@frankzhang2026/opencode-android-orchestrator 0.1.0 → 0.3.0

package/templates/scripts/automation/transition-state.sh

@@ -0,0 +1,21 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+# shellcheck source=lib.sh
+source "$SCRIPT_DIR/lib.sh"
+
+task_id="${1:-}"
+expected="${2:-}"
+next="${3:-}"
+actor="${4:-}"
+note="${5:-}"
+
+if [[ -z "$task_id" || -z "$expected" || -z "$next" || -z "$actor" || -z "$note" ]]; then
+    printf 'Usage: %s TASK-ID EXPECTED NEXT ACTOR NOTE\n' "$0" >&2
+    exit 2
+fi
+
+automation_validate_task_id "$task_id"
+automation_require_layout
+automation_transition_state "$task_id" "$expected" "$next" "$actor" "$note"

package/templates/scripts/automation/validate-contract.sh

@@ -0,0 +1,98 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+# shellcheck source=lib.sh
+source "$SCRIPT_DIR/lib.sh"
+
+usage() {
+    printf 'Usage: %s TASK-ID|/path/to/contract.json\n' "$0" >&2
+}
+
+input="${1:-}"
+[[ -n "$input" ]] || { usage; exit 2; }
+automation_require_command jq
+automation_require_layout
+automation_validate_config
+
+if [[ "$input" == */* || "$input" == *.json || "$input" == *.example ]]; then
+    contract="$input"
+    [[ "$contract" == /* ]] || contract="$AUTOMATION_ROOT/$contract"
+else
+    automation_validate_task_id "$input"
+    contract="$(automation_contract_path "$input")"
+fi
+
+[[ -f "$contract" ]] || automation_die "contract not found: $contract"
+jq -e . "$contract" >/dev/null || automation_die "contract is not valid JSON: $contract"
+
+jq -e '
+    .schemaVersion == 1 and
+    (.id | type == "string" and test("^TASK-[A-Z0-9-]+$")) and
+    (.title | type == "string" and length > 0) and
+    .designApproved == true and
+    (.planPath | type == "string" and length > 0) and
+    .ambiguityPolicy == "BLOCKED" and
+    (.maxFixLoops | type == "number" and . >= 0 and . <= 1 and floor == .) and
+    (.maxChangedFiles | type == "number" and . >= 1 and . <= 12 and floor == .) and
+    (.allowedPaths | type == "array" and length > 0) and
+    (.forbiddenPaths | type == "array" and length > 0) and
+    (.allowedSuperpowers == ["test-driven-development", "systematic-debugging", "verification-before-completion"]) and
+    (.acceptanceCriteria | type == "array" and length > 0) and
+    (.nonGoals | type == "array" and length > 0) and
+    (.targetTests | type == "array" and length > 0 and all(.[];
+        type == "object" and
+        keys == ["filter", "gradleTask"] and
+        (.gradleTask | type == "string" and test("^(?:[A-Za-z][A-Za-z0-9_.-]*|(?::[A-Za-z0-9_.-]+)+)$")) and
+        (.filter | type == "string" and test("^[A-Za-z0-9_.#$*-]+$")))) and
+    ([.targetTests[].filter] | length == (unique | length)) and
+    (.deviceTestsRequired | type == "boolean") and
+    (.testPolicy == "required" or .testPolicy == "not-required") and
+    (if .testPolicy == "not-required" then (.testPolicyReason | type == "string" and length >= 20) else true end)
+' "$contract" >/dev/null || automation_die "contract is missing required fields or violates limits"
+
+task_id="$(jq -r '.id' "$contract")"
+automation_validate_task_id "$task_id"
+
+if [[ "$contract" == "$AUTOMATION_TASKS_DIR/"* ]]; then
+    expected_contract="$(automation_contract_path "$task_id")"
+    [[ "$contract" == "$expected_contract" ]] || automation_die "contract filename must match id: $(basename "$expected_contract")"
+fi
+
+while IFS= read -r value; do
+    [[ "$value" != /* ]] || automation_die "paths must be repository-relative: $value"
+    [[ "$value" != *".."* ]] || automation_die "paths may not contain '..': $value"
+    [[ "$value" =~ ^[A-Za-z0-9._/?*-]+$ ]] || automation_die "unsupported path pattern: $value"
+done < <(jq -r '.allowedPaths[], .forbiddenPaths[]' "$contract")
+
+while IFS= read -r protected; do
+    if automation_array_matches_path "$contract" '.allowedPaths' "$protected"; then
+        automation_die "allowedPaths overlaps protected path: $protected"
+    fi
+    if ! automation_array_matches_path "$contract" '.forbiddenPaths' "$protected"; then
+        automation_die "forbiddenPaths must cover protected path: $protected"
+    fi
+done < <(jq -r '.protectedPaths[]' "$AUTOMATION_CONFIG")
+
+while IFS=$'\t' read -r gradle_task filter; do
+    automation_validate_gradle_task "$gradle_task"
+    automation_validate_test_filter "$filter"
+    jq -e \
+        --arg task "$gradle_task" \
+        '.gradleVerification.focusedTestTasks | index($task) != null' \
+        "$AUTOMATION_CONFIG" >/dev/null || \
+        automation_die "target test Gradle task is not allowed by automation/config.json: $gradle_task"
+done < <(jq -r '.targetTests[] | [.gradleTask, .filter] | @tsv' "$contract")
+
+if rg -n -i 'replace with|TASK-EXAMPLE|todo|tbd|placeholder' "$contract" >/dev/null; then
+    automation_die "contract still contains template placeholders"
+fi
+
+plan_path="$(jq -r '.planPath' "$contract")"
+if [[ "$plan_path" == /* || "$plan_path" == *".."* ]]; then
+    automation_die "planPath must be a safe repository-relative path"
+fi
+[[ "$plan_path" == "docs/plans/$task_id.md" ]] || automation_die "planPath must be docs/plans/$task_id.md"
+[[ -f "$AUTOMATION_ROOT/$plan_path" ]] || automation_die "approved plan does not exist: $plan_path"
+
+automation_info "contract valid: $task_id"

