feat(compile): runtime prompt loading via {{#runtime-import}} markers#625

Merged

jamesadevine merged 11 commits into

mainfrom

feat/inlined-imports-runtime-prompt

May 19, 2026

Commits on May 19, 2026

feat(compile): runtime prompt loading via {{#runtime-import}} markers

jamesadevine
and
Copilot
committed
feat(compile): introduce System phase so ado-script installs before user runtimes

jamesadevine
and
Copilot
committed
fix(compile): guard runtime-import marker paths against whitespace and ##vso injection

jamesadevine
and
Copilot
committed
fix(compile): block path-traversal in runtime-import resolver and guard fixture helper

jamesadevine
and
Copilot
committed
refactor(compile): drop unused ADO_AW_IMPORT_BASE env var

jamesadevine
and
Copilot
committed
fix(compile): correct threat-prompt doc claim and gate required_hosts on actual download

jamesadevine
and
Copilot
committed
fix(compile): reject absolute paths in compile-time runtime-import resolver

jamesadevine
and
Copilot
committed
fix(compile): reject `}` in runtime-import paths to match the runtime regex

jamesadevine
and
Copilot
committed
fix(compile): make absolute-path check platform-independent for runtime-import

jamesadevine
and
Copilot
committed
fix(compile): reject absolute paths in runtime resolver and pass --base from pipeline

jamesadevine
and
Copilot
committed
fix(compile): reject `}` in runtime-import source path and fix stale extension refs

jamesadevine
and
Copilot
committed