@frankzhang2026/opencode-android-orchestrator 0.6.0 → 0.7.0

package/templates/scripts/automation/resume-task.sh

@@ -0,0 +1,135 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+# shellcheck source=lib.sh
+source "$SCRIPT_DIR/lib.sh"
+
+task_id="${1:-}"
+approval="${2:-}"
+if [[ "$#" -ne 2 ]]; then
+    printf 'Usage: %s TASK-ID "RESUME-APPROVAL"\n' "$0" >&2
+    exit 2
+fi
+
+automation_validate_task_id "$task_id"
+automation_require_orchestrated
+automation_require_approval resume "$approval"
+
+workspace_file="$(automation_workspace_path "$task_id")"
+origin_file="$(automation_origin_path "$task_id")"
+state_file="$(automation_state_path "$task_id")"
+evidence_dir="$(automation_evidence_path "$task_id")"
+transitions_file="$evidence_dir/transitions.jsonl"
+resumptions_file="$evidence_dir/baseline-resumptions.jsonl"
+
+[[ -f "$workspace_file" ]] || automation_die "workspace metadata is missing for $task_id"
+[[ -f "$origin_file" ]] || automation_die "origin evidence is missing for $task_id"
+[[ -f "$state_file" ]] || automation_die "state is missing for $task_id"
+[[ -f "$transitions_file" ]] || automation_die "transition evidence is missing for $task_id"
+
+automation_acquire_run_lock "$task_id"
+trap 'automation_release_run_lock' EXIT
+
+[[ "$(automation_read_state "$task_id")" == "BLOCKED" ]] || automation_die "$task_id is not BLOCKED"
+
+source_root="$(jq -er '.sourceRoot' "$workspace_file")"
+task_root="$(automation_workspace_task_root "$workspace_file")"
+workspace_strategy="$(automation_workspace_strategy "$workspace_file")"
+original_branch="$(jq -er '.originalBranch' "$workspace_file")"
+task_branch="$(jq -er '.taskBranch' "$workspace_file")"
+baseline_head="$(jq -er '.baselineHead' "$workspace_file")"
+
+[[ "$(jq -r '.repositoryLeaseRequired // false' "$workspace_file")" == "true" ]] || \
+    automation_die "baseline recovery requires a leased transactional workspace"
+[[ -d "$task_root" ]] || automation_die "task root is missing: $task_root"
+automation_require_repository_lease "$task_id" "$source_root" "$workspace_strategy"
+task_root="$(cd "$task_root" && pwd -P)"
+source_root="$(cd "$source_root" && pwd -P)"
+[[ "$source_root" == "$AUTOMATION_ROOT" ]] || automation_die "workspace sourceRoot does not match this repository"
+[[ "$(jq -er '.sourceRoot' "$origin_file")" == "$source_root" ]] || automation_die "origin sourceRoot does not match workspace metadata"
+[[ "$(jq -er '.originalBranch' "$origin_file")" == "$original_branch" ]] || automation_die "origin branch does not match workspace metadata"
+[[ "$(automation_current_branch "$task_root")" == "$task_branch" ]] || automation_die "task branch changed"
+[[ "$(git -C "$task_root" rev-parse HEAD)" == "$baseline_head" ]] || automation_die "task HEAD changed before baseline sealing"
+git -C "$source_root" show-ref --verify --quiet "refs/heads/$original_branch" || automation_die "recorded original branch no longer exists"
+[[ "$(git -C "$source_root" rev-parse "refs/heads/$original_branch")" == "$baseline_head" ]] || automation_die "original branch drifted after task preparation"
+
+for sealed_evidence in baseline.json red.json ready.json review.json reviews.jsonl; do
+    [[ ! -e "$evidence_dir/$sealed_evidence" ]] || \
