Skip to content

docs(ado-script): add missing ado-proxy and azure-wif-refresh bundles to inventory #2207

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
github-actions wants to merge 1 commit into from
Closed

docs(ado-script): add missing ado-proxy and azure-wif-refresh bundles to inventory #2207

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 14 additions & 3 deletions docs/ado-script.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -654,6 +654,14 @@ scripts/ado-script/
│ ├── prepare-pr-base/ # prepare-pr-base.js entry point + create-pull-request base-ref fetch/deepen
│ │ ├── index.ts # main(): fetch/deepen target branch + set origin/HEAD so mcp.rs finds a diff base
│ │ └── __tests__/ # unit tests for fetch/deepen + origin/HEAD + benign-failure paths
│ ├── ado-proxy/ # ado-proxy.js entry point + credential-isolated ADO policy proxy;
│ │ │ # index.ts, server.ts, route.ts, policy.ts, scope.ts, catalog.ts (+
│ │ │ # catalog.gen.json generated from Rust), token.ts, ca.ts, config.ts,
│ │ │ # headers.ts, response.ts, upstream.ts, api-version.ts, log.ts, and
│ │ │ # colocated `*.test.ts` files (see "ado-proxy" section below)
│ ├── azure-wif-refresh/ # azure-wif-refresh.js entry point + renewable Azure WIF sidecar
│ │ ├── index.ts # main(): receive initial assertion via stdin, rotate assertions from OidcRequestUri
│ │ └── __tests__/ # unit tests for rotation and credential-isolation paths
│ ├── trigger-e2e/ # test-only: FACT_META gate-spec table + trigger-evaluation E2E scenarios (not a bundle)
│ │ ├── gate-spec.ts # FACT_META mirror of Rust Fact::ALL; drift-guarded by export-fact-catalog + fact-catalog.gen.json
│ │ ├── fact-catalog.gen.json # generated by `cargo run -- export-fact-catalog`; deep-compared by gate-spec.test.ts
Expand All @@ -675,7 +683,9 @@ scripts/ado-script/
├── conclusion.js # ncc bundle output (gitignored)
├── approval-summary.js # ncc bundle output (gitignored)
├── github-app-token.js # ncc bundle output (gitignored)
└── prepare-pr-base.js # ncc bundle output (gitignored)
├── prepare-pr-base.js # ncc bundle output (gitignored)
├── ado-proxy.js # ncc bundle output (gitignored)
└── azure-wif-refresh.js # ncc bundle output (gitignored)
```

The release workflow (`.github/workflows/release.yml`) runs
Expand All @@ -685,8 +695,9 @@ captures every bundle, including `gate.js`, `import.js`,
`exec-context-manual.js`, `exec-context-pipeline.js`,
`exec-context-ci-push.js`, `exec-context-workitem.js`,
`exec-context-schedule.js`, `exec-context-pr-checks.js`,
`exec-context-repo.js`, `conclusion.js`, `approval-summary.js`, and
`github-app-token.js` — into the
`exec-context-repo.js`, `conclusion.js`, `approval-summary.js`,
`github-app-token.js`, `prepare-pr-base.js`, `ado-proxy.js`, and
`azure-wif-refresh.js` — into the
`ado-script.zip` release asset. Pipelines download that asset at
runtime by URL pinned to the compiler's `CARGO_PKG_VERSION`, verify
its SHA-256 against the `checksums.txt` asset, then extract.
Expand Down