feat: auto-detect source from header in check command (#108)

The check command now takes only the pipeline YAML path and discovers
the source markdown file from the @ado-aw header. This eliminates a
path mismatch bug where local compilation embeds a relative source
path in the header but the pipeline check step passed an absolute
 path, causing the integrity check to always
fail at runtime.

BREAKING CHANGE: \check <source> <pipeline>\ is now \check <pipeline>\.
Update any scripts or pipeline templates that call the old two-arg form.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: jamesadevine

AGENTS.md

@@ -715,9 +715,9 @@ Global flags (apply to all subcommands): `--verbose, -v` (enable info-level logg
   - The generated file includes a placeholder for agent instructions that you edit directly
 - `compile <path>` - Compile a markdown file to Azure DevOps pipeline YAML
   - `--output, -o <path>` - Optional output path for generated YAML
-- `check <source> <pipeline>` - Verify that a compiled pipeline matches its source markdown
-  - `<source>` - Path to the source markdown file
+- `check <pipeline>` - Verify that a compiled pipeline matches its source markdown
   - `<pipeline>` - Path to the pipeline YAML file to verify
+  - The source markdown path is auto-detected from the `@ado-aw` header in the pipeline file
   - Useful for CI checks to ensure pipelines are regenerated after source changes
 - `mcp <output_directory> <bounding_directory>` - Run as an MCP server for safe outputs
 - `execute` - Execute safe outputs from Stage 1 (Stage 2 of pipeline)

src/compile/mod.rs

@@ -182,21 +182,54 @@ pub async fn compile_all_pipelines() -> Result<()> {
 
 /// Check that a compiled pipeline YAML matches its source markdown.
 ///
-/// Compiles the source markdown fresh and compares (whitespace-normalized)
+/// Reads the `@ado-aw` header from `pipeline_path` to discover the source
+/// markdown file, compiles it fresh, and compares (whitespace-normalized)
 /// against the existing pipeline file. Returns an error if they differ.
-pub async fn check_pipeline(source_path: &str, pipeline_path: &str) -> Result<()> {
-    let source_path = Path::new(source_path);
+pub async fn check_pipeline(pipeline_path: &str) -> Result<()> {
     let pipeline_path = Path::new(pipeline_path);
+
+    // Read existing pipeline and extract header to discover source path
+    let existing = tokio::fs::read_to_string(pipeline_path)
+        .await
+        .with_context(|| {
+            format!(
+                "Failed to read pipeline file: {}",
+                pipeline_path.display()
+            )
+        })?;
+
+    let header_meta = existing
+        .lines()
+        .take(5)
+        .find_map(|line| crate::detect::parse_header_line(line))
+        .with_context(|| {
+            format!(
+                "No @ado-aw header found in {}. Is this file generated by ado-aw?",
+                pipeline_path.display()
+            )
+        })?;
+
+    // Resolve source path relative to the pipeline file's parent directory
+    let source_path = pipeline_path
+        .parent()
+        .unwrap_or_else(|| Path::new("."))
+        .join(&header_meta.source);
+
     info!(
-        "Checking pipeline integrity: {} -> {}",
+        "Checking pipeline integrity: {} -> {} (source from header)",
         source_path.display(),
         pipeline_path.display()
     );
 
     // Compile fresh from source
-    let content = tokio::fs::read_to_string(source_path)
+    let content = tokio::fs::read_to_string(&source_path)
         .await
-        .with_context(|| format!("Failed to read source file: {}", source_path.display()))?;
+        .with_context(|| {
+            format!(
+                "Source file '{}' (from header) not found. Has it been moved or deleted?",
+                source_path.display()
+            )
+        })?;
 
     let (front_matter, markdown_body) = parse_markdown(&content)?;
 
@@ -207,21 +240,18 @@ pub async fn check_pipeline(source_path: &str, pipeline_path: &str) -> Result<()
         CompileTarget::Standalone => Box::new(standalone::StandaloneCompiler),
     };
 
+    // Pass the header's relative source path to compile so the generated
+    // header embeds the same path that was used during the original compilation.
     let pipeline_yaml = compiler
-        .compile(source_path, pipeline_path, &front_matter, &markdown_body)
+        .compile(
+            Path::new(&header_meta.source),
+            pipeline_path,
+            &front_matter,
+            &markdown_body,
+        )
         .await?;
     let pipeline_yaml = clean_generated_yaml(&pipeline_yaml);
 
-    // Read existing pipeline file
-    let existing = tokio::fs::read_to_string(pipeline_path)
-        .await
-        .with_context(|| {
-            format!(
-                "Failed to read pipeline file: {}",
-                pipeline_path.display()
-            )
-        })?;
-
     // Compare ignoring whitespace differences
     if normalize_whitespace(&pipeline_yaml) != normalize_whitespace(&existing) {
         anyhow::bail!(

src/main.rs

@@ -40,9 +40,7 @@ enum Commands {
     },
     /// Check that a compiled pipeline matches its source markdown
     Check {
-        /// Path to the source markdown file
-        source: String,
-        /// Path to the pipeline YAML file to verify
+        /// Path to the pipeline YAML file to verify (source auto-detected from header)
         pipeline: String,
     },
     /// Run as an MCP server
@@ -158,8 +156,8 @@ async fn main() -> Result<()> {
                     compile::compile_all_pipelines().await?
                 }
             },
-            Commands::Check { source, pipeline } => {
-                compile::check_pipeline(&source, &pipeline).await?;
+            Commands::Check { pipeline } => {
+                compile::check_pipeline(&pipeline).await?;
             }
             Commands::Mcp {
                 output_directory,

templates/1es-base.yml

@@ -75,7 +75,7 @@ extends:
                   - bash: |
                       AGENTIC_PIPELINES_PATH="$(Pipeline.Workspace)/agentic-pipeline-compiler/ado-aw"
                       chmod +x "$AGENTIC_PIPELINES_PATH"
-                      $AGENTIC_PIPELINES_PATH check "{{ source_path }}" "{{ pipeline_path }}"
+                      $AGENTIC_PIPELINES_PATH check "{{ pipeline_path }}"
                     displayName: "Verify pipeline integrity"
 
                   - bash: |

templates/base.yml

@@ -73,7 +73,7 @@ jobs:
       - bash: |
           AGENTIC_PIPELINES_PATH="$(Pipeline.Workspace)/agentic-pipeline-compiler/ado-aw"
           chmod +x "$AGENTIC_PIPELINES_PATH"
-          $AGENTIC_PIPELINES_PATH check "{{ source_path }}" "{{ pipeline_path }}"
+          $AGENTIC_PIPELINES_PATH check "{{ pipeline_path }}"
         displayName: "Verify pipeline integrity"
 
       - bash: |