diff --git a/src/Web/autopilot-monitor-web/app/diagnosis/hooks/useAppFleetContext.ts b/src/Web/autopilot-monitor-web/app/diagnosis/hooks/useAppFleetContext.ts
new file mode 100644
index 00000000..3a07dc63
--- /dev/null
+++ b/src/Web/autopilot-monitor-web/app/diagnosis/hooks/useAppFleetContext.ts
@@ -0,0 +1,49 @@
+"use client";
+
+import { useEffect, useState } from "react";
+import { api } from "@/lib/api";
+import { fetchJson } from "@/lib/apiClient";
+import { useLatest } from "@/hooks/useLatest";
+import { isGuid } from "@/lib/inputValidation";
+import type { DiagnosisCulprit, GetAppFleetContextResponse } from "@/lib/generated/wire-types.generated";
+
+/**
+ * How the verdict's app fared in the tenant's other enrollments of the last week, read once per app
+ * and session (the headline's live refetches do not repeat it). Null while loading, without an app
+ * culprit and on any error: the fleet line is context, never required.
+ */
+export function useAppFleetContext(
+ culprit: DiagnosisCulprit | null | undefined,
+ sessionId: string,
+ tenantId: string | null | undefined,
+ getAccessToken: (forceRefresh?: boolean) => Promise
+): GetAppFleetContextResponse | null {
+ const getToken = useLatest(getAccessToken);
+ const appName = culprit?.kind === "app" ? culprit.name : undefined;
+ const appId = culprit?.kind === "app" ? culprit.key : undefined;
+ const key = appName && sessionId && tenantId && isGuid(tenantId) ? [tenantId, sessionId, appName, appId ?? ""].join("|") : null;
+ const [loaded, setLoaded] = useState<{ key: string; context: GetAppFleetContextResponse | null } | null>(null);
+
+ useEffect(() => {
+ if (!key || !appName || !tenantId) return;
+ let cancelled = false;
+ const run = async () => {
+ try {
+ const context = await fetchJson(
+ api.apps.fleetContext(appName, { appId: appId || undefined, excludeSessionId: sessionId, tenantId }),
+ (force?: boolean) => getToken.current(force)
+ );
+ if (!cancelled) setLoaded({ key, context });
+ } catch {
+ // fail-soft: no fleet line
+ if (!cancelled) setLoaded({ key, context: null });
+ }
+ };
+ void run();
+ return () => {
+ cancelled = true;
+ };
+ }, [key, appName, appId, sessionId, tenantId, getToken]);
+
+ return loaded?.key === key ? loaded.context : null;
+}
diff --git a/src/Web/autopilot-monitor-web/app/diagnosis/lib/__tests__/fleetContext.test.ts b/src/Web/autopilot-monitor-web/app/diagnosis/lib/__tests__/fleetContext.test.ts
new file mode 100644
index 00000000..b8e63a26
--- /dev/null
+++ b/src/Web/autopilot-monitor-web/app/diagnosis/lib/__tests__/fleetContext.test.ts
@@ -0,0 +1,85 @@
+import { describe, it, expect } from "vitest";
+import type { GetAppFleetContextResponse } from "@/lib/generated/wire-types.generated";
+import { fleetSessionsHref, fleetView } from "../fleetContext";
+
+const context = (over: Partial): GetAppFleetContextResponse =>
+ Object.assign(
+ {
+ success: true,
+ appName: "Contoso Notes",
+ source: "ime",
+ windowDays: 7,
+ installed: 0,
+ skipped: 0,
+ failed: 0,
+ incomplete: 0,
+ inProgress: 0,
+ collisionExcluded: 0,
+ topFailureCodes: [],
+ },
+ over
+ );
+
+describe("fleetView", () => {
+ it("counts the other enrollments, failures first with their most frequent codes", () => {
+ const view = fleetView(
+ context({
