@minonl/dia 0.0.0-stage → 0.0.2-beta.0

package/packages/job/config.example

@@ -0,0 +1,5 @@
+# ~/.config/dia-job/config（纯 KEY=value；不 source、不执行）
+DIA_JOB_ROOT=/Users/you/.local/share/dia-job
+DIA_JOB_LABEL_PREFIX=local.dia-job-
+DIA_JOB_ENTRY_DIR=/Users/you/.local/share/dia-job/bin
+# DIA_JOB_OWN_TASKS=selfcheck update

package/packages/job/install.sh

@@ -0,0 +1,37 @@
+#!/usr/bin/env bash
+# dia-job 安装：复制到全局目录 + 建稳定 CLI 链接；不依赖任何项目 checkout。
+set -uo pipefail
+SRC="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+HOME_DIR="${DIA_JOB_HOME:-$HOME/.local/share/dia-job}"
+BIN_DIR="${DIA_JOB_BIN_DIR:-$HOME/.local/bin}"
+DRY=0; FORCE=0
+while [ $# -gt 0 ]; do
+  case "$1" in
+    --home) HOME_DIR="$2"; shift 2 ;;
+    --bin) BIN_DIR="$2"; shift 2 ;;
+    --dry-run) DRY=1; shift ;;
+    --force) FORCE=1; shift ;;
+    -h|--help) sed -n '2,5p' "$0" | sed 's/^# \{0,1\}//'; exit 0 ;;
+    *) echo "usage: install.sh [--home DIR] [--bin DIR] [--force] [--dry-run]" >&2; exit 2 ;;
+  esac
+done
+
+run() { if [ "$DRY" = 1 ]; then printf '[dry-run] %s\n' "$*"; else "$@"; fi; }
+for f in bin/dia-job lib/config.sh lib/policy.sh lib/json.mjs; do
+  [ -f "$SRC/$f" ] || { echo "缺文件：$SRC/$f" >&2; exit 1; }
+done
+run mkdir -p "$HOME_DIR/bin" "$HOME_DIR/lib" "$BIN_DIR" "${XDG_CONFIG_HOME:-$HOME/.config}/dia-job"
+for f in bin/dia-job lib/config.sh lib/policy.sh lib/json.mjs; do
+  run cp "$SRC/$f" "$HOME_DIR/$f"
+done
+run chmod +x "$HOME_DIR/bin/dia-job"
+run ln -sfn "$HOME_DIR/bin/dia-job" "$BIN_DIR/dia-job"
+
+# 配置示例：只在不存在时提示，不覆盖真实配置
+CFG="${XDG_CONFIG_HOME:-$HOME/.config}/dia-job/config"
+if [ ! -f "$CFG" ]; then
+  if [ "$DRY" = 1 ]; then echo "[dry-run] 可创建 ${CFG}（示例见 $SRC/config.example）"; else
+    printf '# dia-job global config; see %s/config.example\n' "$SRC" > "$CFG"
+  fi
+fi
+echo "dia-job installed: $HOME_DIR/bin/dia-job -> $BIN_DIR/dia-job"

package/packages/job/lib/config.sh

@@ -0,0 +1,18 @@
+#!/usr/bin/env bash
+# dia-job 全局配置：环境变量优先；否则读 $DIA_JOB_CONFIG 或 ~/.config/dia-job/config
+# 文件格式：纯 KEY=value；只接受 DIA_JOB_* 键；不 source、不执行文件内容。
+dia_job_load_config() {
+  local f="${DIA_JOB_CONFIG:-${XDG_CONFIG_HOME:-$HOME/.config}/dia-job/config}"
+  [ -f "$f" ] || return 0
+  local k v
+  while IFS='=' read -r k v || [ -n "${k:-}" ]; do
+    k="${k%%[[:space:]]*}"
+    case "$k" in DIA_JOB_*) ;; *) continue ;; esac
+    v="${v%$'\r'}"
+    case "$v" in
+      \"*\") v="${v#\"}"; v="${v%\"}" ;;
+      \'*\') v="${v#\'}"; v="${v%\'}" ;;
+    esac
+    if [ -z "${!k:-}" ]; then export "$k=$v"; fi
+  done < "$f"
+}

