azure-devops-extension-api 5.275.0 → 5.279.1

package/Alert/Alert.js

@@ -5,7 +5,39 @@
  * ---------------------------------------------------------
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ValidationResult = exports.State = exports.Severity = exports.SarifJobStatus = exports.ResultType = exports.MetadataOperation = exports.MetadataChangeType = exports.LicenseType = exports.LicenseState = exports.ExpandOption = exports.DismissalType = exports.DependencyKind = exports.Confidence = exports.ComponentType = exports.AutofixRequestStatus = exports.AutofixCallbackStatus = exports.AnalysisConfigurationType = exports.AlertValidityStatus = exports.AlertValidationRequestStatus = exports.AlertType = exports.AlertMetadataErrorPolicy = exports.AlertListExpandOption = void 0;
+exports.ValidationResult = exports.State = exports.Severity = exports.SarifJobStatus = exports.ResultType = exports.MetadataOperation = exports.MetadataChangeType = exports.LicenseType = exports.LicenseState = exports.ExpandOption = exports.DismissalType = exports.DependencyScope = exports.DependencyKind = exports.Confidence = exports.ComponentType = exports.AutofixRequestStatus = exports.AutofixRequestFailedReason = exports.AutofixCallbackStatus = exports.AnalysisConfigurationType = exports.AlertValidityStatus = exports.AlertValidationRequestStatus = exports.AlertType = exports.AlertMetadataErrorPolicy = exports.AlertListExpandOption = exports.AlertJobType = exports.AlertJobArtifactType = void 0;
+/**
+ * Identifies the supported artifact types produced by an alert job.
+ */
+var AlertJobArtifactType;
+(function (AlertJobArtifactType) {
+    /**
+     * An artifact type not recognized by this client version.
+     */
+    AlertJobArtifactType[AlertJobArtifactType["Unknown"] = 0] = "Unknown";
+    /**
+     * An Azure Repos pull request.
+     */
+    AlertJobArtifactType[AlertJobArtifactType["PullRequest"] = 1] = "PullRequest";
+})(AlertJobArtifactType || (exports.AlertJobArtifactType = AlertJobArtifactType = {}));
+/**
+ * Identifies the supported alert job workflows.
+ */
+var AlertJobType;
+(function (AlertJobType) {
+    /**
+     * An alert job type not recognized by this client version.
+     */
+    AlertJobType[AlertJobType["Unknown"] = 0] = "Unknown";
+    /**
+     * A WIM workflow that creates a pull request.
+     */
+    AlertJobType[AlertJobType["WIMAutoPR"] = 1] = "WIMAutoPR";
+    /**
+     * An AI alert consolidation workflow.
+     */
+    AlertJobType[AlertJobType["AIAlertConsolidation"] = 2] = "AIAlertConsolidation";
+})(AlertJobType || (exports.AlertJobType = AlertJobType = {}));
 var AlertListExpandOption;
 (function (AlertListExpandOption) {
     /**
@@ -20,6 +52,10 @@ var AlertListExpandOption;
      * Return only the count of active alerts grouped by alert type.
      */
     AlertListExpandOption[AlertListExpandOption["Count"] = 2] = "Count";
+    /**
+     * Return the AI metadata blob reference in AI code alerts.
+     */
+    AlertListExpandOption[AlertListExpandOption["AIMetadataBlobReference"] = 3] = "AIMetadataBlobReference";
 })(AlertListExpandOption || (exports.AlertListExpandOption = AlertListExpandOption = {}));
 /**
  * Enum to control error policy in a bulk get alert metadata items request.
@@ -61,6 +97,10 @@ var AlertType;
      * The code contains a weakness determined by AI-powered analysis.
      */
     AlertType[AlertType["AICode"] = 5] = "AICode";
+    /**
+     * The code uses a dependency flagged as malware by the GitHub Advisory Database.
+     */
+    AlertType[AlertType["Malware"] = 6] = "Malware";
 })(AlertType || (exports.AlertType = AlertType = {}));
 var AlertValidationRequestStatus;
 (function (AlertValidationRequestStatus) {
@@ -125,7 +165,73 @@ var AutofixCallbackStatus;
      * The pipeline or post-processing failed.
      */
     AutofixCallbackStatus[AutofixCallbackStatus["Failed"] = 1] = "Failed";
+    /**
+     * The pipeline completed successfully but the autofix binary produced no changes, so no pull request was created.
+     */
+    AutofixCallbackStatus[AutofixCallbackStatus["NoChangesProduced"] = 2] = "NoChangesProduced";
+    /**
+     * The pipeline completed successfully and determined that the alert is a false positive, so no pull request was created.
+     */
+    AutofixCallbackStatus[AutofixCallbackStatus["FalsePositive"] = 3] = "FalsePositive";
+    /**
+     * The target file referenced by the analysis could not be found.
+     */
+    AutofixCallbackStatus[AutofixCallbackStatus["TargetFileNotFound"] = 4] = "TargetFileNotFound";
+    /**
+     * The push was rejected by the commit author email validation policy.
+     */
+    AutofixCallbackStatus[AutofixCallbackStatus["CommitAuthorEmailValidationFailed"] = 5] = "CommitAuthorEmailValidationFailed";
 })(AutofixCallbackStatus || (exports.AutofixCallbackStatus = AutofixCallbackStatus = {}));
+/**
+ * Indicates the reason an autofix request failed. Maps to TINYINT (nullable) in the database.
+ */
+var AutofixRequestFailedReason;
+(function (AutofixRequestFailedReason) {
+    /**
+     * Default sentinel value; not a valid failure reason.
+     */
+    AutofixRequestFailedReason[AutofixRequestFailedReason["None"] = 0] = "None";
+    /**
+     * The autofix pipeline run completed with a failure status.