+ failed: 4,
+ installed: 11,
+ inProgress: 1,
+ incomplete: 1,
+ skipped: 2,
+ topFailureCodes: [
+ { code: "0x80d03805", count: 2, sampleMessage: "" },
+ { code: "esp_apps_timeout", count: 1, sampleMessage: "" },
+ { code: "0x87d1041c", count: 1, sampleMessage: "" },
+ ],
+ }),
+ "/apps/detail?name=Contoso%20Notes&days=7"
+ );
+ expect(view).toEqual({
+ title: "Same app in other enrollments",
+ detail: "Last 7 days: 4 failed (0x80d03805 ×2, ESP timeout) · 11 installed · 1 still installing · 1 not finished · 2 skipped",
+ href: "/apps/detail?name=Contoso%20Notes&days=7",
+ });
+ });
+
+ it("names an unknown failure type in words and leaves codes as they are", () => {
+ const failed = (code: string) => fleetView(context({ failed: 1, topFailureCodes: [{ code, count: 1, sampleMessage: "" }] }), null)!.detail;
+ expect(failed("esp_apps_policy_gap")).toBe("Last 7 days: 1 failed (esp apps policy gap)");
+ expect(failed("1603")).toBe("Last 7 days: 1 failed (1603)");
+ });
+
+ it("shows nothing without an answer or without another enrollment (the read fails soft)", () => {
+ expect(fleetView(null, null)).toBeNull();
+ expect(fleetView(context({ collisionExcluded: 3 }), null)).toBeNull();
+ });
+});
+
+describe("fleetSessionsHref", () => {
+ const base = {
+ appName: "Contoso Notes",
+ windowDays: 7,
+ viewedTenantId: "00000000-0000-4000-8000-0000000000aa",
+ ownTenantId: "00000000-0000-4000-8000-0000000000AA",
+ globalAdminMode: false,
+ delegatedScope: false,
+ };
+
+ it("links a member to the app page of the own tenant", () => {
+ expect(fleetSessionsHref(base)).toBe("/apps/detail?name=Contoso%20Notes&days=7");
+ expect(fleetSessionsHref({ ...base, source: "realmjoin" })).toBe("/apps/detail?name=Contoso%20Notes&days=7&source=realmjoin");
+ });
+
+ it("names the tenant in Global Admin mode, which the app page follows", () => {
+ expect(fleetSessionsHref({ ...base, globalAdminMode: true, ownTenantId: "00000000-0000-4000-8000-0000000000bb" })).toBe(
+ "/apps/detail?name=Contoso%20Notes&days=7&tenantId=00000000-0000-4000-8000-0000000000aa"
+ );
+ });
+
+ it("has no link where the app page would show another tenant", () => {
+ expect(fleetSessionsHref({ ...base, ownTenantId: "00000000-0000-4000-8000-0000000000bb" })).toBeNull();
+ expect(fleetSessionsHref({ ...base, delegatedScope: true })).toBeNull();
+ expect(fleetSessionsHref({ ...base, viewedTenantId: "" })).toBeNull();
+ });
+});
diff --git a/src/Web/autopilot-monitor-web/app/diagnosis/lib/fleetContext.ts b/src/Web/autopilot-monitor-web/app/diagnosis/lib/fleetContext.ts
new file mode 100644
index 00000000..9b44ec9d
--- /dev/null
+++ b/src/Web/autopilot-monitor-web/app/diagnosis/lib/fleetContext.ts
@@ -0,0 +1,71 @@
+import type { Route } from "next";
+import type { GetAppFleetContextResponse } from "@/lib/generated/wire-types.generated";
+import { appDetailUrl } from "@/lib/routes";
+import { humanizeKey } from "@/lib/evidenceChips";
+
+/** The fleet tile of "Around the failure". */
+export interface FleetView {
+ title: string;
+ detail: string;
+ /** The app's page, filtered to the same window; null when that page would show another tenant. */
+ href: Route | null;
+}
+
+// Failure types the agent writes instead of an error code when the ESP ended the install.
