Initial core bot activity library, CI, and extensibility

.azdo/cd-core.yaml

@@ -1,11 +1,16 @@
+# =============================================================================
+# This pipeline (BotCore-CD) builds, tests, and packs the core/ project.
+# PR trigger: next/* branches (all paths). CI trigger: next/* branches (core/** paths only).
+# Pushes packages to internal preview feed on next/core branch.
+# =============================================================================
+
 pr:
   branches:
     include:
       - next/*
-  # Uncomment and edit the following lines to add path filters for PRs in the future
-  # paths:
-  #   include:
-  #     - core/**
+  paths:
+    include:
+      - core/**
 
 trigger:
   branches:
@@ -55,7 +60,7 @@ stages:
 
       - task: NuGetCommand@2
         displayName: 'Push NuGet Packages'
-        condition: and(succeeded(), eq(variables['Build.SourceBranch'], 'refs/heads/next/core'))
+        condition: eq(variables['PushToADOFeed'], true)
         inputs:
           command: push
           packagesToPush: '$(Build.ArtifactStagingDirectory)/*.nupkg'
@@ -66,5 +71,5 @@ stages:
         displayName: 'Publish NuGet Packages as Pipeline Artifact'
         inputs:
           targetPath: '$(Build.ArtifactStagingDirectory)'
-          artifact: 'nuget-packages'
+          artifact: 'Packages'
           publishLocation: 'pipeline'

.azdo/ci.yaml

@@ -1,3 +1,10 @@
+# =============================================================================
+# This pipeline (teams.net-pr) builds, tests, and packs the SDK (excluding core/).
+# PR trigger: main and release/* branches. No CI trigger.
+# =============================================================================
+
+trigger: none
+
 pr:
   branches:
     include:
@@ -7,10 +14,12 @@ pr:
     exclude:
       - core/**
 
-
 pool:
   vmImage: 'ubuntu-22.04'
 
+variables:
+  buildConfiguration: 'Release'
+
 stages:
 - stage: Build_Test_Pack
   jobs:
@@ -33,22 +42,26 @@ stages:
       - script: dotnet restore 
         displayName: 'Restore'
 
-      - script: dotnet build --no-restore --configuration Release
+      - script: dotnet build --no-restore --configuration $(buildConfiguration)
         displayName: 'Build'
 
-      - script: dotnet test --no-build --configuration Release
+      - script: dotnet test --no-build --configuration $(buildConfiguration) --logger trx
         displayName: 'Test'
 
-      - script: dotnet pack --no-build -o $(Build.ArtifactStagingDirectory) /p:SymbolPackageFormat=snupkg --configuration Release
+      - task: PublishTestResults@2
+        displayName: 'Publish Test Results'
+        condition: succeededOrFailed()
+        inputs:
+          testResultsFormat: 'VSTest'
+          testResultsFiles: '**/*.trx'
+          mergeTestResults: true
+
+      - script: dotnet pack --no-build -o $(Build.ArtifactStagingDirectory) /p:SymbolPackageFormat=snupkg --configuration $(buildConfiguration)
         displayName: 'Pack'
 
-      - task: NuGetCommand@2
-        displayName: 'Push NuGet Packages'
-        condition: and(succeeded(), eq(variables['Build.SourceBranch'], 'refs/heads/main'))
+      - task: PublishPipelineArtifact@1
+        displayName: 'Publish NuGet Packages as Pipeline Artifact'
         inputs:
-          command: push
-          packagesToPush: '$(Build.ArtifactStagingDirectory)/*.nupkg'
-          nuGetFeedType: internal
-          publishVstsFeed: '$(System.TeamProject)/TeamsSDKPreviews'
-
-
+          targetPath: '$(Build.ArtifactStagingDirectory)'
+          artifact: 'Packages'
+          publishLocation: 'pipeline'