+     */
+    AutofixRequestFailedReason[AutofixRequestFailedReason["PipelineFailed"] = 1] = "PipelineFailed";
+    /**
+     * The autofix pipeline did not complete within the allowed time window.
+     */
+    AutofixRequestFailedReason[AutofixRequestFailedReason["PipelineTimedOut"] = 2] = "PipelineTimedOut";
+    /**
+     * The expected callback from the pipeline was never received.
+     */
+    AutofixRequestFailedReason[AutofixRequestFailedReason["CallbackNotReceived"] = 3] = "CallbackNotReceived";
+    /**
+     * The processor job encountered an error.
+     */
+    AutofixRequestFailedReason[AutofixRequestFailedReason["ProcessorJobFailed"] = 4] = "ProcessorJobFailed";
+    /**
+     * The pipeline completed successfully but produced no changes, so no pull request was created. A valid terminal outcome surfaced as a failure with this distinct reason.
+     */
+    AutofixRequestFailedReason[AutofixRequestFailedReason["NoChanges"] = 5] = "NoChanges";
+    /**
+     * The target project's agent pool could not be found or has not been authorized for use, so the validation pipeline could not be queued. This is a user/configuration error.
+     */
+    AutofixRequestFailedReason[AutofixRequestFailedReason["AgentPoolUnavailable"] = 6] = "AgentPoolUnavailable";
+    /**
+     * The alert ref cannot be resolved to an existing branch because the pull request or merge ref, source branch, or normal branch no longer exists.
+     */
+    AutofixRequestFailedReason[AutofixRequestFailedReason["BranchNotResolvable"] = 7] = "BranchNotResolvable";
+    /**
+     * The pipeline completed successfully and determined that the alert is a false positive, so no pull request was created. This is a terminal non-PR result, not an operational pipeline failure.
+     */
+    AutofixRequestFailedReason[AutofixRequestFailedReason["FalsePositive"] = 8] = "FalsePositive";
+    /**
+     * The target file referenced by the analysis could not be found.
+     */
+    AutofixRequestFailedReason[AutofixRequestFailedReason["TargetFileNotFound"] = 9] = "TargetFileNotFound";
+    /**
+     * The push was rejected by the commit author email validation policy.
+     */
+    AutofixRequestFailedReason[AutofixRequestFailedReason["CommitAuthorEmailValidationFailed"] = 10] = "CommitAuthorEmailValidationFailed";
+})(AutofixRequestFailedReason || (exports.AutofixRequestFailedReason = AutofixRequestFailedReason = {}));
 /**
  * Indicates the lifecycle status of an autofix request. Maps to TINYINT in the database.
  */
@@ -247,6 +353,11 @@ var DependencyKind;
      */
     DependencyKind[DependencyKind["VulnerableDependency"] = 3] = "VulnerableDependency";
 })(DependencyKind || (exports.DependencyKind = DependencyKind = {}));
+var DependencyScope;
+(function (DependencyScope) {
+    DependencyScope[DependencyScope["Runtime"] = 0] = "Runtime";
+    DependencyScope[DependencyScope["Development"] = 1] = "Development";
+})(DependencyScope || (exports.DependencyScope = DependencyScope = {}));
 var DismissalType;
 (function (DismissalType) {
     /**
@@ -288,6 +399,10 @@ var ExpandOption;
      * Return validationFingerprints in Alert.
      */
     ExpandOption[ExpandOption["ValidationFingerprint"] = 1] = "ValidationFingerprint";
+    /**
+     * Return the AI metadata blob reference in Alert.
+     */
+    ExpandOption[ExpandOption["AIMetadataBlobReference"] = 2] = "AIMetadataBlobReference";
 })(ExpandOption || (exports.ExpandOption = ExpandOption = {}));
 var LicenseState;
 (function (LicenseState) {
@@ -410,6 +525,14 @@ var SarifJobStatus;
      * The job is currently being processed in the concurrent processing workflow exclusive for no autofix flows
      */
     SarifJobStatus[SarifJobStatus["ConcurrentProcessing"] = 5] = "ConcurrentProcessing";
+    /**
+     * The original AI SARIF has been superseded by a consolidated SARIF (AI alert consolidation experiment). Terminal status: the original is never processed for alerts and is never re-consolidated.
+     */
+    SarifJobStatus[SarifJobStatus["Consolidated"] = 6] = "Consolidated";
+    /**
+     * An original AI SARIF awaiting consolidation (AI alert consolidation experiment). Excluded from normal alert processing; selected by the consolidation job, which moves it to Consolidated once it has launched the consolidation pipeline.