+const FAILURE_TYPES: Record = {
+ esp_apps_timeout: "ESP timeout",
+ esp_apps_detection_failure: "detection failure",
+ esp_apps_install_failure: "install failure",
+};
+
+function codeText(code: string): string {
+ return FAILURE_TYPES[code] ?? (/^[a-z]+(_[a-z]+)+$/.test(code) ? humanizeKey(code).toLowerCase() : code);
+}
+
+/**
+ * The fleet tile, or null when no other enrollment of the window had the app. The read behind it
+ * fails soft, so an empty answer may be a failed read: the page never claims "nowhere else".
+ */
+export function fleetView(context: GetAppFleetContextResponse | null, href: Route | null): FleetView | null {
+ if (!context) return null;
+ const { installed, skipped, failed, incomplete, inProgress } = context;
+ if (installed + skipped + failed + incomplete + inProgress === 0) return null;
+
+ const codes = context.topFailureCodes
+ .slice(0, 2)
+ .map((c) => `${codeText(c.code)}${c.count > 1 ? ` ×${c.count}` : ""}`)
+ .join(", ");
+ const parts = [
+ failed > 0 && `${failed} failed${codes ? ` (${codes})` : ""}`,
+ installed > 0 && `${installed} installed`,
+ inProgress > 0 && `${inProgress} still installing`,
+ incomplete > 0 && `${incomplete} not finished`,
+ skipped > 0 && `${skipped} skipped`,
+ ].filter(Boolean);
+ return {
+ title: "Same app in other enrollments",
+ detail: `Last ${context.windowDays} days: ${parts.join(" · ")}`,
+ href,
+ };
+}
+
+/**
+ * The app page's link for the fleet tile when that page shows the viewed tenant: it follows
+ * `tenantId` only for a Global Admin or Reader in Global Admin mode, shows a member the own tenant,
+ * and ignores the URL for a delegated (MSP) scope.
+ */
+export function fleetSessionsHref(args: {
+ appName: string;
+ source?: string;
+ windowDays: number;
+ viewedTenantId: string;
+ ownTenantId: string | null | undefined;
+ globalAdminMode: boolean;
+ delegatedScope: boolean;
+}): Route | null {
+ if (args.delegatedScope || !args.viewedTenantId) return null;
+ const days = String(args.windowDays);
+ if (args.globalAdminMode) return appDetailUrl(args.appName, { days, source: args.source, tenantId: args.viewedTenantId });
+ const own = !!args.ownTenantId && args.ownTenantId.toLowerCase() === args.viewedTenantId.toLowerCase();
+ return own ? appDetailUrl(args.appName, { days, source: args.source }) : null;
+}
diff --git a/src/Web/autopilot-monitor-web/app/diagnosis/page.tsx b/src/Web/autopilot-monitor-web/app/diagnosis/page.tsx
index ac35109a..c94f3a41 100644
--- a/src/Web/autopilot-monitor-web/app/diagnosis/page.tsx
+++ b/src/Web/autopilot-monitor-web/app/diagnosis/page.tsx
@@ -18,14 +18,16 @@ import { trackEvent } from "@/lib/appInsights";
import { DOCS_PATHS } from "@/lib/docsPaths";
import { asGuidOrUndefined, isGuid } from "@/lib/inputValidation";
import { isTerminalStatus } from "@/lib/sessionStatus";
-import { diagnosisUrl, sessionUrl } from "@/lib/routes";
+import { dashboardUrl, diagnosisUrl, sessionUrl } from "@/lib/routes";
import { hasTenantReadScope } from "@/lib/tenantScope";
import { useSessionDetail } from "../sessions/hooks/useSessionDetail";
import { useSessionAnalysis } from "../sessions/hooks/useSessionAnalysis";
import { useSessionEvents } from "../sessions/hooks/useSessionEvents";