package/packages/job/lib/json.mjs

@@ -0,0 +1,130 @@
+#!/usr/bin/env node
+// Thin Node adapter for bash. Uses built-in JSON only; no parser/package.
+import { existsSync, readFileSync, writeFileSync, renameSync } from "node:fs";
+
+const [cmd, ...a] = process.argv.slice(2);
+const read = (p) => JSON.parse(readFileSync(p, "utf8"));
+const write = (p, d) => {
+  const tmp = `${p}.tmp-${process.pid}-${Date.now()}`;
+  writeFileSync(tmp, JSON.stringify(d, null, 2) + "\n");
+  renameSync(tmp, p);
+};
+const tasks = (d) => d.tasks || {};
+const label = (k, v, prefix) => v.label || prefix + k.replace(/^yan-/, "");
+const out = (s) => process.stdout.write(s);
+
+switch (cmd) {
+  case "labels": { // <reg> <prefix>
+    const [reg, prefix] = a;
+    if (!existsSync(reg)) break;
+    for (const [k, v] of Object.entries(tasks(read(reg)))) out(label(k, v, prefix) + "\n");
+    break;
+  }
+  case "entries": { // <reg> <root> <prefix>
+    const [reg, root, prefix] = a;
+    if (!existsSync(reg)) break;
+    for (const [k, v] of Object.entries(tasks(read(reg)))) {
+      const iv = v.interval, cal = v.calendar || "-";
+      const sched = iv && iv !== "-" ? iv : (v.weekdays && v.weekdays !== "-" ? `${cal} [${v.weekdays}]` : cal);
+      out([k, label(k, v, prefix), v.type || "periodic", sched, v.log || `${root}/tasks/${k}.log`].join("|") + "\n");
+    }
+    break;
+  }
+  case "state-last": { // <file>
+    try {
+      const d = JSON.parse(readFileSync(a[0], "utf8").trim().split("\n").pop());
+      const t = new Date((d.ts || 0) * 1000);
+      const z = (n) => String(n).padStart(2, "0");
+      out(`      上次运行: ${z(t.getMonth() + 1)}-${z(t.getDate())} ${z(t.getHours())}:${z(t.getMinutes())}:${z(t.getSeconds())} · exit=${d.exit}\n`);
+    } catch { break; }
+    break;
+  }
+  case "log": { // <reg> <name> <default>
+    const [reg, name, def] = a;
+    const t = existsSync(reg) ? tasks(read(reg))[name] : null;
+    out((t && t.log) || def);
+    break;
+  }
+  case "field": { // <reg> <name> <key>
+    const [reg, name, key] = a;
+    const t = existsSync(reg) ? tasks(read(reg))[name] : null;
+    out(t && t[key] != null ? String(t[key]) : "");
+    break;
+  }
+  case "get": { // <reg> <name>
+    const [reg, name] = a;
+    const t = existsSync(reg) ? tasks(read(reg))[name] : null;
+    out(JSON.stringify(t || {}));
+    break;
+  }
+  case "set": { // <reg> <name> <json>
+    const [reg, name, payload] = a;
+    const d = existsSync(reg) ? read(reg) : { tasks: {} };
+    d.tasks = tasks(d); d.tasks[name] = JSON.parse(payload); write(reg, d);
+    break;
+  }
+  case "del": { // <reg> <name>
+    const [reg, name] = a;
+    if (!existsSync(reg)) break;
+    const d = read(reg); delete tasks(d)[name]; write(reg, d);
+    break;
+  }
+  case "rows": { // <reg> -> name \t cmd
+    if (!existsSync(a[0])) break;
+    for (const [k, v] of Object.entries(tasks(read(a[0])))) out(`${k}\t${v.cmd || ""}\n`);
+    break;
+  }
+  case "fields": { // <reg> <name> -> cmd \t interval \t calendar \t weekdays \t type
+    if (!existsSync(a[0])) break;
+    const t = tasks(read(a[0]))[a[1]] || {};
+    out([t.cmd || "", t.interval || "-", t.calendar || "-", t.weekdays || "-", t.type || "periodic"].join("\t"));
+    break;
+  }
+  case "selfcheck-rows": { // <reg> <prefix>
+    const [reg, prefix] = a;
+    if (!existsSync(reg)) break;
+    for (const [k, v] of Object.entries(tasks(read(reg)))) out(`${k}\t${label(k, v, prefix)}\t${v.adopted ? 1 : 0}\n`);
+    break;
+  }
+  case "backfill": { // <reg> <dry> <force> <tsv>
+    const [reg, dry, force, tsv] = a;
+    const d = read(reg), ts = tasks(d);
+    let add = 0, skip = 0, eph = 0;
+    for (const line of readFileSync(tsv, "utf8").split("\n")) {
+      if (!line.trim()) continue;
+      const [name, cls, layer] = line.split("\t");
+      const t = ts[name]; if (!t) continue;
+      if (cls === "ephemeral") { out(`  ⚠️ ${name}: 存量路径被判定为 ephemeral（worktree）—— 不自动改，请人工核对后重装\n`); eph++; }
+      if ("path_class" in t && force !== "1") { skip++; continue; }
+      t.path_class = cls; if (layer) t.layer = layer;
+      out(`  ✚ ${name}: path_class=${cls}${layer ? ` layer=${layer}` : ""}\n`); add++;
+    }
+    if (add && dry !== "1") write(reg, d);
+    out(`── 补判 ${add} 条 · 已有值跳过 ${skip} 条 · ephemeral 待人工 ${eph} 条${dry === "1" ? "（dry-run 未写入）" : ""} ──\n`);
+    break;
+  }
+  case "own-json": out(JSON.stringify({ ownTasks: a }) + "\n"); break;
+  case "expected": { // <manifest> <reg> <platform>
+    const [manifest, reg, plat] = a;
+    try {
+      const exp = (read(manifest).tasks || []); const have = new Set(Object.keys(tasks(read(reg))));
+      const miss = exp.filter((t) => (t.platforms || [plat]).includes(plat) && !have.has(t.name)).map((t) => t.name);
+      out(miss.join(" "));
+    } catch { break; }
+    break;
+  }
+  case "bootstrap-rows": { // <reg>
+    if (!existsSync(a[0])) break;
+    for (const [n, t] of Object.entries(tasks(read(a[0])))) out([n, t.cmd || "", t.interval || "-", t.calendar || "-", t.desc || "", t.weekdays || "-", t.type || "periodic", t.path_class || ""].join("\t") + "\n");
+    break;
+  }
+  case "json": { // <key=value...> -> JSON object (true/false become booleans)
+    const d = {};
+    for (const kv of a) {
+      const i = kv.indexOf("="); const v = kv.slice(i + 1);
+      d[kv.slice(0, i)] = v === "true" ? true : v === "false" ? false : v;
+    }
+    out(JSON.stringify(d)); break;
+  }
+  default: process.stderr.write(`json.mjs: unknown command ${cmd}\n`); process.exit(2);
+}