+     */
+    SarifJobStatus[SarifJobStatus["WaitingConsolidation"] = 7] = "WaitingConsolidation";
 })(SarifJobStatus || (exports.SarifJobStatus = SarifJobStatus = {}));
 var Severity;
 (function (Severity) {

package/Alert/Alert.min.js

@@ -1 +1 @@
-"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.ValidationResult=exports.State=exports.Severity=exports.SarifJobStatus=exports.ResultType=exports.MetadataOperation=exports.MetadataChangeType=exports.LicenseType=exports.LicenseState=exports.ExpandOption=exports.DismissalType=exports.DependencyKind=exports.Confidence=exports.ComponentType=exports.AutofixRequestStatus=exports.AutofixCallbackStatus=exports.AnalysisConfigurationType=exports.AlertValidityStatus=exports.AlertValidationRequestStatus=exports.AlertType=exports.AlertMetadataErrorPolicy=exports.AlertListExpandOption=void 0;var AlertListExpandOption;!function(e){e[e.None=0]="None",e[e.Minimal=1]="Minimal",e[e.Count=2]="Count"}(AlertListExpandOption||(exports.AlertListExpandOption=AlertListExpandOption={}));var AlertMetadataErrorPolicy;!function(e){e[e.Fail=1]="Fail",e[e.Omit=2]="Omit"}(AlertMetadataErrorPolicy||(exports.AlertMetadataErrorPolicy=AlertMetadataErrorPolicy={}));var AlertType;!function(e){e[e.Unknown=0]="Unknown",e[e.Dependency=1]="Dependency",e[e.Secret=2]="Secret",e[e.Code=3]="Code",e[e.License=4]="License",e[e.AICode=5]="AICode"}(AlertType||(exports.AlertType=AlertType={}));var AlertValidationRequestStatus;!function(e){e[e.None=0]="None",e[e.Created=1]="Created",e[e.InProgress=2]="InProgress",e[e.Completed=3]="Completed",e[e.Failed=4]="Failed"}(AlertValidationRequestStatus||(exports.AlertValidationRequestStatus=AlertValidationRequestStatus={}));var AlertValidityStatus;!function(e){e[e.None=0]="None",e[e.Unknown=1]="Unknown",e[e.Active=2]="Active",e[e.Inactive=3]="Inactive"}(AlertValidityStatus||(exports.AlertValidityStatus=AlertValidityStatus={}));var AnalysisConfigurationType;!function(e){e[e.Default=0]="Default",e[e.AdoPipeline=1]="AdoPipeline"}(AnalysisConfigurationType||(exports.AnalysisConfigurationType=AnalysisConfigurationType={}));var AutofixCallbackStatus;!function(e){e[e.Done=0]="Done",e[e.Failed=1]="Failed"}(AutofixCallbackStatus||(exports.AutofixCallbackStatus=AutofixCallbackStatus={}));var AutofixRequestStatus;!function(e){e[e.None=0]="None",e[e.Pending=1]="Pending",e[e.PipelineRunning=2]="PipelineRunning",e[e.Done=3]="Done",e[e.Failed=4]="Failed"}(AutofixRequestStatus||(exports.AutofixRequestStatus=AutofixRequestStatus={}));var ComponentType;!function(e){e[e.Unknown=0]="Unknown",e[e.NuGet=1]="NuGet",e[e.Npm=2]="Npm",e[e.Maven=3]="Maven",e[e.Git=4]="Git",e[e.Other=5]="Other",e[e.RubyGems=6]="RubyGems",e[e.Cargo=7]="Cargo",e[e.Pip=8]="Pip",e[e.File=9]="File",e[e.Go=10]="Go",e[e.DockerImage=11]="DockerImage",e[e.Pod=12]="Pod",e[e.Linux=13]="Linux",e[e.Conda=14]="Conda",e[e.DockerReference=15]="DockerReference",e[e.Vcpkg=16]="Vcpkg"}(ComponentType||(exports.ComponentType=ComponentType={}));var Confidence;!function(e){e[e.High=0]="High",e[e.Other=1]="Other"}(Confidence||(exports.Confidence=Confidence={}));var DependencyKind;!function(e){e[e.Unknown=0]="Unknown",e[e.RootDependency=1]="RootDependency",e[e.Component=2]="Component",e[e.VulnerableDependency=3]="VulnerableDependency"}(DependencyKind||(exports.DependencyKind=DependencyKind={}));var DismissalType;!function(e){e[e.Unknown=0]="Unknown",e[e.Fixed=1]="Fixed",e[e.AcceptedRisk=2]="AcceptedRisk",e[e.FalsePositive=3]="FalsePositive",e[e.AgreedToGuidance=4]="AgreedToGuidance",e[e.ToolUpgrade=5]="ToolUpgrade",e[e.NotDistributed=6]="NotDistributed"}(DismissalType||(exports.DismissalType=DismissalType={}));var ExpandOption;!function(e){e[e.None=0]="None",e[e.ValidationFingerprint=1]="ValidationFingerprint"}(ExpandOption||(exports.ExpandOption=ExpandOption={}));var LicenseState;!function(e){e[e.Unknown=0]="Unknown",e[e.NotHarvested=1]="NotHarvested",e[e.Harvested=2]="Harvested"}(LicenseState||(exports.LicenseState=LicenseState={}));var LicenseType;!function(e){e[e.Unknown=0]="Unknown",e[e.Permissive=1]="Permissive",e[e.WeakCopyleft=2]="WeakCopyleft",e[e.StrongCopyleft=3]="StrongCopyleft",e[e.NetworkCopyleft=4]="NetworkCopyleft",e[e.Other=5]="Other",e[e.NoAssertion=6]="NoAssertion"}(LicenseType||(exports.LicenseType=LicenseType={}));var MetadataChangeType;!function(e){e[e.None=0]="None",e[e.Created=1]="Created",e[e.Updated=2]="Updated",e[e.Deleted=3]="Deleted"}(MetadataChangeType||(exports.MetadataChangeType=MetadataChangeType={}));var MetadataOperation;!function(e){e[e.None=0]="None",e[e.Add=1]="Add",e[e.Remove=2]="Remove"}(MetadataOperation||(exports.MetadataOperation=MetadataOperation={}));var