import { useSessionSignalR } from "../sessions/hooks/useSessionSignalR";
import { useSessionTimeAttribution } from "../sessions/hooks/useSessionTimeAttribution";
+import { useRuleFireStats } from "../sessions/hooks/useRuleFireStats";
import { useSessionDiagnosis } from "./hooks/useSessionDiagnosis";
+import { useAppFleetContext } from "./hooks/useAppFleetContext";
import VerdictCard from "./components/VerdictCard";
import ContextSection from "./components/ContextSection";
import StepsSection from "./components/StepsSection";
@@ -39,6 +41,7 @@ import { contextItems } from "./lib/contextItems";
import { copySummary, stepsFrom, stepsPlain } from "./lib/steps";
import { timeLanes } from "./lib/timeLanes";
import { keyEvents, problemEvents } from "./lib/eventLists";
+import { fleetSessionsHref, fleetView } from "./lib/fleetContext";
/** How long after the end a session without findings may still be in its queued analysis. */
const ANALYSIS_GRACE_MS = 5 * 60_000;
@@ -66,7 +69,7 @@ function DiagnosisRoute() {
}
function DiagnosisContent({ requestedSessionId, tenantIdOverride }: { requestedSessionId: string; tenantIdOverride?: string }) {
- const { getAccessToken, user } = useAuth();
+ const { getAccessToken, user, hasGlobalScope } = useAuth();
// A member without a tenant role sees ProtectedRoute's notice; the empty id keeps the hooks inert.
const sessionId = !user || hasTenantReadScope(user) ? requestedSessionId : "";
const { globalAdminMode } = useAdminMode();
@@ -110,8 +113,11 @@ function DiagnosisContent({ requestedSessionId, tenantIdOverride }: { requestedS
});
const session = detail.session;
- const breakdown = useSessionTimeAttribution(sessionId, session?.status, detail.sessionTenantId || tenantIdOverride, getAccessToken);
+ const sessionTenant = detail.sessionTenantId || tenantIdOverride;
+ const breakdown = useSessionTimeAttribution(sessionId, session?.status, sessionTenant, getAccessToken);
const headline = diagnosis.headline;
+ const culprit = headline?.culprits?.[0];
+ const fleetContext = useAppFleetContext(culprit, sessionId, sessionTenant, getAccessToken);
// Links keep the tenant of a cross-tenant view (Global Admin, MSP drill-in).
const viewedTenantId = (session?.tenantId ?? detail.sessionTenantId ?? tenantIdOverride ?? "").toLowerCase();
@@ -120,6 +126,25 @@ function DiagnosisContent({ requestedSessionId, tenantIdOverride }: { requestedS
const eventHref = (eventId: string) => sessionUrl(sessionId, { tenantId: linkTenant, hash: `event-${eventId}` });
const results = analysis.analysisResults;
+ const fireStats = useRuleFireStats(sessionTenant || undefined, results.length);
+ const ruleFires = {
+ counts: fireStats.recentFires,
+ href: (ruleId: string) => dashboardUrl({ ruleId, tenant: fireStats.crossTenant ? sessionTenant : undefined }),
+ };
+ const fleet =
+ culprit?.kind === "app"
+ ? fleetView(
+ fleetContext,
+ fleetSessionsHref({
+ appName: culprit.name,
+ windowDays: fleetContext?.windowDays ?? 7,
+ viewedTenantId,
+ ownTenantId: tenantId,
+ globalAdminMode: globalAdminMode && hasGlobalScope,
+ delegatedScope: !!user?.isDelegated && !hasGlobalScope,
+ })
+ )
+ : null;
const groups = useMemo(() => groupFindings(results, headline?.outcome ?? "unknown", headline?.culprits), [results, headline]);