+        automation_die "$sealed_evidence already exists; baseline-only recovery is forbidden"
+done
+
+state_revision="$(jq -er '.revision' "$state_file")"
+if ! jq -s -e --argjson revision "$state_revision" '
+    length == $revision and
+    length >= 2 and
+    .[-2].from == "PENDING" and
+    .[-2].to == "CODING" and
+    .[-2].actor == "coder-launcher" and
+    .[-2].note == "preflight passed; capturing baseline" and
+    .[-1].from == "CODING" and
+    .[-1].to == "BLOCKED" and
+    (.[-1].actor == "coder" or .[-1].actor == "preflight" or .[-1].actor == "orchestrator") and
+    (.[-1].note | test("baseline|claim|基线"; "i"))
+' "$transitions_file" >/dev/null; then
+    automation_die "BLOCKED state is not a recoverable baseline-capture interruption"
+fi
+
+automation_assert_planning_artifacts_sealed "$task_id" "$task_root"
+changed_paths=()
+while IFS= read -r path; do
+    [[ -n "$path" ]] && changed_paths+=("$path")
+done < <(automation_changed_paths_at "$task_root")
+[[ "${#changed_paths[@]}" -eq 2 ]] || automation_die "baseline recovery requires exactly the sealed plan and contract changes"
+for path in "${changed_paths[@]}"; do
+    automation_is_planning_artifact "$task_id" "$path" || automation_die "product or unrelated change blocks baseline recovery: $path"
+    if git -C "$task_root" ls-files --error-unmatch -- "$path" >/dev/null 2>&1; then
+        automation_die "planning artifact became tracked before baseline recovery: $path"
+    fi
+done
+
+restart_count=0
+if [[ -f "$resumptions_file" ]]; then
+    restart_count="$(jq -s --arg taskId "$task_id" '[.[] | select(.taskId == $taskId)] | length' "$resumptions_file")"
+fi
+max_restarts=1
+[[ "$restart_count" -lt "$max_restarts" ]] || automation_die "baseline restart limit exhausted"
+next_restart=$((restart_count + 1))
+blocked_revision="$state_revision"
+current_diff_sha="$(automation_worktree_diff_sha "$task_root")"
+
+jq -nc \
+    --arg taskId "$task_id" \
+    --arg kind "resume-baseline" \
+    --arg at "$(automation_now)" \
+    --arg diffSha256 "$current_diff_sha" \
+    --argjson blockedRevision "$blocked_revision" \
+    '{taskId: $taskId, kind: $kind, at: $at,
+      blockedRevision: $blockedRevision, diffSha256: $diffSha256}' \
+    | automation_append_json "$(automation_approvals_path "$task_id")"
+
+automation_transition_state \
+    "$task_id" \
+    "BLOCKED" \
+    "PENDING" \
+    "human" \
+    "baseline-only recovery $next_restart/$max_restarts; no product diff and baseline evidence absent"
+
+jq -nc \
+    --arg taskId "$task_id" \
+    --arg at "$(automation_now)" \
+    --arg diffSha256 "$current_diff_sha" \
+    --argjson blockedRevision "$blocked_revision" \
+    --argjson restart "$next_restart" \
+    --argjson maxRestarts "$max_restarts" \
+    '{taskId: $taskId, at: $at, blockedRevision: $blockedRevision,
+      diffSha256: $diffSha256, restart: $restart,
+      maxRestarts: $maxRestarts, route: "BLOCKED->PENDING",
+      baselineEvidencePresent: false, productDiffPresent: false}' \
+    | automation_append_json "$resumptions_file"
+
+automation_info "$task_id baseline-only recovery accepted; restarting deterministic claim flow"
+automation_release_run_lock
+trap - EXIT
+
+"$SCRIPT_DIR/orchestrate-task.sh" "$task_id"

