feat(source-files): generative source dependencies

[Tonisal-byte]

Adds support for custom source generation inputs.

Custom source-files entries can now declare origin.inputs, a list of already-fetched source filenames that azldev stages next to the generation script inside the mock chroot. This lets scripts consume upstream tarballs or earlier source files directly by relative filename, without knowing azldev’s internal staging paths.

Also updates source preparation ordering so component sources are fetched before custom source generation runs, making upstream source tarballs available as inputs. Custom script stdout/stderr remain quiet by default, but are streamed with --verbose and included in failure diagnostics.

[[components.telegraf.source-files]]
filename = "telegraf-1.38.2-vendor-stripped.tar.gz"
hash-type = "SHA512"
hash = "abc123..."
origin.type = "custom"
origin.script = "gen-telegraf-vendor-stripped.sh"
origin.inputs = ["telegraf-1.38.2.tar.gz"]
origin.mock-packages = ["tar", "gzip"]

Inside gen-telegraf-vendor-stripped.sh, the input is available beside the script:

#!/usr/bin/env bash
set -euo pipefail

tar -xf ./telegraf-1.38.2.tar.gz
# write final generated contents into /azldev-gen/output/

[Copilot]

Pull request overview

Adds support for declaring “already-fetched” source-file inputs for origin.type = "custom" generation scripts, and adjusts source preparation ordering so upstream sources are available before custom generation runs.

Changes:

• Introduces origin.inputs for components.*.source-files and validates it in config parsing (schema + docs + tests updated).
• Updates source preparation flow to fetch component sources before running custom generation, and prevents lookaside extraction from overwriting configured source-files names.
• Enhances custom generation execution to optionally stream script output with --verbose and include stdout/stderr in failure diagnostics.

Reviewed changes

Copilot reviewed 14 out of 14 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
schemas/azldev.schema.json	Adds JSON schema for origin.inputs.
scenario/snapshots/TestSnapshotsContainer_config_generate-schema_stdout_1.snap	Updates schema snapshot to include origin.inputs.
scenario/snapshots/TestSnapshots_config_generate-schema_stdout_1.snap	Updates schema snapshot to include origin.inputs.
internal/providers/sourceproviders/sourcemanager.go	Passes verbosity into custom provider; prevents lookaside extraction from overwriting configured source-files.
internal/providers/sourceproviders/customsourceprovider.go	Stages declared inputs next to script; refactors runner setup; improves script output handling/diagnostics.
internal/providers/sourceproviders/customsourceprovider_internal_test.go	Adds unit tests for input staging and output formatting.
internal/projectconfig/configfile.go	Validates origin.inputs (only allowed for custom, and entries must be valid filenames).
internal/projectconfig/configfile_test.go	Adds tests covering origin.inputs validation.
internal/projectconfig/component.go	Adds Origin.Inputs and fingerprints it when non-empty.
internal/app/azldev/core/sources/sourceprep.go	Reorders source fetching so component sources come before source-files fetching.
internal/app/azldev/core/sources/sourceprep_test.go	Updates expectations for the new fetch ordering.
internal/app/azldev/cmds/component/history_internal_test.go	Extends fingerprintable-field coverage to include Origin.Inputs.
internal/app/azldev/cmds/component/history_customizations.go	Surfaces source-files.inputs in customization history.
docs/user/reference/config/components.md	Documents origin.inputs and clarifies upstream tarballs are already available as inputs.

[Copilot]

Pull request overview

Copilot reviewed 14 out of 14 changed files in this pull request and generated 3 comments.

[Copilot]

Pull request overview

Copilot reviewed 14 out of 14 changed files in this pull request and generated 2 comments.

[Copilot]

Pull request overview

Copilot reviewed 14 out of 14 changed files in this pull request and generated 3 comments.

[dmcilvaney]

I think there is an ordering issue here, FetchComponent can grab a dist-git file first, and if it happens to have the same name as something in source-files, we skip further checks. We should probably just not allow things like combining replace-upstream with this.

[Tonisal-byte]

In the latest iteration I make sure source preparation never downloads any file already defined in source-files. Of course we continue to support replace-upstream to ensure the dev understands they are replacing a source already present in the upstream

[Copilot]

Pull request overview

Copilot reviewed 18 out of 18 changed files in this pull request and generated 1 comment.

[Copilot]

Pull request overview

Copilot reviewed 19 out of 19 changed files in this pull request and generated 2 comments.

[Copilot]

Pull request overview

Copilot reviewed 19 out of 19 changed files in this pull request and generated 2 comments.

[Copilot]

Pull request overview

Copilot reviewed 19 out of 19 changed files in this pull request and generated 2 comments.