Bot Overview

Aggregated payload for the /settings?tab=bot management page.

Returns the user's claimed bot installs (with covered repos and latest-snapshot metadata), unclaimed bot installs they could claim (username match OR an org they belong to, when X-GitHub-Token is supplied), and github_username itself so the frontend doesn't need a separate /auth/me round-trip.

Passing X-GitHub-Token (the Supabase session's provider_token) enables org-install discovery. The backend cross-checks the token's GitHub identity against the user's github_username before enumerating orgs — submitting someone else's token is a no-op.