package/packages/job/lib/policy.sh

@@ -0,0 +1,103 @@
+#!/usr/bin/env bash
+# dia-job 路径策略（项目无关；不依赖 yan-agent/platform.sh）
+# 目标：判断注册命令的目标是否稳定；worktree/ephemeral 必须拒绝。
+# 输出：dia_job_cmd_path_class 设置 YP_CLASS / YP_CMD_TARGET / YP_MAIN / YP_REASON（兼容旧调用方）。
+
+dia_job_data_root() {
+  printf '%s' "${DIA_JOB_ROOT:-${YAN_DATA_ROOT:-${XDG_DATA_HOME:-$HOME/.local/share}/dia-job}}"
+}
+
+# 主 checkout：git-common-dir 的父目录；裸仓/非仓明确失败。
+dia_job_main_checkout_of() {
+  local d="${1:-}" common abs
+  if [ -z "$d" ]; then printf 'dia_job_main_checkout_of: 缺少参数（目录）\n' >&2; return 2; fi
+  [ -d "$d" ] || { printf 'dia_job_main_checkout_of: 目录不存在：%s\n' "$d" >&2; return 1; }
+  if [ "$(git -C "$d" rev-parse --is-inside-work-tree 2>/dev/null)" != "true" ]; then
+    printf 'dia_job_main_checkout_of: 不是 git 工作区（裸仓或非仓）：%s\n' "$d" >&2
+    return 1
+  fi
+  common="$(git -C "$d" rev-parse --path-format=absolute --git-common-dir 2>/dev/null)" || {
+    printf 'dia_job_main_checkout_of: 无法解析 git-common-dir：%s\n' "$d" >&2; return 1; }
+  [ -n "$common" ] || { printf 'dia_job_main_checkout_of: git-common-dir 为空：%s\n' "$d" >&2; return 1; }
+  if [ "${common#/}" = "$common" ]; then
+    common="$(cd "$d" && cd "$common" 2>/dev/null && pwd -P)" || {
+      printf 'dia_job_main_checkout_of: 无法定位 git-common-dir（旧版 git 回退失败）：%s\n' "$d" >&2; return 1; }
+  fi
+  case "$(basename "$common")" in
+    .git) : ;;
+    *) printf 'dia_job_main_checkout_of: 意外的 git-common-dir：%s\n' "$common" >&2; return 1 ;;
+  esac
+  abs="$(cd "$(dirname "$common")" 2>/dev/null && pwd -P)" || {
+    printf 'dia_job_main_checkout_of: 无法规范化路径：%s\n' "$common" >&2; return 1; }
+  printf '%s' "$abs"
+}
+
+# 提取注册命令中的首个绝对路径；对命令替换只识别全局稳定入口目录。
+dia_job_extract_target() {
+  local cmd="${1:-}" entry refhit
+  [ -n "$cmd" ] || return 0
+  entry="${DIA_JOB_ENTRY_DIR:-$(dia_job_data_root)/bin}"
+  case "$cmd" in
+    *'$('*)
+      # 只提取引号内、位于稳定入口目录下的路径；不执行命令替换
+      refhit="$(printf '%s' "$cmd" | grep -oE "'[^']+'" | tr -d "'" | while IFS= read -r x; do
+        case "$x" in "$entry"/*) printf '%s' "$x"; break ;; esac
+      done)"
+      [ -n "$refhit" ] && printf '%s' "$refhit"
+      return 0 ;;
+  esac
+  case "$cmd" in
+    *'$('*|*'`'*|*'>'*|*'<'*|*';'*|*'|'*|*'&'*) return 0 ;;
+  esac
+  bash -c '
+    c="$1"
+    bash -n <<<"$c" 2>/dev/null || exit 0
+    eval "set -- $c" 2>/dev/null || exit 0
+    for a in "$@"; do case "$a" in /*) printf "%s" "$a"; break;; esac; done
+  ' _ "$cmd" 2>/dev/null
+}
+
+dia_job_path_stability() {
+  local p="${1:-}"
+  YP_CLASS="unknown"; YP_MAIN=""; YP_REASON=""
+  if [ -z "$p" ]; then YP_CLASS="none"; YP_REASON="无路径（如 adopt 的任务无 cmd）"; return 0; fi
+  case "$p" in
+    *-worktree--*|*/.worktrees/*)
+      YP_CLASS="ephemeral"; YP_REASON="指向 worktree（临时目录）—— 清理后必悬空"; return 0 ;;
+  esac
+  case "$p" in /*) : ;; *) YP_CLASS="unknown"; YP_REASON="相对路径，无法判定稳定性"; return 0 ;; esac
+  case "$p" in
+    "${DIA_JOB_ENTRY_DIR:-$(dia_job_data_root)/bin}"/*)
+      YP_CLASS="ref-entry"; YP_REASON="全局稳定入口（DIA_JOB_ROOT/bin）"; return 0 ;;
+  esac
+  local dir="$p"
+  [ -d "$dir" ] || dir="$(dirname "$p")"
+  while [ -n "$dir" ] && [ "$dir" != "/" ] && [ ! -d "$dir" ]; do dir="$(dirname "$dir")"; done
+  local p_real; p_real="$(cd "$(dirname "$p")" 2>/dev/null && pwd -P)/$(basename "$p")"
+  [ -n "$p_real" ] || p_real="$p"
+  local wt main_wt
+  main_wt="$(dia_job_main_checkout_of "$dir" 2>/dev/null || true)"
+  if [ -n "$main_wt" ]; then
+    while IFS= read -r wt; do
+      [ -n "$wt" ] || continue
+      [ "$wt" = "$main_wt" ] && continue
+      case "$p_real" in
+        "$wt"/*|"$wt")
+          YP_CLASS="ephemeral"; YP_MAIN="$main_wt"
+          YP_REASON="命中 git worktree 清单中的非主 checkout（${wt}）—— 清理后必悬空"; return 0 ;;
+      esac
+    done < <(git -C "$dir" worktree list --porcelain 2>/dev/null | sed -n 's/^worktree //p')
+  fi
+  if [ -n "$main_wt" ]; then
+    case "$p_real" in "$main_wt"/*) YP_REASON="位于主 checkout $main_wt 之下" ;; *) YP_REASON="同一仓（主 checkout ${main_wt}）" ;; esac
+    YP_CLASS="main-checkout"; YP_MAIN="$main_wt"; return 0
+  fi
+  YP_CLASS="non-repo-abs"; YP_REASON="绝对路径，但不在任何 git 仓内"; return 0
+}
+
+dia_job_cmd_path_class() {
+  YP_CMD_TARGET="$(dia_job_extract_target "${1:-}")"
+  if [ -z "${1:-}" ]; then YP_CLASS="none"; YP_REASON="无 cmd（adopt 的任务）"; return 0; fi
+  if [ -z "$YP_CMD_TARGET" ]; then YP_CLASS="unknown"; YP_REASON="cmd 中未提取到绝对路径"; return 0; fi
+  dia_job_path_stability "$YP_CMD_TARGET"
+}

