feat(compile): reusable cross-repository custom safe-output components#1508

Open

jamesadevine wants to merge 33 commits into

mainfrom

test/fix-named-pool-1es-crlf-windows

Commits on Jul 23, 2026

feat(compile): reusable cross-repository custom safe-output components

jamesadevine
and
Copilot
committed
fix(compile): address Rust PR review feedback on imports

jamesadevine
and
Copilot
committed
fix(compile): harden custom safe-output component checkout and executor

jamesadevine
and
Copilot
committed
feat(compile): make Azure Repos the primary import manifest fetcher

jamesadevine
and
Copilot
committed
feat(compile): inline imported bodies + move import-inputs to {{ }} delimiter

jamesadevine
and
Copilot
committed
refactor(compile): shorten import-input placeholder to {{ inputs.X }}

jamesadevine
and
Copilot
committed
fix(compile): omit hardcoded refs/heads/main on imported component repos

jamesadevine
and
Copilot
committed
fix(compile): preserve import cache directory structure to avoid collisions

jamesadevine
and
Copilot
committed
fix(compile): resolve imports in `check` via shared merge helper

jamesadevine
and
Copilot
committed
fix(compile): wire remote component provenance + typed endpoint into checkout

jamesadevine
and
Copilot
committed
fix(compile): fully own component provenance keys to prevent spoofing

jamesadevine
and
Copilot
committed
fix(compile): resolve imports in inspect/graph + make check fully offline

jamesadevine
and
Copilot
committed
fix(compile): harden imported custom safe-output components
jamesadevine
committed
fix(compile): route custom tools through stdio SafeOutputs
jamesadevine
committed
test(ci): align custom safe-output coverage
jamesadevine
committed
fix(smoke): resolve candidate child context
jamesadevine
committed
test(smoke): cover imported custom safe outputs
jamesadevine
committed
fix(smoke): expand untracked import cache paths
jamesadevine
committed
fix(smoke): prevent custom tool substitution
jamesadevine
committed
fix(mcp): serve runtime custom tool routes
jamesadevine
committed
fix(compile): align custom component checkout path
jamesadevine
committed
fix(compile): anchor custom job source checkout
jamesadevine
committed
fix(smoke): make noop target invoke MCP reliably
jamesadevine
committed
test(smoke): use Sonnet for candidate fixtures
jamesadevine
committed
fix(compile): restore read-scoped ADO token to agents
jamesadevine
committed
fix(smoke): tolerate configured reporter labels
jamesadevine
committed

Commits on Jul 25, 2026