package/templates/scripts/automation/tests/run-tests.sh

@@ -119,13 +119,17 @@ jq -n '{
     maxFixLoops: 1,
     maxReviewCycles: 1,
     maxReviewerRestarts: 2,
+    unitTestsEnabled: true,
+    lintEnabled: false,
+    longCommandTimeoutMs: 1800000,
     autoCleanupWorktrees: true,
     pushAfterAcceptance: false,
     approvalPhrases: {
         proposal: "批准方案，生成计划和任务合同。",
         contract: "合同已复核，批准自动执行到人工验收阶段。",
         acceptance: "验收通过，提交到原分支。",
-        abort: "中止任务，封存修改并恢复原分支。"
+        abort: "中止任务，封存修改并恢复原分支。",
+        resume: "恢复任务，重新捕获基线并继续自动执行。"
     },
     plugins: {
         superpowers: "superpowers@git+https://github.com/obra/superpowers.git#v6.2.0"
@@ -317,7 +321,29 @@ printf '%s\n' \
 pass 'invalid, duplicate, symbolic-link, patterned, and protected allowlist input fails closed'
 
 run_fixture ./scripts/automation/validate-contract.sh TASK-TEST-001 >/dev/null
-pass 'valid version-3 configuration and task contract are accepted'
+verification_config_backup="$(mktemp "$runtime_root/config.json.XXXXXX")"
+cp "$fixture/automation/config.json" "$verification_config_backup"
+
+unit_enabled_output="$(run_fixture env AUTOMATION_FAKE_GREEN=1 bash -c 'source ./scripts/automation/lib.sh; automation_run_configured_unit_tests ./automation/tasks/TASK-TEST-001.json')"
+[[ "$unit_enabled_output" == *"running focused test"* ]] || fail 'default unit-test policy did not run the focused test'
+[[ "$unit_enabled_output" == *"running full unit tests"* ]] || fail 'default unit-test policy did not run the full unit-test group'
+[[ "$unit_enabled_output" == *"BUILD SUCCESSFUL"* ]] || fail 'enabled unit-test policy did not execute configured tests'
+jq '.unitTestsEnabled = false' "$verification_config_backup" > "$fixture/automation/config.json"
+unit_disabled_output="$(run_fixture bash -c 'source ./scripts/automation/lib.sh; automation_run_configured_unit_tests ./automation/tasks/TASK-TEST-001.json')"
+[[ "$unit_disabled_output" == *"skipping unit tests (unitTestsEnabled=false)"* ]] || fail 'disabled unit-test policy did not skip verification'
+[[ "$unit_disabled_output" != *"BUILD SUCCESSFUL"* ]] || fail 'disabled unit-test policy executed a configured test'
+cp "$verification_config_backup" "$fixture/automation/config.json"
+
+lint_disabled_output="$(run_fixture bash -c 'source ./scripts/automation/lib.sh; automation_run_configured_lint')"
+[[ "$lint_disabled_output" == *"skipping Android lint (lintEnabled=false)"* ]] || fail 'default lint policy did not skip Android lint'
+jq '.lintEnabled = true' "$verification_config_backup" > "$fixture/automation/config.json"
+lint_enabled_output="$(run_fixture bash -c 'source ./scripts/automation/lib.sh; automation_run_configured_lint')"
+[[ "$lint_enabled_output" == *"running configured Android lint tasks"* ]] || fail 'enabled lint policy did not run Android lint'
+[[ "$lint_enabled_output" == *"BUILD SUCCESSFUL"* ]] || fail 'enabled lint policy did not execute the configured lint task'
+cp "$verification_config_backup" "$fixture/automation/config.json"
+rm "$verification_config_backup"
+run_fixture ./scripts/automation/validate-contract.sh TASK-TEST-001 >/dev/null
+pass 'repository configuration defaults unit tests on and lint off and honors both switches'
 