.azdo/publish-preview.yaml

@@ -0,0 +1,158 @@
+# =============================================================================
+# This pipeline publishes preview packages. Manually triggered only.
+# - "Internal": pushes unsigned packages to the internal TeamsSDKPreviews feed.
+# - "Public": signs (Authenticode + NuGet) and pushes to nuget.org (requires approval).
+# =============================================================================
+
+trigger: none
+
+pr: none
+
+parameters:
+- name: publishType
+  displayName: 'Publish Type'
+  type: string
+  default: 'Internal'
+  values:
+  - Internal
+  - Public
+
+pool:
+  vmImage: 'ubuntu-22.04'
+
+variables:
+  buildConfiguration: 'Release'
+  folderPath: '$(Build.SourcesDirectory)'
+  ${{ if eq(parameters.publishType, 'Public') }}:
+    appRegistrationTenantId: 'cdc5aeea-15c5-4db6-b079-fcadd2505dc2'
+    authenticodeSignId: '2d5c4ab9-0b7e-4f60-bb92-70322df77b94'
+    nugetSignId: 'a94a770a-9a7b-4888-a3ea-24584b851e49'
+
+stages:
+
+- ${{ if eq(parameters.publishType, 'Internal') }}:
+  - stage: Build_Test_Pack_Push_Internal
+    displayName: 'Build, Test, Pack, and Push (Internal Preview)'
+    jobs:
+    - job: BuildTestPackPush
+      displayName: 'Build, Test, Pack, and Push to Internal Feed'
+      steps:
+        - checkout: self
+
+        - task: UseDotNet@2
+          displayName: 'Use .NET 8'
+          inputs:
+            packageType: 'sdk'
+            version: '8.0.x'
+
+        - task: UseDotNet@2
+          displayName: 'Use .NET 10'
+          inputs:
+            packageType: 'sdk'
+            version: '10.0.x'
+
+        - script: dotnet restore
+          displayName: 'Restore'
+
+        - script: dotnet build --no-restore --configuration $(buildConfiguration)
+          displayName: 'Build'
+
+        - script: dotnet test --no-build --verbosity normal --logger trx --configuration $(buildConfiguration)
+          displayName: 'Test'
+
+        - task: PublishTestResults@2
+          displayName: 'Publish Test Results'
+          condition: succeededOrFailed()
+          inputs:
+            testResultsFormat: 'VSTest'
+            testResultsFiles: '**/*.trx'
+            mergeTestResults: true
+
+        - script: dotnet pack --no-build -o $(Build.ArtifactStagingDirectory) /p:SymbolPackageFormat=snupkg --configuration $(buildConfiguration)
+          displayName: 'Pack'
+
+        - task: NuGetCommand@2
+          displayName: 'Push NuGet Packages to Internal Feed'
+          inputs:
+            command: push
+            packagesToPush: '$(Build.ArtifactStagingDirectory)/*.nupkg'
+            nuGetFeedType: internal
+            publishVstsFeed: '$(System.TeamProject)/TeamsSDKPreviews'
+
+        - task: PublishPipelineArtifact@1
+          displayName: 'Publish NuGet Packages as Pipeline Artifact'
+          inputs:
+            targetPath: '$(Build.ArtifactStagingDirectory)'
+            artifact: 'PreviewPackages'
+            publishLocation: 'pipeline'
+
+- ${{ if eq(parameters.publishType, 'Public') }}:
+  - stage: Build_Test_Sign_Pack
+    displayName: 'Build, Test, Sign, and Pack (Public Preview)'
+    jobs:
+    - job: BuildTestSignPack
+      displayName: 'Build, Test, Sign, and Pack'
+      steps:
+        - checkout: self
+
+        - task: UseDotNet@2
+          displayName: 'Use .NET 8'
+          inputs:
+            packageType: 'sdk'
+            version: '8.0.x'
+
+        - task: UseDotNet@2
+          displayName: 'Use .NET 10'
+          inputs:
+            packageType: 'sdk'
+            version: '10.0.x'
+
+        - script: dotnet restore
+          displayName: 'Restore'
+
+        - script: dotnet build --no-restore --configuration $(buildConfiguration)
+          displayName: 'Build'
+
+        - script: dotnet test --no-build --verbosity normal --logger trx --configuration $(buildConfiguration)
+          displayName: 'Test'
+
+        - task: PublishTestResults@2
+          displayName: 'Publish Test Results'
+          condition: succeededOrFailed()
+          inputs:
+            testResultsFormat: 'VSTest'
+            testResultsFiles: '**/*.trx'
+            mergeTestResults: true
+
+        - template: templates/sign-and-pack.yaml
+
+        - task: PublishPipelineArtifact@1
+          displayName: 'Publish NuGet Packages as Pipeline Artifact'
+          inputs:
+            targetPath: '$(Build.ArtifactStagingDirectory)'
+            artifact: 'PreviewPackages'
+            publishLocation: 'pipeline'
+
+- ${{ if eq(parameters.publishType, 'Public') }}:
+  - stage: PushToNuGet
+    displayName: 'Push Preview Packages to nuget.org'
+    dependsOn: Build_Test_Sign_Pack
+    jobs:
+    - deployment: PushPackages
+      displayName: 'Manual Approval Required to Push Packages'
+      environment:
+        name: 'teams-net-publish'
+      strategy:
+        runOnce:
+          deploy:
+            steps:
+            - download: current
+              artifact: PreviewPackages
+
+            - task: NuGetCommand@2
+              displayName: 'Push NuGet Packages'
+              inputs:
+                command: push
+                packagesToPush: '$(Pipeline.Workspace)/PreviewPackages/*.nupkg'
+                nuGetFeedType: external
+                publishFeedCredentials: 'Microsoft.Teams.*'