const verdict = useMemo(() => (headline ? verdictText(headline) : null), [headline]);
const steps = useMemo(() => stepsFrom(groups), [groups]);
@@ -258,7 +283,7 @@ function DiagnosisContent({ requestedSessionId, tenantIdOverride }: { requestedS
/>
)}
-
+
{steps && }
-
+
{session?.status === "Failed" && analysis.analysisLoaded && results.length === 0 && !analysisMayRun && (
)}
- {sessionId && }
+ {sessionId && }
)}
diff --git a/src/Web/autopilot-monitor-web/app/sessions/components/AnalysisResultsSection.tsx b/src/Web/autopilot-monitor-web/app/sessions/components/AnalysisResultsSection.tsx
index 501d6f1c..e4d875c8 100644
--- a/src/Web/autopilot-monitor-web/app/sessions/components/AnalysisResultsSection.tsx
+++ b/src/Web/autopilot-monitor-web/app/sessions/components/AnalysisResultsSection.tsx
@@ -1,20 +1,15 @@
"use client";
-import { useState, useEffect, type ReactNode } from "react";
-import Link from "next/link";
+import { useState, type ReactNode } from "react";
import type { Route } from "next";
import { RuleResult } from "@/types";
import { ruleStepInlines, ruleTextBlocks } from "@/lib/ruleText";
import { RuleInlines, RuleText } from "@/components/findings/RuleText";
import { EvidenceChips } from "@/components/findings/EvidenceChips";
-import { api } from "@/lib/api";
import { dashboardUrl } from "@/lib/routes";
-import { recentWindowStartIso, sumRecentFires } from "@/lib/ruleRecentFires";
-import { useAuth } from "@/contexts/AuthContext";
-import { useTenant } from "@/contexts/TenantContext";
import { safeHttpUrl } from "@/lib/safeDocUrl";
-import type { RuleStatsResponse } from "@/lib/generated/wire-types.generated";
-import { fetchJson } from "@/lib/apiClient";
+import { RecentFiresLine } from "@/components/findings/RecentFiresLine";
+import { useRuleFireStats } from "../hooks/useRuleFireStats";
interface AnalysisResultsSectionProps {
analysisResults: RuleResult[];
@@ -53,47 +48,14 @@ export default function AnalysisResultsSection({
sessionTenantId,
emptyState,
}: AnalysisResultsSectionProps) {
- const { getAccessToken } = useAuth();
- const { tenantId } = useTenant();
- const [ruleHitRates, setRuleHitRates] = useState>({});
- const [ruleRecentFires, setRuleRecentFires] = useState>({});
const [showResolved, setShowResolved] = useState(false);
-
- const crossTenant = !!sessionTenantId && !!tenantId && sessionTenantId !== tenantId;
+ const { hitRates: ruleHitRates, recentFires: ruleRecentFires, crossTenant } = useRuleFireStats(sessionTenantId, analysisResults.length);
// Resolved findings (a later evaluation no longer fired the rule — the session healed)
// are kept for audit but are not open issues; they hide behind a toggle.
const openResults = analysisResults.filter((r) => !r.resolvedAt);
const resolvedResults = analysisResults.filter((r) => !!r.resolvedAt);
- useEffect(() => {
- if (!tenantId || analysisResults.length === 0) return;
- const fetchStats = async () => {
- try {
- // Cross-tenant viewers read the session tenant's stats via the global route;
- // a 403 (viewer without that scope) degrades to no stats — better than
- // showing the viewer's own-tenant numbers next to a foreign session.