package/packages/job/package.json

@@ -0,0 +1,10 @@
+{
+  "name": "@dia/job",
+  "version": "0.1.0",
+  "private": true,
+  "description": "dia scheduler adapter: launchd / cron / schtasks",
+  "bin": { "dia-job": "bin/dia-job" },
+  "scripts": {
+    "test": "bash tests/bootstrap.test.sh && bash tests/p2.test.sh && bash tests/policy.test.sh && bash tests/install.test.sh && bash tests/linux.test.sh"
+  }
+}

package/packages/job/shim/yan-task

@@ -0,0 +1,24 @@
+#!/usr/bin/env bash
+# yan-task 兼容 shim：只转发到已安装的 dia-job；拒绝 worktree 路径（yan-ref 纪律）。
+set -u
+SELF="${BASH_SOURCE[0]:-$0}"
+while [ -L "$SELF" ]; do
+  d="$(cd -P "$(dirname "$SELF")" >/dev/null 2>&1 && pwd)"; t="$(readlink "$SELF")"
+  case "$t" in /*) SELF="$t" ;; *) SELF="$d/$t" ;; esac
+done
+case "$SELF" in
+  *-worktree--*|*/.worktrees/*) echo "yan-task shim: 拒绝从 worktree 运行（${SELF}）" >&2; exit 4 ;;
+esac
+
+BIN="${DIA_JOB_BIN:-}"
+if [ -z "$BIN" ]; then
+  for c in "$HOME/.local/bin/dia-job" /opt/homebrew/bin/dia-job /usr/local/bin/dia-job; do
+    [ -x "$c" ] && BIN="$c" && break
+  done
+fi
+[ -n "$BIN" ] || BIN="$(command -v dia-job 2>/dev/null || true)"
+[ -n "$BIN" ] || { echo "yan-task shim: 未找到 dia-job；先跑 dia-job 的 install.sh" >&2; exit 3; }
+case "$BIN" in
+  *-worktree--*|*/.worktrees/*) echo "yan-task shim: 拒绝 worktree 里的 dia-job（${BIN}）" >&2; exit 4 ;;
+esac
+exec "$BIN" "$@"

