - Request containing alert IDs and optional alert type filter
      * @param project - Project ID or project name
      * @param repository - The name or ID of the repository
+     * @param includeSensitiveInformation - Applies to secret alerts only. When false (the default), the 'ValidationFingerprintJson' of each secret alert's validation fingerprints is omitted from the response. Set to true to include it; be aware that the validation fingerprint JSON may contain the unencrypted secret and other sensitive data, so exercise caution when requesting it.
      */
-    getAlertsByIds(request, project, repository) {
+    getAlertsByIds(request, project, repository, includeSensitiveInformation) {
         return __awaiter(this, void 0, void 0, function* () {
+            const queryValues = {
+                includeSensitiveInformation: includeSensitiveInformation
+            };
             return this.beginRequest({
                 apiVersion: "7.2-preview.1",
                 method: "POST",
@@ -151,6 +189,28 @@ class AlertRestClient extends RestClientBase_1.RestClientBase {
                     project: project,
                     repository: repository
                 },
+                queryParams: queryValues,
+                body: request
+            });
+        });
+    }
+    /**
+     * Batch update alert states. Internal use only — used by proof scanners to transition AI-generated draft alerts to Active or Dismissed. Alerts marked as Draft (indeterminate) are left unchanged.
+     *
+     * @param request - Request containing alert state updates
+     * @param project - Project ID or project name
+     * @param repository - The name or ID of the repository
+     */
+    updateAlertsBatch(request, project, repository) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.beginRequest({
+                apiVersion: "7.2-preview.1",
+                method: "PATCH",
+                routeTemplate: "{project}/_apis/Alert/repositories/{repository}/AlertsBatch",
+                routeValues: {
+                    project: project,
+                    repository: repository
+                },
                 body: request
             });
         });
@@ -239,9 +299,13 @@ class AlertRestClient extends RestClientBase_1.RestClientBase {
      * @param project - Project ID or project name
      * @param alertId - The ID of the alert to create an autofix for.
      * @param repository - The name or ID of the repository.
+     * @param ref - Optional Git ref (e.g. refs/heads/feature/x) the autofix should target. When omitted, the repository's default branch is used.
      */
-    createAutofixRequest(project, alertId, repository) {
+    createAutofixRequest(project, alertId, repository, ref) {
         return __awaiter(this, void 0, void 0, function* () {
+            const queryValues = {
+                ref: ref
+            };
             return this.beginRequest({
                 apiVersion: "7.2-preview.1",
                 method: "POST",
@@ -251,7 +315,8 @@ class AlertRestClient extends RestClientBase_1.RestClientBase {
                     alertId: alertId,
                     repository: repository,
                     action: "Default"
-                }
+                },
+                queryParams: queryValues
             });
         });
     }
@@ -261,9 +326,13 @@ class AlertRestClient extends RestClientBase_1.RestClientBase {
      * @param project - Project ID or project name
      * @param alertId - The ID of the alert.
      * @param repository - The name or ID of the repository.
+     * @param ref - Optional Git ref (e.g. refs/heads/feature/x) the autofix should target. When omitted, the repository's default branch is used.
      */
-    getAutofixRequestsByAlertId(project, alertId, repository) {
+    getAutofixRequestsByAlertId(project, alertId, repository, ref) {
         return __awaiter(this, void 0, void 0, function* () {
+            const queryValues = {
+                ref: ref
+            };
             return this.beginRequest({
                 apiVersion: "7.2-preview.1",
                 routeTemplate: "{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}/Autofix/{action}",
@@ -272,7 +341,8 @@ class AlertRestClient extends RestClientBase_1.RestClientBase {
                     alertId: alertId,
                     repository: repository,
                     action: "Default"
-                }
+                },
+                queryParams: queryValues
             });
         });
     }