ResultType;!function(e){e[e.Unknown=0]="Unknown",e[e.Dependency=1]="Dependency",e[e.VersionControl=2]="VersionControl"}(ResultType||(exports.ResultType=ResultType={}));var SarifJobStatus;!function(e){e[e.New=0]="New",e[e.Queued=1]="Queued",e[e.Completed=2]="Completed",e[e.Failed=3]="Failed",e[e.Requeued=4]="Requeued",e[e.ConcurrentProcessing=5]="ConcurrentProcessing"}(SarifJobStatus||(exports.SarifJobStatus=SarifJobStatus={}));var Severity;!function(e){e[e.Low=0]="Low",e[e.Medium=1]="Medium",e[e.High=2]="High",e[e.Critical=3]="Critical",e[e.Note=4]="Note",e[e.Warning=5]="Warning",e[e.Error=6]="Error",e[e.Undefined=7]="Undefined"}(Severity||(exports.Severity=Severity={}));var State;!function(e){e[e.Unknown=0]="Unknown",e[e.Active=1]="Active",e[e.Dismissed=2]="Dismissed",e[e.Fixed=4]="Fixed",e[e.AutoDismissed=8]="AutoDismissed",e[e.Draft=16]="Draft"}(State||(exports.State=State={}));var ValidationResult;!function(e){e[e.None=0]="None",e[e.Exploitable=1]="Exploitable",e[e.NotExploitable=2]="NotExploitable",e[e.Inconclusive=3]="Inconclusive",e[e.ValidationNotSupported=4]="ValidationNotSupported",e[e.TransientError=5]="TransientError"}(ValidationResult||(exports.ValidationResult=ValidationResult={}));
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.ValidationResult=exports.State=exports.Severity=exports.SarifJobStatus=exports.ResultType=exports.MetadataOperation=exports.MetadataChangeType=exports.LicenseType=exports.LicenseState=exports.ExpandOption=exports.DismissalType=exports.DependencyScope=exports.DependencyKind=exports.Confidence=exports.ComponentType=exports.AutofixRequestStatus=exports.AutofixRequestFailedReason=exports.AutofixCallbackStatus=exports.AnalysisConfigurationType=exports.AlertValidityStatus=exports.AlertValidationRequestStatus=exports.AlertType=exports.AlertMetadataErrorPolicy=exports.AlertListExpandOption=exports.AlertJobType=exports.AlertJobArtifactType=void 0;var AlertJobArtifactType;!function(e){e[e.Unknown=0]="Unknown",e[e.PullRequest=1]="PullRequest"}(AlertJobArtifactType||(exports.AlertJobArtifactType=AlertJobArtifactType={}));var AlertJobType;!function(e){e[e.Unknown=0]="Unknown",e[e.WIMAutoPR=1]="WIMAutoPR",e[e.AIAlertConsolidation=2]="AIAlertConsolidation"}(AlertJobType||(exports.AlertJobType=AlertJobType={}));var AlertListExpandOption;!function(e){e[e.None=0]="None",e[e.Minimal=1]="Minimal",e[e.Count=2]="Count",e[e.AIMetadataBlobReference=3]="AIMetadataBlobReference"}(AlertListExpandOption||(exports.AlertListExpandOption=AlertListExpandOption={}));var AlertMetadataErrorPolicy;!function(e){e[e.Fail=1]="Fail",e[e.Omit=2]="Omit"}(AlertMetadataErrorPolicy||(exports.AlertMetadataErrorPolicy=AlertMetadataErrorPolicy={}));var AlertType;!function(e){e[e.Unknown=0]="Unknown",e[e.Dependency=1]="Dependency",e[e.Secret=2]="Secret",e[e.Code=3]="Code",e[e.License=4]="License",e[e.AICode=5]="AICode",e[e.Malware=6]="Malware"}(AlertType||(exports.AlertType=AlertType={}));var AlertValidationRequestStatus;!function(e){e[e.None=0]="None",e[e.Created=1]="Created",e[e.InProgress=2]="InProgress",e[e.Completed=3]="Completed",e[e.Failed=4]="Failed"}(AlertValidationRequestStatus||(exports.AlertValidationRequestStatus=AlertValidationRequestStatus={}));var AlertValidityStatus;!function(e){e[e.None=0]="None",e[e.Unknown=1]="Unknown",e[e.Active=2]="Active",e[e.Inactive=3]="Inactive"}(AlertValidityStatus||(exports.AlertValidityStatus=AlertValidityStatus={}));var AnalysisConfigurationType;!function(e){e[e.Default=0]="Default",e[e.AdoPipeline=1]="AdoPipeline"}(AnalysisConfigurationType||(exports.AnalysisConfigurationType=AnalysisConfigurationType={}));var AutofixCallbackStatus;!function(e){e[e.Done=0]="Done",e[e.Failed=1]="Failed",e[e.NoChangesProduced=2]="NoChangesProduced",e[e.FalsePositive=3]="FalsePositive",e[e.TargetFileNotFound=4]="TargetFileNotFound",e[e.CommitAuthorEmailValidationFailed=5]="CommitAuthorEmailValidationFailed"}(AutofixCallbackStatus||(exports.AutofixCallbackStatus=AutofixCallbackStatus={}));var AutofixRequestFailedReason;!function(e){e[e.None=0]="None",e[e.PipelineFailed=1]="PipelineFailed",e[e.PipelineTimedOut=2]="PipelineTimedOut",e[e.CallbackNotReceived=3]="CallbackNotReceived",e[e.ProcessorJobFailed=4]="ProcessorJobFailed",e[e.NoChanges=5]="NoChanges",e[e.AgentPoolUnavailable=6]="AgentPoolUnavailable",e[e.BranchNotResolvable=7]="BranchNotResolvable",e[e.FalsePositive=8]="FalsePositive",e[e.TargetFileNotFound=9]="TargetFileNotFound",e[e.CommitAuthorEmailValidationFailed=10]="CommitAuthorEmailValidationFailed"}(AutofixRequestFailedReason||(exports.AutofixRequestFailedReason=AutofixRequestFailedReason={}));var