 if run_fixture env AUTOMATION_HUMAN_APPROVED=0 ./scripts/automation/queue-task.sh TASK-TEST-001 >/dev/null 2>&1; then
     fail 'legacy queue accepted without explicit human approval'
@@ -483,9 +509,12 @@ fi
 if run_fixture env AUTOMATION_SKIP_AGENT_RUN=1 ./scripts/automation/resume-review.sh TASK-TEST-003 >/dev/null 2>&1; then
     fail 'reviewer-only recovery accepted a non-review blocker'
 fi
+if run_fixture env AUTOMATION_SKIP_AGENT_RUN=1 ./scripts/automation/resume-task.sh TASK-TEST-003 '恢复任务，重新捕获基线并继续自动执行。' >/dev/null 2>&1; then
+    fail 'baseline-only recovery accepted a preflight blocker'
+fi
 rm "$fixture/unapproved-change.txt"
 pass 'preflight blocks dirty task roots without retrying implicitly'
-pass 'reviewer-only recovery rejects unrelated BLOCKED states'
+pass 'reviewer and baseline recovery reject unrelated BLOCKED states'
 
 printf '%s\n' '# Approved reviewer-fix plan' > "$fixture/docs/plans/TASK-TEST-005.md"
 jq \
@@ -745,6 +774,38 @@ run_fixture ./scripts/automation/abort-task.sh TASK-TEST-009 '中止任务，封
 [[ ! -e "$fixture/docs/plans/TASK-TEST-009.md" && ! -e "$fixture/automation/tasks/TASK-TEST-009.json" ]] || fail 'planning-only abort left generated artifacts in the original worktree'
 pass 'aborting before product edits archives planning artifacts without creating a planning-only commit'
 
+printf '%s\n' '# Baseline interruption recovery plan' > "$fixture/docs/plans/TASK-TEST-010.md"
+jq \
+    '.id = "TASK-TEST-010" |
+     .title = "Recover one interrupted baseline capture" |
+     .planPath = "docs/plans/TASK-TEST-010.md" |
+     .targetTests = [{gradleTask: "testDebugUnitTest", filter: "dev.example.orchestratorfixture.BaselineRecoveryTest"}]' \
+    "$fixture/automation/tasks/TASK-TEST-001.json" \
+    > "$fixture/automation/tasks/TASK-TEST-010.json"
+run_fixture ./scripts/automation/prepare-contract-review.sh TASK-TEST-010 '批准方案，生成计划和任务合同。' >/dev/null
+run_fixture env AUTOMATION_SKIP_AGENT_RUN=1 ./scripts/automation/approve-and-run.sh TASK-TEST-010 '合同已复核，批准自动执行到人工验收阶段。' >/dev/null
+run_fixture ./scripts/automation/transition-state.sh TASK-TEST-010 PENDING CODING coder-launcher 'preflight passed; capturing baseline' >/dev/null
+run_fixture ./scripts/automation/block-task.sh TASK-TEST-010 'claim baseline capture interrupted before metadata sealing' >/dev/null
+if run_fixture env AUTOMATION_SKIP_AGENT_RUN=1 ./scripts/automation/resume-task.sh TASK-TEST-010 '拒绝' >/dev/null 2>&1; then
+    fail 'baseline recovery accepted an invalid confirmation'
+fi
+[[ "$(jq -r '.state' "$runtime_root/state/TASK-TEST-010.json")" == "BLOCKED" ]] || fail 'rejected baseline recovery changed task state'
+run_fixture env AUTOMATION_SKIP_AGENT_RUN=1 ./scripts/automation/resume-task.sh TASK-TEST-010 '恢复任务，重新捕获基线并继续自动执行。' >/dev/null
+[[ "$(jq -r '.state' "$runtime_root/state/TASK-TEST-010.json")" == "PENDING" ]] || fail 'baseline recovery did not return to PENDING'
+[[ "$(jq -s 'length' "$runtime_root/evidence/TASK-TEST-010/baseline-resumptions.jsonl")" -eq 1 ]] || fail 'baseline recovery did not record one bounded resumption'
+[[ "$(jq -s -r '.[-1].kind' "$runtime_root/evidence/TASK-TEST-010/approvals.jsonl")" == "resume-baseline" ]] || fail 'baseline recovery approval was not audited'
+[[ ! -f "$runtime_root/evidence/TASK-TEST-010/baseline.json" ]] || fail 'baseline recovery manufactured baseline evidence'
+pass 'one explicitly approved baseline interruption resumes through PENDING without product changes'
+
+run_fixture ./scripts/automation/transition-state.sh TASK-TEST-010 PENDING CODING coder-launcher 'preflight passed; capturing baseline' >/dev/null
+run_fixture ./scripts/automation/block-task.sh TASK-TEST-010 'claim baseline capture interrupted a second time before metadata sealing' >/dev/null
+if run_fixture env AUTOMATION_SKIP_AGENT_RUN=1 ./scripts/automation/resume-task.sh TASK-TEST-010 '恢复任务，重新捕获基线并继续自动执行。' >/dev/null 2>&1; then
+    fail 'baseline recovery exceeded its one-restart limit'
+fi
+[[ "$(jq -r '.state' "$runtime_root/state/TASK-TEST-010.json")" == "BLOCKED" ]] || fail 'exhausted baseline recovery changed task state'
+pass 'baseline recovery stops after one auditable restart'
+run_fixture ./scripts/automation/abort-task.sh TASK-TEST-010 '中止任务，封存修改并恢复原分支。' >/dev/null
+
 isolated_config_tmp="$(mktemp "$fixture/automation/.config.XXXXXX")"
 jq '.workspaceStrategy = "isolatedWorktree"' "$fixture/automation/config.json" > "$isolated_config_tmp"
 mv "$isolated_config_tmp" "$fixture/automation/config.json"

