Prebid external first-party bundle loading

.github/workflows/test.yml

@@ -80,7 +80,7 @@ jobs:
         run: cargo bench -p trusted-server-core --bench html_processor_bench -- --test
 
       - name: Run host-target CLI tests
-        run: cargo test --package trusted-server-cli --target x86_64-unknown-linux-gnu
+        run: ./scripts/test-cli.sh
 
       - name: Verify Fastly WASM release build
         run: cargo build --package trusted-server-adapter-fastly --release --target wasm32-wasip1

.gitignore

@@ -18,6 +18,7 @@
 
 # EdgeZero local KV store (created by edgezero-adapter-axum framework)
 .edgezero/
+/dist/prebid/
 
 # env
 .env*

CLAUDE.md

@@ -101,6 +101,8 @@ cargo test-spin        # Spin adapter route tests (native host)
 # Run host-target CLI tests (workspace default target is wasm32-wasip1)
 # Use your host triple, for example x86_64-unknown-linux-gnu on CI/Linux
 # or aarch64-apple-darwin on Apple Silicon macOS.
+# Use the local helper (recommended):
+# ./scripts/test-cli.sh
 cargo test --package trusted-server-cli --target <host-triple>
 
 # Format

Cargo.toml

@@ -85,6 +85,7 @@ temp-env = "0.3.6"
 tempfile = "3.24"
 tokio = { version = "1.49", features = ["sync", "macros", "io-util", "rt", "time"] }
 toml = "1.1"
+toml_edit = "0.23.10"
 tower = "0.4"
 trusted-server-core = { path = "crates/trusted-server-core" }
 url = "2.5.8"

crates/trusted-server-adapter-fastly/src/app.rs

@@ -1175,6 +1175,9 @@ mod tests {
                 origin_url = "https://origin.test-publisher.com"
                 proxy_secret = "unit-test-proxy-secret"
 
+                [proxy]
+                allowed_domains = ["*.example", "*.example.com"]
+
                 [ec]
                 passphrase = "test-passphrase-at-least-32-bytes!!"
 
@@ -1189,6 +1192,7 @@ mod tests {
                 [integrations.prebid]
                 enabled = true
                 server_url = "https://test-prebid.com/openrtb2/auction"
+                external_bundle_url = "https://assets.example/prebid/trusted-prebid.js"
 
                 [integrations.datadome]
                 enabled = true
@@ -1240,6 +1244,9 @@ mod tests {
             origin_url = "https://origin.test-publisher.com"
             proxy_secret = "unit-test-proxy-secret"
 
+            [proxy]
+            allowed_domains = ["*.example", "*.example.com"]
+
             [ec]
             passphrase = "test-secret-key-32-bytes-minimum"
 
@@ -1251,6 +1258,7 @@ mod tests {
             [integrations.prebid]
             enabled = true
             server_url = "https://test-prebid.com/openrtb2/auction"
+            external_bundle_url = "https://assets.example/prebid/trusted-prebid.js"
 
             [auction]
             enabled = true

crates/trusted-server-adapter-fastly/src/route_tests.rs

@@ -393,6 +393,9 @@ fn base_route_settings_toml() -> &'static str {
             origin_url = "https://origin.test-publisher.com"
             proxy_secret = "unit-test-proxy-secret"
 
+            [proxy]
+            allowed_domains = ["*.example", "*.example.com"]
+
             [ec]
             passphrase = "test-secret-key-32-bytes-minimum"
 
@@ -408,7 +411,8 @@ fn prebid_integration_toml() -> &'static str {
             [integrations.prebid]
             enabled = true
             server_url = "https://test-prebid.com/openrtb2/auction"
-        "#
+            external_bundle_url = "https://assets.example/prebid/trusted-prebid.js"
+            "#
 }
 
 fn create_test_settings() -> Settings {

crates/trusted-server-cli/Cargo.toml

@@ -2,7 +2,7 @@
 name = "trusted-server-cli"
 version = "0.1.0"
 authors = []
-edition = "2021"
+edition = "2024"
 publish = false
 license = "Apache-2.0"
 
@@ -22,9 +22,11 @@ log = { workspace = true }
 regex = { workspace = true }
 scraper = { workspace = true }
 serde = { workspace = true }
+serde_json = { workspace = true }
 tempfile = { workspace = true }
 tokio = { workspace = true }
 toml = { workspace = true }
+toml_edit = { workspace = true }
 trusted-server-core = { workspace = true }
 url = { workspace = true }
 which = { workspace = true }

crates/trusted-server-cli/src/lib.rs

@@ -17,6 +17,8 @@ mod config_init;
 #[cfg(not(target_arch = "wasm32"))]
 mod error;
 #[cfg(not(target_arch = "wasm32"))]
+mod prebid_bundle;
+#[cfg(not(target_arch = "wasm32"))]
 mod run;
 
 #[cfg(not(target_arch = "wasm32"))]