[codex] Add AI recommendation draft action

[FrodeHus]

Summary

• Add an AI recommendation draft endpoint that summarizes available patch assessments for open remediation-case vulnerabilities using the default tenant AI profile.
• Add the Security Analyst Workbench Apply AI Recommendation action with a work-in-progress modal and editable field population without submitting the recommendation.
• Add frontend schema/server-function wiring, focused backend/frontend tests, and include the package-lock/instruction-file updates from the working tree.

Validation

• npm test -- SecurityAnalystWorkbench.test.tsx --run
• npm run typecheck
• dotnet test tests\PatchHound.Tests\PatchHound.Tests.csproj --filter "FullyQualifiedName~RemediationDecisionsControllerTests.GenerateAiRecommendationDraft" -v minimal
• dotnet build PatchHound.slnx

Notes

• GitNexus staged impact reported medium risk, centered on the Security Analyst Workbench flow.

[Copilot]

Pull request overview

This PR adds an “AI recommendation draft” capability to the remediation decision flow, exposing a backend endpoint that generates a draft recommendation from existing patch assessments and wiring it into the Security Analyst Workbench UI as an “Apply AI Recommendation” action.

Changes:

• Add AiRecommendationDraftService plus a new remediation-case API endpoint to generate an editable recommendation draft (outcome, priority override, rationale).
• Add a Workbench action that fetches the draft and populates the recommendation form fields without saving.
• Add/adjust backend + frontend tests and update lockfiles/docs metadata.

Reviewed changes

Copilot reviewed 11 out of 13 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
tests/PatchHound.Tests/Api/RemediationDecisionsControllerTests.cs	Adds coverage for AI recommendation draft generation behavior (service-level).
src/PatchHound.Api/Services/AiRecommendationDraftService.cs	Implements AI-driven draft generation from open-vulnerability patch assessments.
src/PatchHound.Api/Program.cs	Registers AiRecommendationDraftService in DI.
src/PatchHound.Api/Models/Decisions/RemediationDecisionDto.cs	Introduces AiRecommendationDraftDto response model.
src/PatchHound.Api/Controllers/RemediationDecisionsController.cs	Adds POST .../analysis/ai-recommendation endpoint.
package-lock.json	Adds a new root-level npm lockfile.
frontend/src/components/features/remediation/SecurityAnalystWorkbench.tsx	Adds “Apply AI Recommendation” UI, loading modal, and form population.
frontend/src/components/features/remediation/SecurityAnalystWorkbench.test.tsx	Adds UI tests for AI recommendation button visibility and field population.
frontend/src/api/remediation.schemas.ts	Adds Zod schema/type for AI recommendation draft response.
frontend/src/api/remediation.functions.ts	Adds server function to call the new AI recommendation draft endpoint.
frontend/package-lock.json	Updates frontend dependency lockfile entries.
CLAUDE.md	Updates GitNexus index stats and trims guidance sections.
AGENTS.md	Updates GitNexus index stats and trims guidance sections.

Files not reviewed (1)

• frontend/package-lock.json: Language not supported

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.