package/packages/job/tests/bootstrap.test.sh

@@ -0,0 +1,115 @@
+#!/usr/bin/env bash
+# yan-task-bootstrap.test.sh —— `yan-task bootstrap` 字段解析回归（2026-10-16 实测事故）
+#
+# **被修的 bug**：原实现 `print(n, cmd, interval, calendar, desc)` + `while IFS=' ' read`，
+#   而 **cmd 里含空格**（macOS 数据根 `Application Support/…`，desc 也含空格）⇒ 字段错位 ⇒
+#   cmd 被截断成 `bash` ⇒ 门控判 unknown ⇒ **每个任务 rc=4** ⇒ bootstrap（设计的**兜底恢复入口**）
+#   在 macOS 上**完全不可用**（现场：四个 yan 定时任务全掉线，跑 bootstrap 一个都恢复不了）。
+#   另修：分派行 `bootstrap) cmd_bootstrap` **没 shift/透传** ⇒ `--dry-run` 永远进不去。
+#
+# 本测试用 `--dry-run`（只打印解析结果、不装 launchd）⇒ **无需 root/launchd 即可回归**；
+#   数据根**故意带空格**（复现事故现场）。用法：bash scripts/yan-task-bootstrap.test.sh
+set -uo pipefail
+
+# tests must not inherit the developer global config
+export DIA_JOB_CONFIG=/dev/null
+
+HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+YT="$HERE/../bin/dia-job"
+TD="$(mktemp -d)"
+DR="$TD/yan agent data"          # ⚠️ 故意带空格（事故现场）
+mkdir -p "$DR/tasks"
+export YAN_DATA_ROOT="$DR"
+
+PASS=0; FAIL=0
+ok(){ echo "  ✓ $1"; PASS=$((PASS+1)); }
+bad(){ echo "  ✗ $1"; FAIL=$((FAIL+1)); }
+
+# 夹具：两个任务，cmd **都含空格路径**（一个引导层直连、一个业务层走指针）
+CMD1="bash '$DR/repos/yan-agent/scripts/yan-task' selfcheck"
+CMD2="CODE=\"\$(bash '$DR/bin/yan-ref' resolve)\" || { CODE='$DR/repos/yan-agent'; echo \"[warn] x\" >&2; }; bash \"\$CODE/scripts/yan-worktree\" check --all --quiet"
+node - "$DR/tasks/registry.json" "$CMD1" "$CMD2" <<'JS'
+const fs = require("node:fs");
+const [p, c1, c2] = process.argv.slice(2);
+fs.writeFileSync(p, JSON.stringify({tasks: {
+  "demo-selfcheck": {type: "periodic", backend: "launchd", label: "local.dia-job-demo-selfcheck", cmd: c1, interval: "300", calendar: "-", desc: "演示 引导层（含 空格）"},
+  "demo-business": {type: "periodic", backend: "launchd", label: "local.dia-job-demo-business", cmd: c2, interval: "-", calendar: "14:10", desc: "演示 业务层（含 空格）"},
+}}, null, 2) + "\n");
+JS
+
+echo "== 1. --dry-run 只打印、不重建（分派行必须 shift+透传）=="
+OUT="$(bash "$YT" bootstrap --dry-run 2>&1)"
+printf '%s' "$OUT" | grep -q "重建" && bad "dry-run 竟然真的重建了" || ok "未执行重建（dry-run 语义正确）"
+[ "$(printf '%s' "$OUT" | grep -c '^DRYRUN')" = "2" ] && ok "打印 2 行（= 任务数）" || { bad "行数不对"; printf '%s\n' "$OUT" | sed 's/^/     | /'; }
+
+echo "== 2. **含空格的 cmd 不被截断**（核心回归：原实现会截成 \`bash\`）=="
+# ⚠️ 用 node -e（不要与 heredoc 抢 stdin）
+if printf '%s' "$OUT" | node -e '
+const fs = require("node:fs");
+const [c1, c2] = process.argv.slice(1);
+const rows = {};
+for (const ln of fs.readFileSync(0, "utf8").split("\n")) {
+  const f = ln.split("\t");
+  if (f.length >= 5 && f[0] === "DRYRUN") rows[f[1]] = f[2];
+}
+let bad = 0;
+for (const [name, want] of Object.entries({"demo-selfcheck": c1, "demo-business": c2})) {
+  if (rows[name] === want) console.log(`  ✓ ${name}: cmd 完整保留（${want.length} 字符）`);
+  else { console.log(`  ✗ ${name}: cmd 被改动`); bad++; }
+}
+process.exit(bad ? 1 : 0);
+' "$CMD1" "$CMD2"; then
+  PASS=$((PASS+2))
+else
+  FAIL=$((FAIL+1))
+fi
+
+echo "== 3. 无 registry ⇒ 优雅返回 0 =="
+DRE="$TD/empty-root"; mkdir -p "$DRE"
+YAN_DATA_ROOT="$DRE" bash "$YT" bootstrap >/dev/null 2>&1 && ok "exit 0（无 registry 不报错）" || bad "无 registry 应返回 0"
+
+echo "== 4. selfcheck：**adopted 不计缺失**（2026-10-16 修）；普通未加载仍计入 =="
+# 两个任务都指向不存在的 label（= 未加载）：一个 adopted、一个普通
+node - "$DR/tasks/registry.json" <<'JS'
+const fs = require("node:fs");
+const p = process.argv[2];
+fs.writeFileSync(p, JSON.stringify({tasks: {
+  "demo-adopted": {type:"periodic", backend:"launchd", label:"local.dia-job-demo-nonexistent-adopted", cmd:"bash '/tmp/x.sh'", interval:"300", calendar:"-", desc:"演示 adopted", adopted:true},
+  "demo-normal": {type:"periodic", backend:"launchd", label:"local.dia-job-demo-nonexistent-normal", cmd:"bash '/tmp/x.sh'", interval:"300", calendar:"-", desc:"演示 normal"},
+}}, null, 2) + "\n");
+JS
+# 让"生效指针"检查通过：否则 selfcheck 会因**指针断链**多报 1 项「缺失」
+# （那是 doctor/selfcheck 的另一职责，非本用例要测的"adopted 是否计入任务缺失"）
+mkdir -p "$DR/bin"
+printf '#!/bin/bash\ncase "${1:-}" in check) exit 0;; resolve) echo "%s/repos/yan-agent";; *) exit 0;; esac\n' "$DR" > "$DR/bin/yan-ref"
+chmod +x "$DR/bin/yan-ref"
+printf '{"worktree":"%s/repos/yan-agent","commit":"0000000"}\n' "$DR" > "$DR/active-ref.json"
+OUT2="$(bash "$YT" selfcheck --dry-run 2>&1)"; RC2=$?
+printf '%s' "$OUT2" | grep -q "adopted" && ok "adopted 未加载 ⇒ 明确标注「adopted … 不计缺失」" || { bad "adopted 未标注"; printf '%s\n' "$OUT2" | sed 's/^/     | /'; }
+printf '%s' "$OUT2" | grep -q "缺失 1" && ok "缺失计数=1（**adopted 未计入**，普通仍计入）" || { bad "缺失计数不对"; printf '%s\n' "$OUT2" | sed 's/^/     | /'; }
+[ "$RC2" = 1 ] && ok "exit 1（仅因普通任务未加载）" || bad "exit 应为 1（实得 ${RC2}）"
+printf '%s' "$OUT2" | grep -q "未找到命令" && bad "**参数被当命令执行**（反引号命令替换回归！）" || ok "带参不报「未找到命令」（反引号 bug 已修）"
+
+echo "== 5. YAN_TASK_NO_LAUNCHD=1 ⇒ 测试跑 install **不碰真实 launchd 域**（2026-10-16 事故隔离）=="
+# cmd 指向**git 仓内**（否则被门控判 non-repo-abs 拒掉，测不到 launchd 那步）
+mkdir -p "$DR/repos/yan-agent/scripts"; [ -d "$DR/repos/yan-agent/.git" ] || { git -C "$DR/repos/yan-agent" init -q; printf x > "$DR/repos/yan-agent/f"; git -C "$DR/repos/yan-agent" add -A; git -C "$DR/repos/yan-agent" -c user.email=t@t -c user.name=t commit -qm i; }
+printf '#!/bin/bash\n' > "$DR/repos/yan-agent/scripts/x.sh"
+OUT5="$(YAN_TASK_NO_LAUNCHD=1 bash "$YT" install demo-isolated --cmd "bash '$DR/repos/yan-agent/scripts/x.sh'" --desc '隔离演示' 2>&1)"; RC5=$?
+[ "$RC5" = 0 ] && ok "install 成功（rc=0）" || { bad "install 失败（rc=${RC5}）"; printf '%s\n' "$OUT5" | sed 's/^/     | /'; }
+printf '%s' "$OUT5" | grep -qE "已跳过 (launchd 加载|crontab 写入|systemd 加载)" && ok "明确声明跳过调度写入（launchd/crontab/systemd）" || { bad "未声明跳过"; printf '%s\n' "$OUT5" | sed 's/^/     | /'; }
+printf '%s' "$OUT5" | grep -q "launchctl bootstrap 失败" && bad "仍在尝试真实 launchctl" || ok "未触发真实 launchctl 调用"
+
+echo "== 6. 静态契约：launchd 写入点**必须都在隔离守卫下**（2026-10-16 实测踩到"守卫打错行"）=="
+# install 的 bootout/tootstrap 必须在 if _launchd_off 分支内；uninstall 的 bootout 必须带守卫前缀。
+# 教训：`replace(...,1)` 命中了 install 里的**同名行** ⇒ uninstall 未隔离 ⇒ 定点复现里真实任务被 bootout ✗
+_n_bootout="$(grep -c 'launchctl bootout' "$YT" || true)"   # 不计缩进（uninstall 那处前缀是守卫）
+_n_guarded="$(grep -c '_launchd_off || launchctl bootout' "$YT" || true)"
+[ "$_n_bootout" = "2" ] && ok "bootout 调用点 = 2（install + uninstall）" || bad "bootout 调用点数异常：$_n_bootout"
+[ "$_n_guarded" = "1" ] && ok "其中 uninstall 那处带 _launchd_off 守卫" || bad "守卫缺失/重复：$_n_guarded"
+grep -q 'if _launchd_off; then' "$YT" && ok "install 侧走 if _launchd_off 分支" || bad "install 侧未见隔离分支"
+grep -q 'launchctl bootstrap' "$YT" && ! grep -q '_launchd_off || launchctl bootstrap' "$YT" && ok "bootstrap 未被冗余守卫（已在 if 分支内）" || bad "bootstrap 守卫位置可疑"
+
+echo
+echo "── PASS $PASS · FAIL $FAIL ──"
+rm -rf "$TD"
+[ "$FAIL" = 0 ]