AutofixRequestStatus;!function(e){e[e.None=0]="None",e[e.Pending=1]="Pending",e[e.PipelineRunning=2]="PipelineRunning",e[e.Done=3]="Done",e[e.Failed=4]="Failed"}(AutofixRequestStatus||(exports.AutofixRequestStatus=AutofixRequestStatus={}));var ComponentType;!function(e){e[e.Unknown=0]="Unknown",e[e.NuGet=1]="NuGet",e[e.Npm=2]="Npm",e[e.Maven=3]="Maven",e[e.Git=4]="Git",e[e.Other=5]="Other",e[e.RubyGems=6]="RubyGems",e[e.Cargo=7]="Cargo",e[e.Pip=8]="Pip",e[e.File=9]="File",e[e.Go=10]="Go",e[e.DockerImage=11]="DockerImage",e[e.Pod=12]="Pod",e[e.Linux=13]="Linux",e[e.Conda=14]="Conda",e[e.DockerReference=15]="DockerReference",e[e.Vcpkg=16]="Vcpkg"}(ComponentType||(exports.ComponentType=ComponentType={}));var Confidence;!function(e){e[e.High=0]="High",e[e.Other=1]="Other"}(Confidence||(exports.Confidence=Confidence={}));var DependencyKind;!function(e){e[e.Unknown=0]="Unknown",e[e.RootDependency=1]="RootDependency",e[e.Component=2]="Component",e[e.VulnerableDependency=3]="VulnerableDependency"}(DependencyKind||(exports.DependencyKind=DependencyKind={}));var DependencyScope;!function(e){e[e.Runtime=0]="Runtime",e[e.Development=1]="Development"}(DependencyScope||(exports.DependencyScope=DependencyScope={}));var DismissalType;!function(e){e[e.Unknown=0]="Unknown",e[e.Fixed=1]="Fixed",e[e.AcceptedRisk=2]="AcceptedRisk",e[e.FalsePositive=3]="FalsePositive",e[e.AgreedToGuidance=4]="AgreedToGuidance",e[e.ToolUpgrade=5]="ToolUpgrade",e[e.NotDistributed=6]="NotDistributed"}(DismissalType||(exports.DismissalType=DismissalType={}));var ExpandOption;!function(e){e[e.None=0]="None",e[e.ValidationFingerprint=1]="ValidationFingerprint",e[e.AIMetadataBlobReference=2]="AIMetadataBlobReference"}(ExpandOption||(exports.ExpandOption=ExpandOption={}));var LicenseState;!function(e){e[e.Unknown=0]="Unknown",e[e.NotHarvested=1]="NotHarvested",e[e.Harvested=2]="Harvested"}(LicenseState||(exports.LicenseState=LicenseState={}));var LicenseType;!function(e){e[e.Unknown=0]="Unknown",e[e.Permissive=1]="Permissive",e[e.WeakCopyleft=2]="WeakCopyleft",e[e.StrongCopyleft=3]="StrongCopyleft",e[e.NetworkCopyleft=4]="NetworkCopyleft",e[e.Other=5]="Other",e[e.NoAssertion=6]="NoAssertion"}(LicenseType||(exports.LicenseType=LicenseType={}));var MetadataChangeType;!function(e){e[e.None=0]="None",e[e.Created=1]="Created",e[e.Updated=2]="Updated",e[e.Deleted=3]="Deleted"}(MetadataChangeType||(exports.MetadataChangeType=MetadataChangeType={}));var MetadataOperation;!function(e){e[e.None=0]="None",e[e.Add=1]="Add",e[e.Remove=2]="Remove"}(MetadataOperation||(exports.MetadataOperation=MetadataOperation={}));var ResultType;!function(e){e[e.Unknown=0]="Unknown",e[e.Dependency=1]="Dependency",e[e.VersionControl=2]="VersionControl"}(ResultType||(exports.ResultType=ResultType={}));var SarifJobStatus;!function(e){e[e.New=0]="New",e[e.Queued=1]="Queued",e[e.Completed=2]="Completed",e[e.Failed=3]="Failed",e[e.Requeued=4]="Requeued",e[e.ConcurrentProcessing=5]="ConcurrentProcessing",e[e.Consolidated=6]="Consolidated",e[e.WaitingConsolidation=7]="WaitingConsolidation"}(SarifJobStatus||(exports.SarifJobStatus=SarifJobStatus={}));var Severity;!function(e){e[e.Low=0]="Low",e[e.Medium=1]="Medium",e[e.High=2]="High",e[e.Critical=3]="Critical",e[e.Note=4]="Note",e[e.Warning=5]="Warning",e[e.Error=6]="Error",e[e.Undefined=7]="Undefined"}(Severity||(exports.Severity=Severity={}));var State;!function(e){e[e.Unknown=0]="Unknown",e[e.Active=1]="Active",e[e.Dismissed=2]="Dismissed",e[e.Fixed=4]="Fixed",e[e.AutoDismissed=8]="AutoDismissed",e[e.Draft=16]="Draft"}(State||(exports.State=State={}));var ValidationResult;!function(e){e[e.None=0]="None",e[e.Exploitable=1]="Exploitable",e[e.NotExploitable=2]="NotExploitable",e[e.Inconclusive=3]="Inconclusive",e[e.ValidationNotSupported=4]="ValidationNotSupported",e[e.TransientError=5]="TransientError"}(ValidationResult||(exports.ValidationResult=ValidationResult={}));

package/Alert/AlertClient.d.ts

@@ -4,10 +4,28 @@ import * as Alert from "../Alert/Alert";
 import * as WebApi from "../WebApi/WebApi";
 export declare class AlertRestClient extends RestClientBase {
     constructor(options: IVssRestClientOptions);
+    /**
+     * Download the full AI metadata blob for an AI code alert.
+     *
+     * @param project - Project ID or project name
+     * @param alertId - ID of the alert whose AI metadata blob should be downloaded.
+     * @param repository - Name or id of the repository that the alert is part of.
+     */
+    getAiMetadataContent(project: string, alertId: number, repository: string): Promise<any>;
     /**
      * @param submissionId -
      */
     getSarifContent(submissionId: number): Promise<any>;
+    /**
+     * Get the alert jobs associated with an alert.