- const url = crossTenant
- ? api.metrics.globalRuleStats(undefined, undefined, "analyze", sessionTenantId)
- : api.metrics.ruleStats(undefined, undefined, "analyze");
- const data = await fetchJson(url, getAccessToken);
- const map: Record = {};
- const fires: Record = {};
- const windowStart = recentWindowStartIso(new Date(), 14);
- for (const r of data.rules ?? []) {
- if (r.hitRate > 0) map[r.ruleId] = r.hitRate;
- const recent = sumRecentFires(r.trend, windowStart);
- if (recent > 0) fires[r.ruleId] = recent;
- }
- setRuleHitRates(map);
- setRuleRecentFires(fires);
- } catch {
- // Non-critical
- }
- };
- fetchStats();
- }, [tenantId, crossTenant, sessionTenantId, analysisResults.length, getAccessToken]);
-
return (
)}
{recentFires != null && recentFires > 0 && (
-
- Fired in {recentFires} enrollment{recentFires === 1 ? "" : "s"} in the last 14 days
- {" · "}
- e.stopPropagation()}
- className="not-italic font-medium text-amber-700 hover:text-amber-800 underline"
- >
- View sessions →
-
-
+ e.stopPropagation()}
+ linkClassName="not-italic font-medium text-amber-700 hover:text-amber-800 underline"
+ />
)}
diff --git a/src/Web/autopilot-monitor-web/app/sessions/hooks/useRuleFireStats.ts b/src/Web/autopilot-monitor-web/app/sessions/hooks/useRuleFireStats.ts
new file mode 100644
index 00000000..9e67019f
--- /dev/null
+++ b/src/Web/autopilot-monitor-web/app/sessions/hooks/useRuleFireStats.ts
@@ -0,0 +1,62 @@
+"use client";
+
+import { useEffect, useState } from "react";
+import { api } from "@/lib/api";
+import { fetchJson } from "@/lib/apiClient";
+import { recentWindowStartIso, sumRecentFires } from "@/lib/ruleRecentFires";
+import { useAuth } from "@/contexts/AuthContext";
+import { useTenant } from "@/contexts/TenantContext";
+import type { RuleStatsResponse } from "@/lib/generated/wire-types.generated";
+
+export interface RuleFireStats {
+ /** Share of the tenant's enrollments each rule fired on in 30 days; rules that fired only. */
+ hitRates: Record;
+ /** Enrollments each rule fired on in the last 14 days; rules that fired only. */
+ recentFires: Record;
+ /** The session belongs to another tenant than the viewer's: the stats and their links name that tenant. */
+ crossTenant: boolean;
+}
+
+/**
+ * Analyze-rule telemetry next to a session's findings, for the tenant the session belongs to: the
+ * member route for the viewer's own tenant, the global route scoped to the session's tenant in a
+ * cross-tenant view (GA, delegated drill-in), where a 403 leaves the stats empty rather than showing
+ * the viewer's own numbers next to a foreign session. Fetched while the session has findings and again
+ * when their number changes; fail-soft.
+ */
+export function useRuleFireStats(sessionTenantId: string | undefined, findingCount: number): RuleFireStats {
+ const { getAccessToken } = useAuth();
+ const { tenantId } = useTenant();
+ const [stats, setStats] = useState>({ hitRates: {}, recentFires: {} });
+ const crossTenant = !!sessionTenantId && !!tenantId && sessionTenantId.toLowerCase() !== tenantId.toLowerCase();
+
+ useEffect(() => {
+ if (!tenantId || findingCount === 0) return;
+ let cancelled = false;
+ const run = async () => {
+ try {
+ const url = crossTenant
+ ? api.metrics.globalRuleStats(undefined, undefined, "analyze", sessionTenantId)
+ : api.metrics.ruleStats(undefined, undefined, "analyze");
+ const data = await fetchJson(url, getAccessToken);
+ const hitRates: Record = {};
+ const recentFires: Record = {};
+ const windowStart = recentWindowStartIso(new Date(), 14);
+ for (const r of data.rules ?? []) {
+ if (r.hitRate > 0) hitRates[r.ruleId] = r.hitRate;
+ const recent = sumRecentFires(r.trend, windowStart);
+ if (recent > 0) recentFires[r.ruleId] = recent;
+ }
+ if (!cancelled) setStats({ hitRates, recentFires });
+ } catch {
+ // Non-critical: no rule telemetry next to the findings.