package/packages/job/tests/install.test.sh

@@ -0,0 +1,30 @@
+#!/usr/bin/env bash
+# install.sh：全局目录 + 稳定链接 + 拒绝项目路径依赖
+set -uo pipefail
+
+# tests must not inherit the developer global config
+export DIA_JOB_CONFIG=/dev/null
+HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"; ROOT="$(cd "$HERE/.." && pwd)"
+TD="$(mktemp -d)"; trap 'rm -rf "$TD"' EXIT
+PASS=0; FAIL=0; ok(){ echo "  ✓ $1"; PASS=$((PASS+1)); }; bad(){ echo "  ✗ $1"; FAIL=$((FAIL+1)); }
+
+HOME_DIR="$TD/home"; BIN_DIR="$TD/bin"
+DIA_JOB_HOME="$HOME_DIR" DIA_JOB_BIN_DIR="$BIN_DIR" bash "$ROOT/install.sh" >/dev/null 2>&1 || bad "install 失败"
+[ -x "$HOME_DIR/bin/dia-job" ] && ok "复制 binary" || bad "缺 binary"
+[ -L "$BIN_DIR/dia-job" ] && ok "稳定链接" || bad "缺链接"
+[ "$(readlink "$BIN_DIR/dia-job")" = "$HOME_DIR/bin/dia-job" ] && ok "链接指向全局目录" || bad "链接目标错"
+[ -f "$HOME_DIR/lib/policy.sh" ] && ok "复制 policy" || bad "缺 policy"
+[ -f "$HOME_DIR/lib/json.mjs" ] && ok "复制 json adapter" || bad "缺 json adapter"
+# 重复安装幂等
+DIA_JOB_HOME="$HOME_DIR" DIA_JOB_BIN_DIR="$BIN_DIR" bash "$ROOT/install.sh" >/dev/null 2>&1 && ok "重复安装 rc=0" || bad "重复安装失败"
+# 从全局安装跑 list
+mkdir -p "$TD/root"
+out="$(DIA_JOB_ROOT="$TD/root" "$BIN_DIR/dia-job" list 2>&1)"; printf '%s' "$out" | grep -q "$TD/root" && ok "安装后可运行" || bad "运行失败：$out"
+# shim 找到安装的 binary
+out="$(HOME="$TD/h" DIA_JOB_BIN="$BIN_DIR/dia-job" bash "$ROOT/shim/yan-task" list 2>&1)"; printf '%s' "$out" | grep -q "平台" && ok "shim 转发" || bad "shim 失败：$out"
+# shim 拒绝 worktree 路径
+WT="$TD/repo-worktree--x"; mkdir -p "$WT"; cp "$ROOT/shim/yan-task" "$WT/yan-task"; chmod +x "$WT/yan-task"
+WT_OUT="$(HOME="$TD/h" DIA_JOB_BIN="$BIN_DIR/dia-job" bash "$WT/yan-task" list 2>&1)"; WT_RC=$?
+# 断言 rc=4；失败时把 rc 与输出打出来（此前只报"未拒绝"，CI 上无法定位，2026-10-30 实测）
+[ "$WT_RC" = 4 ] && ok "shim 拒绝 worktree" || { bad "worktree 未拒绝（rc=${WT_RC}）"; printf '%s\n' "$WT_OUT" | sed 's/^/     | /'; }
+echo; echo "── PASS $PASS · FAIL $FAIL ──"; [ "$FAIL" = 0 ]