+     *
+     * @param project - Project ID or project name
+     * @param repository - The name or ID of the repository
+     * @param alertId - The ID of the alert
+     * @param top - The maximum number of jobs to return
+     * @param continuationToken - If there are more jobs than can be returned, a continuation token is placed in the "x-ms-continuationtoken" header. Use that token here to get the next page of jobs
+     */
+    getJobsForAlert(project: string, repository: string, alertId: number, top?: number, continuationToken?: string): Promise<WebApi.PagedList<Alert.AlertJob>>;
     /**
      * Get an alert.
      *
@@ -66,6 +84,18 @@ export declare class AlertRestClient extends RestClientBase {
      * @param repository - The name or ID of the repository
      */
     updateAlertsBatch(request: Alert.AlertBatchStateUpdateRequest, project: string, repository: string): Promise<Alert.Alert[]>;
+    /**
+     * Query alerts for a repository by metadata type linkage.
+     *
+     * @param criteria - Metadata type filters to limit the alerts returned
+     * @param project - Project ID or project name
+     * @param repository - The name or ID of the repository
+     * @param top - The maximum number of alerts to return
+     * @param orderBy - Must be "id" "firstSeen" "lastSeen" "fixedOn" or "severity"  Defaults to "id"
+     * @param expand - Options to expand the response, e.g. returning alert counts instead of alerts
+     * @param continuationToken - If there are more alerts than can be returned, a continuation token is placed in the "x-ms-continuationtoken" header.  Use that token here to get the next page of alerts
+     */
+    queryAlerts(criteria: Alert.AlertMetadataQueryCriteria, project: string, repository: string, top?: number, orderBy?: string, expand?: Alert.AlertListExpandOption, continuationToken?: string): Promise<WebApi.PagedList<Alert.Alert>>;
     /**
      * Returns the branches for which analysis results were submitted.
      *
@@ -85,32 +115,41 @@ export declare class AlertRestClient extends RestClientBase {
      */
     getUxFilters(project: string, repository: string, alertType: Alert.AlertType): Promise<Alert.UxFilters>;
     /**
-     * Receives a callback from the autofix pipeline with the outcome of the run. Idempotent: repeated calls for a request already in a terminal state return 200 without changes.
+     * Create an autofix request for the specified alert.
      *
-     * @param callbackRequest - The callback payload containing requestId, status, and optional pullRequestId.
      * @param project - Project ID or project name
-     * @param repository - The name or ID of the repository.
      * @param alertId - The ID of the alert to create an autofix for.
+     * @param repository - The name or ID of the repository.
+     * @param ref - The Git ref (e.g. refs/heads/feature/x) the autofix should target.
      */
-    autofixCallback(callbackRequest: Alert.AutofixCallbackRequest, project: string, repository: string, alertId: number): Promise<void>;
+    createAutofixRequest(project: string, alertId: number, repository: string, ref: string): Promise<Alert.AutofixRequest>;
     /**
-     * Create an autofix request for the specified alert.
+     * Get all autofix requests for the specified alert.
      *
      * @param project - Project ID or project name
-     * @param alertId - The ID of the alert to create an autofix for.
+     * @param alertId - The ID of the alert.
      * @param repository - The name or ID of the repository.
-     * @param ref - Optional Git ref (e.g. refs/heads/feature/x) the autofix should target. When omitted, the repository's default branch is used.
+     * @param ref - The Git ref (e.g. refs/heads/feature/x) the autofix should target.
      */
-    createAutofixRequest(project: string, alertId: number, repository: string, ref?: string): Promise<Alert.AutofixRequest>;
+    getAutofixRequestsByAlertId(project: string, alertId: number, repository: string, ref: string): Promise<Alert.AutofixRequest[]>;
     /**
-     * Get all autofix requests for the specified alert.
+     * Receives a callback from the autofix pipeline with the outcome of the run. Idempotent: repeated calls for a request already in a terminal state return 200 without changes.
      *
+     * @param callbackRequest - The callback payload containing requestId, status, and optional pullRequestId.
      * @param project - Project ID or project name
-     * @param alertId - The ID of the alert.
      * @param repository - The name or ID of the repository.
-     * @param ref - Optional Git ref (e.g. refs/heads/feature/x) the autofix should target. When omitted, the repository's default branch is used.
      */
-    getAutofixRequestsByAlertId(project: string, alertId: number, repository: string, ref?: string): Promise<Alert.AutofixRequest[]>;
+    autofixCallback(callbackRequest: Alert.AutofixCallbackRequest, project: string, repository: string): Promise<void>;
+    /**
+     * Get Draft alerts for a repository.
+     *
+     * @param project - Project ID or project name
+     * @param repository - The name or ID of the repository
+     * @param top - The maximum number of alerts to return
+     * @param orderBy - Must be "id", "firstSeen", "lastSeen", "fixedOn", or "severity". Defaults to "id"
+     * @param continuationToken - If there are more alerts than can be returned, a continuation token is placed in the "x-ms-continuationtoken" header. Use that token here to get the next page of alerts
+     */
+    getDraftAlerts(project: string, repository: string, top?: number, orderBy?: string, continuationToken?: string): Promise<WebApi.PagedList<Alert.Alert>>;
     /**
      * Upload a SARIF to GitHub Code Scanning via a GitOps app.
      *
@@ -130,6 +169,31 @@ export declare class AlertRestClient extends RestClientBase {
      * @param ref -
      */
     getAlertInstances(project: string, alertId: number, repository: string, ref?: string): Promise<Alert.AlertAnalysisInstance[]>;
+    /**
+     * Create an alert job.
+     *
+     * @param body -
+     * @param project - Project ID or project name
+     * @param repository - The name or ID of the repository
+     */
+    createJob(body: any, project: string, repository: string): Promise<Alert.AlertJob>;
+    /**
+     * Get an alert job by ID.