+ }
+ };
+ void run();
+ return () => {
+ cancelled = true;
+ };
+ }, [tenantId, crossTenant, sessionTenantId, findingCount, getAccessToken]);
+
+ return { ...stats, crossTenant };
+}
diff --git a/src/Web/autopilot-monitor-web/components/findings/RecentFiresLine.tsx b/src/Web/autopilot-monitor-web/components/findings/RecentFiresLine.tsx
new file mode 100644
index 00000000..76697cf8
--- /dev/null
+++ b/src/Web/autopilot-monitor-web/components/findings/RecentFiresLine.tsx
@@ -0,0 +1,29 @@
+import type { MouseEvent } from "react";
+import Link from "next/link";
+import type { Route } from "next";
+
+/**
+ * "Fired in N enrollments in the last 14 days · View sessions →" next to a finding: rule telemetry,
+ * counted in enrollments (never devices), and the dashboard filtered to the rule.
+ */
+export function RecentFiresLine({
+ count,
+ href,
+ linkClassName,
+ onLinkClick,
+}: {
+ count: number;
+ href: Route;
+ linkClassName: string;
+ onLinkClick?: (e: MouseEvent) => void;
+}) {
+ return (
+
+ Fired in {count} enrollment{count === 1 ? "" : "s"} in the last 14 days
+ {" · "}
+
+ View sessions →
+
+
+ );
+}
diff --git a/src/Web/autopilot-monitor-web/lib/__tests__/apiPathEncoding.test.ts b/src/Web/autopilot-monitor-web/lib/__tests__/apiPathEncoding.test.ts
index 51458e7a..29e3b0be 100644
--- a/src/Web/autopilot-monitor-web/lib/__tests__/apiPathEncoding.test.ts
+++ b/src/Web/autopilot-monitor-web/lib/__tests__/apiPathEncoding.test.ts
@@ -71,6 +71,14 @@ describe("api path ids are percent-encoded", () => {
const analytics = new URL(api.apps.globalAnalytics("a/b", 30));
expect(analytics.pathname).toBe("/api/global/apps/analytics");
expect(analytics.searchParams.get("appName")).toBe("a/b");
+ const fleet = new URL(api.apps.fleetContext("100% a/b", { appId: "x", excludeSessionId: "s", tenantId: "t" }));
+ expect(fleet.pathname).toBe("/api/apps/fleet-context");
+ expect([...fleet.searchParams.entries()]).toEqual([
+ ["appName", "100% a/b"],
+ ["appId", "x"],
+ ["excludeSessionId", "s"],
+ ["tenantId", "t"],
+ ]);
});
it("no path builder lets an id escape its segment", async () => {
diff --git a/src/Web/autopilot-monitor-web/lib/api.ts b/src/Web/autopilot-monitor-web/lib/api.ts
index 9e172e36..124064b1 100644
--- a/src/Web/autopilot-monitor-web/lib/api.ts
+++ b/src/Web/autopilot-monitor-web/lib/api.ts
@@ -415,6 +415,16 @@ export const api = {
version: opts?.version,
source: appInstallSourceParam(opts?.source),
})}`,
+ // The diagnosis page's fleet line (GetAppFleetContextResponse): one app in the tenant's other
+ // enrollments of the last week. tenantId enables the cross-tenant read (TenantScoping.QueryParam).