package/templates/scripts/automation/verify-integration.sh

@@ -0,0 +1,38 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+# shellcheck source=lib.sh
+source "$SCRIPT_DIR/lib.sh"
+
+task_id="${1:-}"
+base="${2:-}"
+head="${3:-}"
+[[ "$#" -eq 3 ]] || { printf 'Usage: %s TASK-ID BASE-COMMIT HEAD-COMMIT\n' "$0" >&2; exit 2; }
+automation_validate_task_id "$task_id"
+[[ "$(automation_read_state "$task_id")" == "INTEGRATING" ]] || automation_die "$task_id is not INTEGRATING"
+contract="$(automation_contract_path "$task_id")"
+"$SCRIPT_DIR/validate-contract.sh" "$task_id" >/dev/null
+
+"$SCRIPT_DIR/integration-scope-gate.sh" "$task_id" "$base" "$head"
+
+while IFS=$'\t' read -r gradle_task filter; do
+    automation_info "running integration focused test ($gradle_task): $filter"
+    automation_run_focused_test "$gradle_task" "$filter" "$AUTOMATION_ROOT"
+done < <(jq -r '.targetTests[] | [.gradleTask, .filter] | @tsv' "$contract")
+
+automation_info "running integration full unit tests"
+automation_run_gradle_group "fullUnitTestTasks" "$AUTOMATION_ROOT"
+
+automation_info "running configured integration assemble tasks"
+automation_run_gradle_group "assembleTasks" "$AUTOMATION_ROOT"
+
+automation_info "running configured integration Android lint tasks"
+automation_run_gradle_group "lintTasks" "$AUTOMATION_ROOT"
+
+if [[ "$(jq -r '.deviceTestsRequired' "$contract")" == "true" ]]; then
+    automation_info "running configured integration device tests"
+    automation_run_gradle_group "deviceTestTasks" "$AUTOMATION_ROOT"
+fi
+
+automation_info "integration candidate passed all deterministic verification"

package/templates/scripts/automation/verify-task.sh

@@ -0,0 +1,39 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+# shellcheck source=lib.sh
+source "$SCRIPT_DIR/lib.sh"
+
+task_id="${1:-}"
+[[ -n "$task_id" ]] || { printf 'Usage: %s TASK-ID\n' "$0" >&2; exit 2; }
+automation_validate_task_id "$task_id"
+"$SCRIPT_DIR/validate-contract.sh" "$task_id" >/dev/null
+
+contract="$(automation_contract_path "$task_id")"
+evidence_dir="$(automation_evidence_path "$task_id")"
+[[ -f "$evidence_dir/baseline.json" ]] || { automation_die "baseline evidence is missing"; exit 41; }
+[[ -f "$evidence_dir/red.json" ]] || { automation_die "RED evidence is missing"; exit 41; }
+
+"$SCRIPT_DIR/scope-gate.sh" "$task_id"
+
+while IFS=$'\t' read -r gradle_task filter; do
+    automation_info "running focused test ($gradle_task): $filter"
+    automation_run_focused_test "$gradle_task" "$filter" "$AUTOMATION_ROOT"
+done < <(jq -r '.targetTests[] | [.gradleTask, .filter] | @tsv' "$contract")
+
+automation_info "running full unit tests"
+automation_run_gradle_group "fullUnitTestTasks" "$AUTOMATION_ROOT"
+
+automation_info "running configured assemble tasks"
+automation_run_gradle_group "assembleTasks" "$AUTOMATION_ROOT"
+
+automation_info "running configured Android lint tasks"
+automation_run_gradle_group "lintTasks" "$AUTOMATION_ROOT"
+
+if [[ "$(jq -r '.deviceTestsRequired' "$contract")" == "true" ]]; then
+    automation_info "running configured device tests"
+    automation_run_gradle_group "deviceTestTasks" "$AUTOMATION_ROOT"
+fi
+
+automation_info "all deterministic verification commands passed"