package/templates/scripts/automation/verify-integration.sh

@@ -16,19 +16,12 @@ contract="$(automation_contract_path "$task_id")"
 
 "$SCRIPT_DIR/integration-scope-gate.sh" "$task_id" "$base" "$head"
 
-while IFS=$'\t' read -r gradle_task filter; do
-    automation_info "running integration focused test ($gradle_task): $filter"
-    automation_run_focused_test "$gradle_task" "$filter" "$AUTOMATION_ROOT"
-done < <(jq -r '.targetTests[] | [.gradleTask, .filter] | @tsv' "$contract")
-
-automation_info "running integration full unit tests"
-automation_run_gradle_group "fullUnitTestTasks" "$AUTOMATION_ROOT"
+automation_run_configured_unit_tests "$contract" "$AUTOMATION_ROOT" "integration "
 
 automation_info "running configured integration assemble tasks"
 automation_run_gradle_group "assembleTasks" "$AUTOMATION_ROOT"
 
-automation_info "running configured integration Android lint tasks"
-automation_run_gradle_group "lintTasks" "$AUTOMATION_ROOT"
+automation_run_configured_lint "$AUTOMATION_ROOT"
 
 if [[ "$(jq -r '.deviceTestsRequired' "$contract")" == "true" ]]; then
     automation_info "running configured integration device tests"

package/templates/scripts/automation/verify-task.sh

@@ -17,19 +17,12 @@ evidence_dir="$(automation_evidence_path "$task_id")"
 
 "$SCRIPT_DIR/scope-gate.sh" "$task_id"
 
-while IFS=$'\t' read -r gradle_task filter; do
-    automation_info "running focused test ($gradle_task): $filter"
-    automation_run_focused_test "$gradle_task" "$filter" "$AUTOMATION_ROOT"
-done < <(jq -r '.targetTests[] | [.gradleTask, .filter] | @tsv' "$contract")
-
-automation_info "running full unit tests"
-automation_run_gradle_group "fullUnitTestTasks" "$AUTOMATION_ROOT"
+automation_run_configured_unit_tests "$contract" "$AUTOMATION_ROOT"
 
 automation_info "running configured assemble tasks"
 automation_run_gradle_group "assembleTasks" "$AUTOMATION_ROOT"
 
-automation_info "running configured Android lint tasks"
-automation_run_gradle_group "lintTasks" "$AUTOMATION_ROOT"
+automation_run_configured_lint "$AUTOMATION_ROOT"
 
 if [[ "$(jq -r '.deviceTestsRequired' "$contract")" == "true" ]]; then
     automation_info "running configured device tests"