+ fleetContext: (appName: string, opts?: { source?: string; appId?: string; excludeSessionId?: string; tenantId?: string }) =>
+ `${API_BASE_URL}/api/apps/fleet-context${qs({
+ appName,
+ source: appInstallSourceParam(opts?.source),
+ appId: opts?.appId,
+ excludeSessionId: opts?.excludeSessionId,
+ tenantId: opts?.tenantId,
+ })}`,
// Global Admin variants — tenantId is optional:
// - undefined → aggregates across ALL tenants
diff --git a/src/Web/autopilot-monitor-web/lib/generated/shared-manifests.json b/src/Web/autopilot-monitor-web/lib/generated/shared-manifests.json
index baa05bbb..5d85dd15 100644
--- a/src/Web/autopilot-monitor-web/lib/generated/shared-manifests.json
+++ b/src/Web/autopilot-monitor-web/lib/generated/shared-manifests.json
@@ -10478,6 +10478,98 @@
}
]
},
+ "GetAppFleetContextResponse": {
+ "kind": "object",
+ "doc": "Response of GET apps/fleet-context?appName=: how one app fared in the tenant's other enrollments of the last WindowDays days, for the diagnosis page. One row is one enrollment; the asking session is left out.",
+ "fields": [
+ {
+ "name": "success",
+ "type": {
+ "kind": "primitive",
+ "name": "boolean"
+ }
+ },
+ {
+ "name": "appName",
+ "type": {
+ "kind": "primitive",
+ "name": "string"
+ }
+ },
+ {
+ "name": "source",
+ "type": {
+ "kind": "primitive",
+ "name": "string"
+ }
+ },
+ {
+ "name": "windowDays",
+ "type": {
+ "kind": "primitive",
+ "name": "number"
+ }
+ },
+ {
+ "name": "installed",
+ "type": {
+ "kind": "primitive",
+ "name": "number"
+ },
+ "doc": "Succeeded and not a skip."
+ },
+ {
+ "name": "skipped",
+ "type": {
+ "kind": "primitive",
+ "name": "number"
+ },
+ "doc": "Succeeded as Skipped or Postponed: no install attempt."
+ },
+ {
+ "name": "failed",
+ "type": {
+ "kind": "primitive",
+ "name": "number"
+ }
+ },
+ {
+ "name": "incomplete",
+ "type": {
+ "kind": "primitive",
+ "name": "number"
+ },
+ "doc": "The observation ended before an outcome."
+ },
+ {
+ "name": "inProgress",
+ "type": {
+ "kind": "primitive",
+ "name": "number"
+ },
+ "doc": "No outcome yet."
+ },
+ {
+ "name": "collisionExcluded",
+ "type": {
+ "kind": "primitive",
+ "name": "number"
+ },
+ "doc": "Rows left out because the name stood for two apps in one enrollment."
+ },
+ {
+ "name": "topFailureCodes",
+ "type": {
+ "kind": "array",
+ "element": {
+ "kind": "ref",
+ "name": "AppAnalyticsFailureCode"
+ }
+ },
+ "doc": "The three most frequent failure codes of the failed rows, most frequent first."
+ }
+ ]
+ },
"GetCpeMappingsResponse": {
"kind": "object",
"doc": "Response of GET vulnerability/cpe-mappings: every mapping plus the count.",
diff --git a/src/Web/autopilot-monitor-web/lib/generated/wire-types.generated.ts b/src/Web/autopilot-monitor-web/lib/generated/wire-types.generated.ts
index 523be572..13661dd9 100644
--- a/src/Web/autopilot-monitor-web/lib/generated/wire-types.generated.ts
+++ b/src/Web/autopilot-monitor-web/lib/generated/wire-types.generated.ts
@@ -2178,6 +2178,27 @@ export interface GetAllTenantConfigurationsResponse {
nextLink?: string;
}
+/** Response of GET apps/fleet-context?appName=: how one app fared in the tenant's other enrollments of the last WindowDays days, for the diagnosis page. One row is one enrollment; the asking session is left out. */
+export interface GetAppFleetContextResponse {
+ success: boolean;
+ appName: string;
+ source: string;
+ windowDays: number;
+ /** Succeeded and not a skip. */
+ installed: number;
+ /** Succeeded as Skipped or Postponed: no install attempt. */
+ skipped: number;
+ failed: number;
+ /** The observation ended before an outcome. */
+ incomplete: number;
+ /** No outcome yet. */
+ inProgress: number;
+ /** Rows left out because the name stood for two apps in one enrollment. */
+ collisionExcluded: number;
+ /** The three most frequent failure codes of the failed rows, most frequent first. */
+ topFailureCodes: AppAnalyticsFailureCode[];
+}
+
/** Response of GET vulnerability/cpe-mappings: every mapping plus the count. */
export interface GetCpeMappingsResponse {
mappings: CpeMappingItem[];