+     *
+     * @param project - Project ID or project name
+     * @param repository - The name or ID of the repository
+     * @param jobId - The provider-assigned job identifier
+     */
+    getJob(project: string, repository: string, jobId: string): Promise<Alert.AlertJob>;
+    /**
+     * Update an alert job.
+     *
+     * @param patch - The patch describing the fields to update
+     * @param project - Project ID or project name
+     * @param repository - The name or ID of the repository
+     * @param jobId - The provider-assigned job identifier
+     */
+    updateJob(patch: any, project: string, repository: string, jobId: string): Promise<Alert.AlertJob>;
     /**
      * Create legal review. This creates the legal review associated with the alert. It include the review work item url.
      *

package/Alert/AlertClient.js

@@ -21,6 +21,26 @@ class AlertRestClient extends RestClientBase_1.RestClientBase {
     constructor(options) {
         super(options);
     }
+    /**
+     * Download the full AI metadata blob for an AI code alert.
+     *
+     * @param project - Project ID or project name
+     * @param alertId - ID of the alert whose AI metadata blob should be downloaded.
+     * @param repository - Name or id of the repository that the alert is part of.
+     */
+    getAiMetadataContent(project, alertId, repository) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.beginRequest({
+                apiVersion: "7.2-preview.1",
+                routeTemplate: "{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}/aimetadata",
+                routeValues: {
+                    project: project,
+                    alertId: alertId,
+                    repository: repository
+                }
+            });
+        });
+    }
     /**
      * @param submissionId -
      */
@@ -35,6 +55,38 @@ class AlertRestClient extends RestClientBase_1.RestClientBase {
             });
         });
     }
+    /**
+     * Get the alert jobs associated with an alert.
+     *
+     * @param project - Project ID or project name
+     * @param repository - The name or ID of the repository
+     * @param alertId - The ID of the alert
+     * @param top - The maximum number of jobs to return
+     * @param continuationToken - If there are more jobs than can be returned, a continuation token is placed in the "x-ms-continuationtoken" header. Use that token here to get the next page of jobs
+     */
+    getJobsForAlert(project, repository, alertId, top, continuationToken) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const queryValues = {
+                top: top,
+                continuationToken: continuationToken
+            };
+            return this.beginRequest({
+                apiVersion: "7.2-preview.1",
+                routeTemplate: "{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}/jobs",
+                routeValues: {
+                    project: project,
+                    repository: repository,
+                    alertId: alertId
+                },
+                queryParams: queryValues,
+                returnRawResponse: true
+            }).then((response) => __awaiter(this, void 0, void 0, function* () {
+                const body = yield response.text().then(Serialization_1.deserializeVssJsonObject);
+                body.continuationToken = response.headers.get("x-ms-continuationtoken");
+                return body;
+            }));
+        });
+    }
     /**
      * Get an alert.
      *
@@ -195,6 +247,43 @@ class AlertRestClient extends RestClientBase_1.RestClientBase {
             });
         });
     }
+    /**
+     * Query alerts for a repository by metadata type linkage.
+     *
+     * @param criteria - Metadata type filters to limit the alerts returned
+     * @param project - Project ID or project name
+     * @param repository - The name or ID of the repository
+     * @param top - The maximum number of alerts to return
+     * @param orderBy - Must be "id" "firstSeen" "lastSeen" "fixedOn" or "severity"  Defaults to "id"
+     * @param expand - Options to expand the response, e.g. returning alert counts instead of alerts
+     * @param continuationToken - If there are more alerts than can be returned, a continuation token is placed in the "x-ms-continuationtoken" header.  Use that token here to get the next page of alerts
+     */
+    queryAlerts(criteria, project, repository, top, orderBy, expand, continuationToken) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const queryValues = {
+                top: top,
+                orderBy: orderBy,
+                expand: expand,
+                continuationToken: continuationToken
+            };
+            return this.beginRequest({
+                apiVersion: "7.2-preview.1",
+                method: "POST",
+                routeTemplate: "{project}/_apis/Alert/repositories/{repository}/alertsquery",
+                routeValues: {
+                    project: project,
+                    repository: repository
+                },
+                queryParams: queryValues,
+                body: criteria,
+                returnRawResponse: true
+            }).then((response) => __awaiter(this, void 0, void 0, function* () {
+                const body = yield response.text().then(Serialization_1.deserializeVssJsonObject);
+                body.continuationToken = response.headers.get("x-ms-continuationtoken");
+                return body;
+            }));
+        });
+    }
     /**
      * Returns the branches for which analysis results were submitted.
      *
@@ -250,45 +339,47 @@ class AlertRestClient extends RestClientBase_1.RestClientBase {
         });
     }
     /**
-     * Receives a callback from the autofix pipeline with the outcome of the run. Idempotent: repeated calls for a request already in a terminal state return 200 without changes.
+     * Create an autofix request for the specified alert.
      *
-     * @param callbackRequest - The callback payload containing requestId, status, and optional pullRequestId.
      * @param project - Project ID or project name
-     * @param repository - The name or ID of the repository.
      * @param alertId - The ID of the alert to create an autofix for.
+     * @param repository - The name or ID of the repository.
+     * @param ref - The Git ref (e.g. refs/heads/feature/x) the autofix should target.
      */
-    autofixCallback(callbackRequest, project, repository, alertId) {
+    createAutofixRequest(project, alertId, repository, ref) {
         return __awaiter(this, void 0, void 0, function* () {
+            const queryValues = {
+                ref: ref
+            };
             return this.beginRequest({
                 apiVersion: "7.2-preview.1",
                 method: "POST",
                 routeTemplate: "{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}/Autofix/{action}",
                 routeValues: {
                     project: project,
-                    repository: repository,
                     alertId: alertId,
-                    action: "Callback"
+                    repository: repository,
+                    action: "Default"
                 },
-                body: callbackRequest
+                queryParams: queryValues
             });
         });
     }
     /**
-     * Create an autofix request for the specified alert.
