@frankzhang2026/opencode-android-orchestrator 0.10.0 → 1.0.1

package/templates/scripts/automation/prepare-contract-review.sh

@@ -14,6 +14,10 @@ fi
 
 automation_validate_task_id "$task_id"
 automation_require_orchestrated
+[[ "$(automation_config_value '.schemaVersion')" != "6" ]] || {
+    automation_die "use android_orchestrator_intake draft to seal artifacts in the independent inbox"
+    exit 1
+}
 automation_require_approval proposal "$approval"
 automation_assert_repository_lease_available "$task_id"
 "$SCRIPT_DIR/validate-contract.sh" "$task_id" >/dev/null

package/templates/scripts/automation/quality-gate.sh

@@ -8,6 +8,7 @@ source "$SCRIPT_DIR/lib.sh"
 task_id="${1:-}"
 [[ -n "$task_id" ]] || { printf 'Usage: %s TASK-ID\n' "$0" >&2; exit 2; }
 automation_validate_task_id "$task_id"
+automation_require_queue_execution "$task_id"
 [[ "$(automation_read_state "$task_id")" == "CODING" ]] || automation_die "$task_id is not CODING"
 "$SCRIPT_DIR/validate-contract.sh" "$task_id" >/dev/null
 

package/templates/scripts/automation/record-red.sh

@@ -16,6 +16,7 @@ if [[ -z "$task_id" || -z "$expected" || "$separator" != "--" || -z "$filter" ||
 fi
 
 automation_validate_task_id "$task_id"
+automation_require_queue_execution "$task_id"
 automation_validate_test_filter "$filter"
 [[ ${#expected} -ge 3 ]] || automation_die "expected failure text is too short"
 [[ "$(automation_read_state "$task_id")" == "CODING" ]] || automation_die "$task_id is not CODING"

package/templates/scripts/automation/resume-review-fix.sh

@@ -8,6 +8,7 @@ source "$SCRIPT_DIR/lib.sh"
 task_id="${1:-}"
 [[ "$#" -eq 1 ]] || { printf 'Usage: %s TASK-ID\n' "$0" >&2; exit 2; }
 automation_validate_task_id "$task_id"
+automation_require_queue_execution "$task_id"
 [[ "$(automation_read_state "$task_id")" == "CHANGES_REQUESTED" ]] || automation_die "$task_id is not CHANGES_REQUESTED"
 
 workspace_file="$(automation_workspace_path "$task_id")"

package/templates/scripts/automation/resume-review.sh

@@ -8,6 +8,7 @@ source "$SCRIPT_DIR/lib.sh"
 task_id="${1:-}"
 [[ "$#" -eq 1 ]] || { printf 'Usage: %s TASK-ID\n' "$0" >&2; exit 2; }
 automation_validate_task_id "$task_id"
+automation_require_queue_execution "$task_id"
 automation_require_orchestrated
 
 workspace_file="$(automation_workspace_path "$task_id")"

package/templates/scripts/automation/resume-task.sh

@@ -13,6 +13,7 @@ if [[ "$#" -ne 2 ]]; then
 fi
 
 automation_validate_task_id "$task_id"
+automation_require_queue_execution "$task_id"
 automation_require_orchestrated
 automation_require_approval resume "$approval"
 

package/templates/scripts/automation/scope-gate.sh

@@ -17,9 +17,17 @@ baseline_meta="$evidence_dir/baseline.json"
 
