fix: reject ambiguous scheduler cron

Co-Authored-By: Codex <noreply@openai.com>

Author: Pigbibi

.github/workflows/sync-cloud-run-env.yml

@@ -992,6 +992,10 @@ jobs:
           if len(time_fields) == 5:
               print(" ".join(time_fields))
           elif len(time_fields) == 2:
+              if current_fields[2] != "*" and current_fields[4] != "*":
+                  raise SystemExit(
+                      "Cloud Scheduler schedule cannot constrain both day-of-month and day-of-week"
+                  )
               print(" ".join([*time_fields, *current_fields[2:]]))
           else:
               raise SystemExit(

scripts/build_cloud_run_env_sync_plan.py

@@ -480,10 +480,23 @@ def _build_scheduler_plan(
             per_service_mode=per_service_mode,
             allow_shared_fallback=True,
         )
-        scheduler[key] = str(runtime_scheduler.get(key) or configured_value or SCHEDULER_TIME_DEFAULTS[key])
+        scheduler[key] = _validate_scheduler_time(
+            key,
+            str(runtime_scheduler.get(key) or configured_value or SCHEDULER_TIME_DEFAULTS[key]),
+        )
     return scheduler
 
 
+def _validate_scheduler_time(name: str, value: str) -> str:
+    fields = value.split()
+    if len(fields) == 5 and fields[2] != "*" and fields[4] != "*":
+        raise ValueError(
+            f"{name} cannot constrain both day-of-month and day-of-week; "
+            "Cloud Scheduler applies OR semantics to those fields"
+        )
+    return value
+
+
 def _validate_profile_inputs(
     *,
     service_name: str,

tests/test_build_cloud_run_env_sync_plan.py

@@ -82,6 +82,34 @@ def test_build_cloud_run_env_sync_plan_legacy_mode_uses_shared_env():
     }
 
 
+def test_build_cloud_run_env_sync_plan_rejects_ambiguous_cloud_scheduler_cron():
+    env = {
+        **os.environ,
+        "CLOUD_RUN_SERVICE": "longbridge-quant-paper-service",
+        "GLOBAL_TELEGRAM_CHAT_ID": "5992562050",
+        "NOTIFY_LANG": "zh",
+        "ACCOUNT_PREFIX": "PAPER",
+        "RUNTIME_TARGET_JSON": runtime_target_json(
+            "soxl_soxx_trend_income",
+            deployment_selector="PAPER",
+            account_scope="PAPER",
+            service_name="longbridge-quant-paper-service",
+        ),
+        "LONGBRIDGE_MARKET": "US",
+        "CLOUD_SCHEDULER_PROBE_TIME": "35 9 1-7 * 1-5",
+    }
+
+    result = subprocess.run(
+        [sys.executable, str(SYNC_PLAN_SCRIPT_PATH), "--json"],
+        capture_output=True,
+        text=True,
+        env=env,
+    )
+
+    assert result.returncode != 0
+    assert "cannot constrain both day-of-month and day-of-week" in result.stderr
+
+
 def test_build_cloud_run_env_sync_plan_requires_target_snapshot_in_per_service_mode():
     payload = {
         "defaults": {

tests/test_scheduler_workflow.py

@@ -17,3 +17,10 @@ def test_replacement_probe_and_precheck_exist_before_shared_dispatcher_cleanup()
     assert "environment: longbridge-sg" in cleanup_section
     assert 'replacement_jobs=("${service_name}-probe-scheduler" "${service_name}-precheck-scheduler")' in cleanup_section
     assert "if: steps.replacements.outputs.ready == 'true'" in cleanup_section
+
+
+def test_existing_scheduler_cron_rejects_ambiguous_day_fields() -> None:
+    workflow = Path(".github/workflows/sync-cloud-run-env.yml").read_text(encoding="utf-8")
+
+    assert 'if current_fields[2] != "*" and current_fields[4] != "*":' in workflow
+    assert "cannot constrain both day-of-month and day-of-week" in workflow