package/packages/job/tests/linux.test.sh

@@ -0,0 +1,130 @@
+#!/usr/bin/env bash
+# linux.test.sh —— Linux/WSL 后端（periodic=crontab、service=systemd --user）的行为约束
+#
+# 为什么要有这份（2026-10-30）：Linux 后端此前只有 `return 3 未实现` ⇒ 一旦落地，
+#   「装了但不会跑」是最坏的失败模式（cron 没有进程状态、systemd 不 active 也照样"注册成功"）。
+#   ⇒ 本测试用**假的 crontab / systemctl**（沙箱 PATH 前置）覆盖：写入形态、幂等、不可表达拒绝、
+#   在场判定（status/selfcheck/doctor）、卸载清理、service→systemd 分派。
+#
+# 平台边界：只在 linux/wsl 上跑（macOS 上 launchd 分支走既有测试）。
+set -uo pipefail
+export DIA_JOB_CONFIG=/dev/null
+HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"; ROOT="$(cd "$HERE/.." && pwd)"
+JOB="$ROOT/bin/dia-job"
+TD="$(mktemp -d)"; trap 'rm -rf "$TD"' EXIT
+PASS=0; FAIL=0; ok(){ echo "  ✓ $1"; PASS=$((PASS+1)); }; bad(){ echo "  ✗ $1"; FAIL=$((FAIL+1)); }
+
+case "$(uname -s)" in Linux) ;; *) echo "（非 Linux，跳过 linux.test.sh）"; exit 0 ;; esac
+
+# ── 沙箱：fake crontab / systemctl ─────────────────────────────────────────
+FAKE="$TD/fakebin"; mkdir -p "$FAKE"
+export CRON_TABLE="$TD/crontab.txt"; : > "$CRON_TABLE"
+cat > "$FAKE/crontab" <<'EOS'
+#!/bin/bash
+# 假 crontab：-l 打印表；`-` 从 stdin 覆盖表
+if [ "${1:-}" = "-l" ]; then cat "$CRON_TABLE"; exit 0; fi
+if [ "${1:-}" = "-" ]; then cat > "$CRON_TABLE"; exit 0; fi
+exit 2
+EOS
+cat > "$FAKE/systemctl" <<'EOS'
+#!/bin/bash
+# 假 systemctl：记录调用；is-active/is-enabled 依据 $SVC_STATE_DIR/<unit>
+printf '%s\n' "$*" >> "$SYSTEMCTL_LOG"
+u="${!#}"; d="$SVC_STATE_DIR"
+case "$*" in
+  *show-environment*) exit 0 ;;
+  *daemon-reload*) exit 0 ;;
+  *enable*)   mkdir -p "$d"; : > "$d/$u"; exit 0 ;;
+  *disable*)  rm -f "$d/$u"; exit 0 ;;
+  *is-active*) [ -f "$d/$u" ] && { echo active; exit 0; }; echo inactive; exit 3 ;;
+  *is-enabled*) [ -f "$d/$u" ] && { echo enabled; exit 0; }; echo disabled; exit 1 ;;
+  *is-active\ --quiet*|*--quiet*) [ -f "$d/$u" ] && exit 0 || exit 3 ;;
+  *start*|*restart*) mkdir -p "$d"; : > "$d/$u"; exit 0 ;;
+  *MainPID*) echo 4242; exit 0 ;;
+  *) exit 0 ;;
+esac
+EOS
+cat > "$FAKE/systemctl-is-active" <<'EOS'
+#!/bin/bash
+exit 0
+EOS
+chmod +x "$FAKE"/*
+export SYSTEMCTL_LOG="$TD/systemctl.log"; : > "$SYSTEMCTL_LOG"
+export SVC_STATE_DIR="$TD/svcstate"; mkdir -p "$SVC_STATE_DIR"
+
+HOME_DIR="$TD/home"; ROOT_DIR="$TD/root"; mkdir -p "$HOME_DIR" "$ROOT_DIR"
+# ⚠️ XDG_CONFIG_HOME 必须一起沙箱化：CI（GitHub runner）会预置它 ⇒ 不覆盖的话
+#    unit 会写到 runner 的 ~/.config 而不是测试沙箱（本地没设该变量 ⇒ 本地假绿，CI 红）
+run() { HOME="$HOME_DIR" XDG_CONFIG_HOME="$HOME_DIR/.config" DIA_JOB_ROOT="$ROOT_DIR" \
+        DIA_JOB_CRONTAB_BIN="$FAKE/crontab" DIA_JOB_SYSTEMCTL_BIN="$FAKE/systemctl" \
+        PATH="$FAKE:$PATH" "$JOB" "$@"; }
+reg_field() { HOME="$HOME_DIR" DIA_JOB_ROOT="$ROOT_DIR" node "$ROOT/lib/json.mjs" field "$ROOT_DIR/tasks/registry.json" "$1" "$2" 2>/dev/null; }
+
+echo "── periodic：interval → crontab ──"
+out="$(run install hello --cmd 'echo hi' --interval 300 --desc '测试任务' --allow-unstable 2>&1)"; rc=$?
+[ "$rc" = 0 ] && ok "install rc=0" || bad "install rc=${rc}：$out"
+line="$(grep -F '# dia-job:hello' "$CRON_TABLE")"
+printf '%s' "$line" | grep -q '^\*/5 \* \* \* \*' && ok "interval 300 → */5 分钟" || bad "cron 表达式错：$line"
+printf '%s' "$line" | grep -q 'PATH=' && ok "行内含 PATH（cron 最小环境）" || bad "缺 PATH：$line"
+printf '%s' "$line" | grep -q '/bin/bash "' && ok "行内用 /bin/bash 跑 wrapper" || bad "缺 wrapper 调用：$line"
+WRAPPER="$ROOT_DIR/tasks/hello.sh"
+[ -x "$WRAPPER" ] && ok "wrapper 已生成且可执行" || bad "缺 wrapper：$WRAPPER"
+grep -q 'export DIA_JOB_ROOT' "$WRAPPER" && ok "wrapper 导出 DIA_JOB_ROOT" || bad "wrapper 未导出数据根"
+[ "$(reg_field hello backend)" = cron ] && ok "registry backend=cron" || bad "registry backend=$(reg_field hello backend)"
+
+run install hello --cmd 'echo hi' --interval 300 --allow-unstable >/dev/null 2>&1
+[ "$(grep -cF '# dia-job:hello' "$CRON_TABLE")" = 1 ] && ok "重复 install 幂等（单条）" || bad "重复 install 产生了多条"
