feat(executor): auto-capture ADO build variables in ExecutionContext

src/execute.rs

@@ -145,6 +145,17 @@ fn log_execution_context(safe_output_dir: &Path, ctx: &ExecutionContext) {
     debug!("ADO project: {}", ctx.ado_project.as_deref().unwrap_or("<not set>"));
     debug!("Repository ID: {}", ctx.repository_id.as_deref().unwrap_or("<not set>"));
     debug!("Repository name: {}", ctx.repository_name.as_deref().unwrap_or("<not set>"));
+    debug!(
+        "Build ID: {}",
+        ctx.build_id
+            .map(|id| id.to_string())
+            .unwrap_or_else(|| "<not set>".to_string())
+    );
+    debug!("Build reason: {}", ctx.build_reason.as_deref().unwrap_or("<not set>"));
+    debug!(
+        "Triggered by definition: {}",
+        ctx.triggered_by_definition_name.as_deref().unwrap_or("<not set>")
+    );
     if !ctx.allowed_repositories.is_empty() {
         debug!(
             "Allowed repositories: {}",
@@ -376,6 +387,7 @@ mod tests {
             allowed_repositories: HashMap::new(),
             agent_stats: None,
             dry_run: false,
+            ..Default::default()
         };
 
         let result = execute_safe_output(&entry, &ctx).await;
@@ -410,6 +422,7 @@ mod tests {
             allowed_repositories: HashMap::new(),
             agent_stats: None,
             dry_run: false,
+            ..Default::default()
         };
 
         let result = execute_safe_output(&entry, &ctx).await;
@@ -560,6 +573,7 @@ mod tests {
             allowed_repositories: HashMap::new(),
             agent_stats: None,
             dry_run: false,
+            ..Default::default()
         };
 
         let result = execute_safe_output(&entry, &ctx).await;
@@ -604,6 +618,7 @@ mod tests {
             allowed_repositories: HashMap::new(),
             agent_stats: None,
             dry_run: false,
+            ..Default::default()
         };
 
         let result = execute_safe_output(&entry, &ctx).await;
@@ -648,6 +663,7 @@ mod tests {
             allowed_repositories: HashMap::new(),
             agent_stats: None,
             dry_run: false,
+            ..Default::default()
         };
 
         let result = execute_safe_output(&entry, &ctx).await;
@@ -697,6 +713,7 @@ mod tests {
             allowed_repositories: HashMap::new(),
             agent_stats: None,
             dry_run: false,
+            ..Default::default()
         };
 
         let results = execute_safe_outputs(temp_dir.path(), &ctx).await;
@@ -907,6 +924,7 @@ mod tests {
             allowed_repositories: HashMap::new(),
             agent_stats: None,
             dry_run: false,
+            ..Default::default()
         };
 
         let results = execute_safe_outputs(temp_dir.path(), &ctx).await;
@@ -952,6 +970,7 @@ mod tests {
             allowed_repositories: HashMap::new(),
             agent_stats: None,
             dry_run: false,
+            ..Default::default()
         };
 
         let results = execute_safe_outputs(temp_dir.path(), &ctx).await.unwrap();
@@ -1055,6 +1074,7 @@ mod tests {
             allowed_repositories: HashMap::new(),
             agent_stats: None,
             dry_run: false,
+            ..Default::default()
         };
 
         let result = execute_safe_output(&entry, &ctx).await;
@@ -1084,6 +1104,7 @@ mod tests {
             allowed_repositories: HashMap::new(),
             agent_stats: None,
             dry_run: true,
+            ..Default::default()
         };
 
         let result = execute_safe_output(&entry, &ctx).await;

src/safeoutputs/add_build_tag.rs

@@ -135,9 +135,11 @@ impl Executor for AddBuildTagResult {
 
         // 2b. Scope check: by default only the current build can be tagged
         if !config.allow_any_build {
-            let current_build_id: Option<i32> = std::env::var("BUILD_BUILDID")
-                .ok()
-                .and_then(|s| s.parse().ok());
+            // Pulled from ctx (sourced from BUILD_BUILDID); narrowed to i32 to
+            // match the agent-supplied build_id type.
+            let current_build_id: Option<i32> = ctx
+                .build_id
+                .and_then(|id| i32::try_from(id).ok());
             if let Some(current_id) = current_build_id {
                 if self.build_id != current_id {
                     return Ok(ExecutionResult::failure(format!(
@@ -147,7 +149,7 @@ impl Executor for AddBuildTagResult {
                     )));
                 }
             }
-            // If BUILD_BUILDID is not set (e.g. local execution), allow any build
+            // If build_id is not set (e.g. local execution), allow any build
         }
 
         // 3. Apply tag prefix if configured

src/safeoutputs/create_wiki_page.rs

@@ -701,6 +701,7 @@ wiki-name: "MyProject.wiki"
             allowed_repositories: std::collections::HashMap::new(),
             agent_stats: None,
             dry_run: false,
+            ..Default::default()
         };
 
         // wiki-name not in config → should return Err
@@ -766,6 +767,7 @@ wiki-name: "MyProject.wiki"
             allowed_repositories: HashMap::new(),
             agent_stats: None,
             dry_run: false,
+            ..Default::default()
         };
 
         let outcome = result.execute_impl(&ctx).await.unwrap();
@@ -806,6 +808,7 @@ wiki-name: "MyProject.wiki"
             allowed_repositories: HashMap::new(),
             agent_stats: None,
             dry_run: false,
+            ..Default::default()
         };
 
         let outcome = result.execute_impl(&ctx).await.unwrap();
@@ -846,6 +849,7 @@ wiki-name: "MyProject.wiki"
             allowed_repositories: HashMap::new(),
             agent_stats: None,
             dry_run: false,
+            ..Default::default()
         };
 
         // The GET will fail (network unreachable with a fake host), so the