+     * Get all autofix requests for the specified alert.
      *
      * @param project - Project ID or project name
-     * @param alertId - The ID of the alert to create an autofix for.
+     * @param alertId - The ID of the alert.
      * @param repository - The name or ID of the repository.
-     * @param ref - Optional Git ref (e.g. refs/heads/feature/x) the autofix should target. When omitted, the repository's default branch is used.
+     * @param ref - The Git ref (e.g. refs/heads/feature/x) the autofix should target.
      */
-    createAutofixRequest(project, alertId, repository, ref) {
+    getAutofixRequestsByAlertId(project, alertId, repository, ref) {
         return __awaiter(this, void 0, void 0, function* () {
             const queryValues = {
                 ref: ref
             };
             return this.beginRequest({
                 apiVersion: "7.2-preview.1",
-                method: "POST",
                 routeTemplate: "{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}/Autofix/{action}",
                 routeValues: {
                     project: project,
@@ -301,29 +392,56 @@ class AlertRestClient extends RestClientBase_1.RestClientBase {
         });
     }
     /**
-     * Get all autofix requests for the specified alert.
+     * Receives a callback from the autofix pipeline with the outcome of the run. Idempotent: repeated calls for a request already in a terminal state return 200 without changes.
      *
+     * @param callbackRequest - The callback payload containing requestId, status, and optional pullRequestId.
      * @param project - Project ID or project name
-     * @param alertId - The ID of the alert.
      * @param repository - The name or ID of the repository.
-     * @param ref - Optional Git ref (e.g. refs/heads/feature/x) the autofix should target. When omitted, the repository's default branch is used.
      */
-    getAutofixRequestsByAlertId(project, alertId, repository, ref) {
+    autofixCallback(callbackRequest, project, repository) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.beginRequest({
+                apiVersion: "7.2-preview.1",
+                method: "POST",
+                routeTemplate: "{project}/_apis/Alert/repositories/{repository}/autofix/callback",
+                routeValues: {
+                    project: project,
+                    repository: repository
+                },
+                body: callbackRequest
+            });
+        });
+    }
+    /**
+     * Get Draft alerts for a repository.
+     *
+     * @param project - Project ID or project name
+     * @param repository - The name or ID of the repository
+     * @param top - The maximum number of alerts to return
+     * @param orderBy - Must be "id", "firstSeen", "lastSeen", "fixedOn", or "severity". Defaults to "id"
+     * @param continuationToken - If there are more alerts than can be returned, a continuation token is placed in the "x-ms-continuationtoken" header. Use that token here to get the next page of alerts
+     */
+    getDraftAlerts(project, repository, top, orderBy, continuationToken) {
         return __awaiter(this, void 0, void 0, function* () {
             const queryValues = {
-                ref: ref
+                top: top,
+                orderBy: orderBy,
+                continuationToken: continuationToken
             };
             return this.beginRequest({
                 apiVersion: "7.2-preview.1",
-                routeTemplate: "{project}/_apis/Alert/repositories/{repository}/alerts/{alertId}/Autofix/{action}",
+                routeTemplate: "{project}/_apis/Alert/repositories/{repository}/draftAlerts",
                 routeValues: {
                     project: project,
-                    alertId: alertId,
-                    repository: repository,
-                    action: "Default"
+                    repository: repository
                 },
-                queryParams: queryValues
-            });
+                queryParams: queryValues,
+                returnRawResponse: true
+            }).then((response) => __awaiter(this, void 0, void 0, function* () {
+                const body = yield response.text().then(Serialization_1.deserializeVssJsonObject);
+                body.continuationToken = response.headers.get("x-ms-continuationtoken");
+                return body;
+            }));
         });
     }
     /**
@@ -379,6 +497,70 @@ class AlertRestClient extends RestClientBase_1.RestClientBase {
             });
         });
     }
+    /**
+     * Create an alert job.
+     *
+     * @param body -
+     * @param project - Project ID or project name
+     * @param repository - The name or ID of the repository
+     */
+    createJob(body, project, repository) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.beginRequest({
+                apiVersion: "7.2-preview.1",
+                method: "POST",
+                routeTemplate: "{project}/_apis/Alert/repositories/{repository}/jobs/{jobId}",
+                routeValues: {
+                    project: project,
+                    repository: repository
+                },
+                body: body
+            });
+        });
+    }
+    /**
+     * Get an alert job by ID.
+     *
+     * @param project - Project ID or project name
+     * @param repository - The name or ID of the repository
+     * @param jobId - The provider-assigned job identifier
+     */
+    getJob(project, repository, jobId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.beginRequest({
+                apiVersion: "7.2-preview.1",
+                routeTemplate: "{project}/_apis/Alert/repositories/{repository}/jobs/{jobId}",
+                routeValues: {
+                    project: project,
+                    repository: repository,
+                    jobId: jobId
+                }
+            });
+        });
+    }
+    /**
+     * Update an alert job.
+     *
+     * @param patch - The patch describing the fields to update
+     * @param project - Project ID or project name
+     * @param repository - The name or ID of the repository
+     * @param jobId - The provider-assigned job identifier
+     */
+    updateJob(patch, project, repository, jobId) {
+        return __awaiter(this, void 0, void 0, function* () {
+            return this.beginRequest({
+                apiVersion: "7.2-preview.1",
+                method: "PATCH",
+                routeTemplate: "{project}/_apis/Alert/repositories/{repository}/jobs/{jobId}",
+                routeValues: {
+                    project: project,
+                    repository: repository,
+                    jobId: jobId
+                },
+                body: patch
+            });
+        });
+    }
     /**
      * Create legal review. This creates the legal review associated with the alert. It include the review work item url.
      *