.azdo/publish.yml

@@ -1,3 +1,8 @@
+# =============================================================================
+# For public releases, this pipeline (teams.net) is triggered manually.
+# It builds, tests, signs (Authenticode + NuGet), and packs the code, then pushes to nuget.org (requires approval).
+# =============================================================================
+
 trigger: none
 
 pr: none
@@ -38,104 +43,25 @@ stages:
       - script: dotnet build --no-restore --configuration $(buildConfiguration)
         displayName: 'Build'
 
-      - script: dotnet test --no-restore --verbosity normal --logger trx --configuration $(buildConfiguration)
+      - script: dotnet test --no-build --verbosity normal --logger trx --configuration $(buildConfiguration)
         displayName: 'Test'
 
-      - task: EsrpCodeSigning@5
-        displayName: "Authenticode Sign DLLs"
-        inputs:
-          ConnectedServiceName: 'TeamsESRP-CP-230012'
-          AppRegistrationTenantId: '$(appRegistrationTenantId)'
-          AppRegistrationClientId: '$(authenticodeSignId)'
-          AuthSignCertName: '$(authenticodeSignId)'
-          EsrpClientId: '$(authenticodeSignId)'
-          AuthAKVName: esrp-teams
-          UseMSIAuthentication: true
-          FolderPath: '$(folderPath)'
-          Pattern: 'Libraries/**/*.dll'
-          UseMinimatch: true
-          signConfigType: 'inlineSignParams'
-          inlineOperation: |
-            [
-              {
-                  "KeyCode": "CP-230012",
-                  "OperationCode": "SigntoolSign",
-                  "Parameters": {
-                      "OpusName": "Microsoft",
-                      "OpusInfo": "http://www.microsoft.com",
-                      "FileDigest": "/fd \"SHA256\"",
-                      "PageHash": "/NPH",
-                      "TimeStamp": "/tr \"http://rfc3161.gtm.corp.microsoft.com/TSS/HttpTspServer\" /td sha256"
-                  },
-                  "ToolName": "sign",
-                  "ToolVersion": "1.0"
-              },
-              {
-                "KeyCode": "CP-230012",
-                "OperationCode": "SigntoolVerify",
-                "Parameters": {},
-                "ToolName": "sign",
-                "ToolVersion": "1.0"
-              }
-            ]
-          SessionTimeout: '60'
-          MaxConcurrency: '50'
-          MaxRetryAttempts: '5'
-
-      - task: DotNetCoreCLI@2
-        displayName: 'Pack NuGet Packages'
+      - task: PublishTestResults@2
+        displayName: 'Publish Test Results'
+        condition: succeededOrFailed()
         inputs:
-          command: pack
-          packagesToPack: '$(folderPath)/Libraries/**/*.csproj'
-          packDestination: '$(Build.ArtifactStagingDirectory)'
-          includeSymbols: false
-          nobuild: true
-          configuration: '$(buildConfiguration)'
-          arguments: '/p:SymbolPackageFormat=snupkg'
+          testResultsFormat: 'VSTest'
+          testResultsFiles: '**/*.trx'
+          mergeTestResults: true
 
-      - task: EsrpCodeSigning@5
-        displayName: 'Sign NuGet Packages'
-        inputs:
-          ConnectedServiceName: 'TeamsESRP-CP-401405'
-          AppRegistrationTenantId: '$(appRegistrationTenantId)'
-          AppRegistrationClientId: '$(nugetSignId)'
-          AuthSignCertName: '$(nugetSignId)'
-          EsrpClientId: '$(nugetSignId)'
-          AuthAKVName: esrp-teams
-          UseMSIAuthentication: true
-          FolderPath: '$(Build.ArtifactStagingDirectory)'
-          Pattern: |
-            *.nupkg
-            *.snupkg
-          UseMinimatch: true
-          signConfigType: 'inlineSignParams'
-          inlineOperation: |
-            [
-              {
-                "KeyCode": "CP-401405",
-                "OperationCode": "NuGetSign",
-                "ToolName": "sign",
-                "ToolVersion": "1.0",
-                "Parameters": {}
-              },
-              {
-                "KeyCode": "CP-401405",
-                "OperationCode": "NuGetVerify",
-                "Parameters": {},
-                "ToolName": "sign",
-                "ToolVersion": "1.0"
-              }
-            ]
-          SessionTimeout: '20'
-          MaxConcurrency: '50'
-          MaxRetryAttempts: '5'
-          PendingAnalysisWaitTimeoutMinutes: '5'
+      - template: templates/sign-and-pack.yaml
 
-      - task: PublishBuildArtifacts@1
-        displayName: 'Publish NuGet Artifacts'
+      - task: PublishPipelineArtifact@1
+        displayName: 'Publish NuGet Packages as Pipeline Artifact'
         inputs:
-          PathToPublish: '$(Build.ArtifactStagingDirectory)'
-          ArtifactName: 'Packages'
+          targetPath: '$(Build.ArtifactStagingDirectory)'
+          artifact: 'Packages'
+          publishLocation: 'pipeline'
 
 - stage: PushToNuGet
   displayName: 'Push NuGet Packages to nuget.org'