 baseline_head="$(jq -er '.head' "$baseline_meta")"
 current_head="$(git -C "$AUTOMATION_ROOT" rev-parse HEAD)"
-[[ "$baseline_head" == "$current_head" ]] || { automation_die "HEAD changed after baseline"; exit 40; }
-
 workspace_file="$(automation_workspace_path "$task_id")"
+if [[ "$baseline_head" != "$current_head" ]]; then
+    automation_require_queue_execution "$task_id"
+    jq -e --arg original "$baseline_head" --arg current "$current_head" \
+        '.queueKey != null and .workspaceStrategy == "isolatedWorktree" and
+         .originalBaselineHead == $original and .baselineHead == $current and
+         .revalidationRunId != null' "$workspace_file" >/dev/null || {
+        automation_die "HEAD changed after baseline"
+        exit 40
+    }
+fi
 planning_commit_policy="$(jq -r '.planningArtifactsCommitPolicy // "legacyCommittedSeparately"' "$workspace_file")"
 if [[ "$planning_commit_policy" == "withProductChanges" ]]; then
     automation_assert_planning_artifacts_sealed "$task_id" "$AUTOMATION_ROOT" || exit 40

package/templates/scripts/automation/submit-review.sh

@@ -16,6 +16,7 @@ if [[ -z "$task_id" || -z "$decision" || -z "$summary" ]]; then
 fi
 
 automation_validate_task_id "$task_id"
+automation_require_queue_execution "$task_id"
 [[ "$decision" == "APPROVED" || "$decision" == "CHANGES_REQUESTED" ]] || automation_die "invalid review decision: $decision"
 [[ ${#summary} -ge 20 ]] || automation_die "review summary must contain at least 20 characters"
 [[ "$(automation_read_state "$task_id")" == "REVIEWING" ]] || automation_die "$task_id is not REVIEWING"
@@ -64,8 +65,13 @@ jq -nc \
     | automation_append_json "$evidence_dir/reviews.jsonl"
 
 if [[ "$decision" == "APPROVED" ]]; then
-    automation_transition_state "$task_id" "REVIEWING" "AWAITING_HUMAN" "reviewer" "independent review approved; human acceptance required"
-    automation_info "$task_id approved and awaiting human acceptance"
+    workspace_file="$(automation_workspace_path "$task_id")"
+    if [[ -n "${AUTOMATION_QUEUE_RUN_ID:-}" && "$(jq -r '.commitPolicy // "humanApproval"' "$workspace_file")" == "autoCommit" ]]; then
+        automation_transition_state "$task_id" "REVIEWING" "READY_TO_COMMIT" "reviewer" "independent review approved; sealed automatic local commit authorization must be verified"
+    else
+        automation_transition_state "$task_id" "REVIEWING" "AWAITING_HUMAN" "reviewer" "independent review approved; human acceptance required"
+        automation_info "$task_id approved and awaiting human acceptance"
+    fi
 else
     automation_transition_state "$task_id" "REVIEWING" "CHANGES_REQUESTED" "reviewer" "$summary"
     automation_warn "$task_id requires changes"

package/templates/scripts/automation/verify-task.sh

@@ -30,3 +30,16 @@ if [[ "$(jq -r '.deviceTestsRequired' "$contract")" == "true" ]]; then
 fi
 
 automation_info "all deterministic verification commands passed"
+if [[ -n "${AUTOMATION_QUEUE_RUN_ID:-}" ]]; then
+    [[ -n "${AUTOMATION_FULL_TEST_LOG:-}" ]] || automation_die "fresh full unit-test evidence is missing"
+    jq -n \
+        --arg taskId "$task_id" \
+        --arg runId "$AUTOMATION_QUEUE_RUN_ID" \
+        --arg diffSha256 "$(automation_worktree_diff_sha)" \
+        --arg log "$AUTOMATION_FULL_TEST_LOG" \
+        --argjson elapsedSeconds "$AUTOMATION_FULL_TEST_ELAPSED" \
+        --argjson tasks "$(jq -c '.gradleVerification.fullUnitTestTasks' "$AUTOMATION_CONFIG")" \
+        '{taskId: $taskId, runId: $runId, diffSha256: $diffSha256,
+          fullTestsExecuted: true, tasks: $tasks, log: $log, elapsedSeconds: $elapsedSeconds}' \
+        | automation_record_json "$evidence_dir/full-test-verification.json"
+fi