+
+echo "── periodic：calendar + weekdays ──"
+run install daily --cmd 'echo d' --calendar 09:30 --weekdays 1-5 --allow-unstable --desc "日历任务" >/dev/null 2>&1
+grep -F '# dia-job:daily' "$CRON_TABLE" | grep -q '^30 9 \* \* 1,2,3,4,5' && ok "calendar+weekdays → 30 9 * * 1,2,3,4,5" \
+  || bad "calendar 表达式错：$(grep -F '# dia-job:daily' "$CRON_TABLE")"
+
+echo "── periodic：不可表达要明确拒绝（不许"看着装好了"）──"
+before="$(wc -l < "$CRON_TABLE")"
+run install tooofter --cmd 'echo x' --interval 30 --allow-unstable --desc "太短" >/dev/null 2>&1; rc=$?
+[ "$rc" = 2 ] && ok "interval 30s（<1min）→ rc=2" || bad "interval 30s 期望 rc=2，实得 $rc"
+[ "$(wc -l < "$CRON_TABLE")" = "$before" ] && ok "拒绝后 crontab 未变" || bad "拒绝后仍写了 crontab"
+run install oneshot --cmd 'echo x' --allow-unstable --desc '无调度（等价 RunAtLoad）' >/dev/null 2>&1; rc=$?
+[ "$rc" = 0 ] && ok "无调度 → @reboot（对齐 macOS RunAtLoad）" || bad "无调度期望 rc=0，实得 $rc"
+grep -F '# dia-job:oneshot' "$CRON_TABLE" | grep -q '^@reboot ' && ok "写的是 @reboot 条目" || bad "@reboot 条目缺失：$(grep -F oneshot "$CRON_TABLE")"
+
+echo "── 在场判定：status / selfcheck / doctor ──"
+out="$(run status 2>&1)"; printf '%s' "$out" | grep -q 'scheduled' && ok "status 显示 scheduled" || bad "status 未见 scheduled：$out"
+grep -vF '# dia-job:hello' "$CRON_TABLE" > "$TD/t" && cp "$TD/t" "$CRON_TABLE"
+out="$(run selfcheck --dry-run 2>&1)"; rc=$?
+[ "$rc" = 1 ] && ok "条目被删 → selfcheck --dry-run rc=1" || bad "selfcheck dry-run 期望 rc=1，实得 ${rc}：$out"
+printf '%s' "$out" | grep -q 'hello' && ok "selfcheck 点名 hello" || bad "selfcheck 未点名：$out"
+run selfcheck >/dev/null 2>&1
+grep -qF '# dia-job:hello' "$CRON_TABLE" && ok "selfcheck 自愈：条目重建" || bad "selfcheck 未重建条目"
+out="$(run selfcheck 2>&1)"; rc=$?
+[ "$rc" = 0 ] && ok "自愈后 selfcheck rc=0" || bad "自愈后 selfcheck rc=${rc}：$out"
+
+echo "── service：systemd --user ──"
+out="$(run install svc --cmd 'bash /tmp/svc.sh' --type service --allow-unstable --desc '常驻测试' 2>&1)"; rc=$?
+[ "$rc" = 0 ] && ok "service install rc=0" || bad "service install rc=${rc}：$out"
+UNIT="$HOME_DIR/.config/systemd/user/local.dia-job-svc.service"
+[ -f "$UNIT" ] && ok "unit 落到 systemd --user 目录" || bad "缺 unit：$UNIT"
+grep -q 'Restart=always' "$UNIT" && ok "Restart=always（≈ KeepAlive）" || bad "unit 缺 Restart=always"
+grep -q "ExecStart=/bin/bash \"$ROOT_DIR/tasks/svc.sh\"" "$UNIT" && ok "ExecStart 指向 wrapper" || bad "ExecStart 错：$(grep ExecStart "$UNIT")"
+grep -q -- '--user enable' "$SYSTEMCTL_LOG" && ok "systemctl --user enable 被调用" || bad "未 enable：$(cat "$SYSTEMCTL_LOG")"
+[ "$(reg_field svc backend)" = systemd ] && ok "registry backend=systemd" || bad "registry backend=$(reg_field svc backend)"
+out="$(run status 2>&1)"; printf '%s' "$out" | grep -q 'active' && ok "status 显示 active" || bad "status 未见 active：$out"
+
+echo "── 卸载 ──"
+run uninstall svc >/dev/null 2>&1
+[ -f "$UNIT" ] && bad "service 卸载后 unit 仍在" || ok "service 卸载删 unit"
+grep -q -- '--user disable' "$SYSTEMCTL_LOG" && ok "systemctl --user disable 被调用" || bad "未 disable"
+run uninstall hello >/dev/null 2>&1
+grep -qF '# dia-job:hello' "$CRON_TABLE" && bad "periodic 卸载后 crontab 条目仍在" || ok "periodic 卸载删条目"
+[ -f "$ROOT_DIR/tasks/hello.sh" ] && bad "卸载后 wrapper 仍在" || ok "卸载删 wrapper"
+[ -n "$(reg_field hello backend)" ] && bad "卸载后 registry 仍有条目" || ok "卸载删 registry 条目"
+grep -qF '# dia-job:daily' "$CRON_TABLE" && ok "他人条目未被连带删除" || bad "误删了其它条目"
+
+echo "── doctor（Linux 分支）──"
+out="$(run doctor 2>&1)"; rc=$?
+printf '%s' "$out" | grep -q 'crontab 可用' && ok "doctor 报 crontab 可用" || bad "doctor 缺 crontab 检查：$out"
+printf '%s' "$out" | grep -q 'systemctl --user 可用' && ok "doctor 报 systemd 可用" || bad "doctor 缺 systemd 检查：$out"
+[ "$rc" = 0 ] || [ "$rc" = 1 ] && ok "doctor 退出码在 0/1（非崩溃）" || bad "doctor rc=$rc"
+
+echo; echo "── PASS $PASS · FAIL $FAIL ──"; [ "$FAIL" = 0 ]