pixivflow 2.16.1 → 2.17.0

package/dist/auth/PixivAuth.d.ts

@@ -1,5 +1,17 @@
 import { NetworkConfig, PixivCredentialConfig } from '../config';
 import { Database } from '../storage/Database';
+/**
+ * Read-only auth: never exchange a refresh token, never persist one.
+ *
+ * Two processes can share one refresh token, but Pixiv's rotation behaviour on
+ * `grant_type=refresh_token` is a server detail a client cannot prove. If it
+ * rotates, a second process that refreshes can invalidate the first one's token —
+ * and a long-running daemon never re-reads the token from disk, so it cannot
+ * recover without a restart. In this mode the only accepted credential is an
+ * access token already present in the local cache; anything else fails loudly
+ * instead of silently rotating a credential someone else is using.
+ */
+export declare function isAuthReadOnly(): boolean;
 export declare class PixivAuth {
     private readonly credentials;
     private readonly network;

package/dist/auth/PixivAuth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PixivAuth.d.ts","sourceRoot":"","sources":["../../src/auth/PixivAuth.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAEjE,OAAO,EAAoB,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAmBjE,qBAAa,SAAS;IAIlB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAL3B,OAAO,CAAC,UAAU,CAAC,CAAS;gBAGT,WAAW,EAAE,qBAAqB,EAClC,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,QAAQ,EACnC,UAAU,CAAC,EAAE,MAAM;IAKR,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC;IAU9C;;;OAGG;IACG,2BAA2B,IAAI,OAAO,CAAC,MAAM,CAAC;YAKtC,kBAAkB;IA2IhC,OAAO,CAAC,kBAAkB;CAI3B"}
+{"version":3,"file":"PixivAuth.d.ts","sourceRoot":"","sources":["../../src/auth/PixivAuth.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAEjE,OAAO,EAAoB,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAmBjE;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,IAAI,OAAO,CAGxC;AAED,qBAAa,SAAS;IAIlB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAL3B,OAAO,CAAC,UAAU,CAAC,CAAS;gBAGT,WAAW,EAAE,qBAAqB,EAClC,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,QAAQ,EACnC,UAAU,CAAC,EAAE,MAAM;IAKR,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC;IAiB9C;;;OAGG;IACG,2BAA2B,IAAI,OAAO,CAAC,MAAM,CAAC;YAKtC,kBAAkB;IAoJhC,OAAO,CAAC,kBAAkB;CAI3B"}

package/dist/auth/PixivAuth.js

@@ -34,6 +34,7 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PixivAuth = void 0;
+exports.isAuthReadOnly = isAuthReadOnly;
 const node_crypto_1 = require("node:crypto");
 const promises_1 = require("node:timers/promises");
 const logger_1 = require("../logger");
@@ -41,6 +42,21 @@ const login_helper_1 = require("../utils/login-helper");
 const errors_1 = require("../utils/errors");
 const TOKEN_CACHE_KEY = 'pixiv_access_token';
 const REFRESH_TOKEN_CACHE_KEY = 'pixiv_refresh_token';
+/**
+ * Read-only auth: never exchange a refresh token, never persist one.
+ *
+ * Two processes can share one refresh token, but Pixiv's rotation behaviour on
+ * `grant_type=refresh_token` is a server detail a client cannot prove. If it
+ * rotates, a second process that refreshes can invalidate the first one's token —
+ * and a long-running daemon never re-reads the token from disk, so it cannot
+ * recover without a restart. In this mode the only accepted credential is an
+ * access token already present in the local cache; anything else fails loudly
+ * instead of silently rotating a credential someone else is using.
+ */
+function isAuthReadOnly() {
+    const value = process.env.PIXIV_AUTH_READONLY?.trim().toLowerCase();
+    return value === '1' || value === 'true' || value === 'yes';
+}
 class PixivAuth {
     credentials;
     network;
@@ -57,6 +73,10 @@ class PixivAuth {
         if (cached && cached.accessToken && cached.expiresAt > Date.now() + 60_000) {
             return cached.accessToken;
         }
+        if (isAuthReadOnly()) {
+            throw new errors_1.AuthenticationError('Read-only auth (PIXIV_AUTH_READONLY) refuses to refresh: no usable access token is cached. ' +
+                'Seed the access-token cache with a token that is still valid, or run with its own credential.');
+        }
         const refreshed = await this.refreshAccessToken();
         return refreshed.accessToken;
     }
@@ -69,6 +89,12 @@ class PixivAuth {
         return stored.accessToken;
     }
     async refreshAccessToken() {
+        // Single guard for every refresh caller: the persistence block below writes a
+        // rotated token to the database, a file and the config, in this process only.
+        if (isAuthReadOnly()) {
+            throw new errors_1.AuthenticationError('Read-only auth (PIXIV_AUTH_READONLY) must never call the token endpoint: ' +
+                'refreshing may rotate a refresh token another process is using.');
+        }
         const url = 'https://oauth.secure.pixiv.net/auth/token';
         let lastError;
         for (let attempt = 0; attempt < (this.network.retries ?? 3); attempt++) {

package/dist/auth/PixivAuth.js.map

@@ -1 +1 @@
-{"version":3,"file":"PixivAuth.js","sourceRoot":"","sources":["../../src/auth/PixivAuth.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,6CAAyC;AACzC,mDAA2D;AAG3D,sCAAmC;AAEnC,wDAA8D;AAC9D,4CAAsD;AActD,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAC7C,MAAM,uBAAuB,GAAG,qBAAqB,CAAC;AAEtD,MAAa,SAAS;IAID;IACA;IACA;IALX,UAAU,CAAU;IAE5B,YACmB,WAAkC,EAClC,OAAsB,EACtB,QAAkB,EACnC,UAAmB;QAHF,gBAAW,GAAX,WAAW,CAAuB;QAClC,YAAO,GAAP,OAAO,CAAe;QACtB,aAAQ,GAAR,QAAQ,CAAU;QAGnC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAEM,KAAK,CAAC,cAAc;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QACvD,IAAI,MAAM,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;YAC3E,OAAO,MAAM,CAAC,WAAW,CAAC;QAC5B,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAClD,OAAO,SAAS,CAAC,WAAW,CAAC;IAC/B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,2BAA2B;QAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC/C,OAAO,MAAM,CAAC,WAAW,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,kBAAkB;QAC9B,MAAM,GAAG,GAAG,2CAA2C,CAAC;QAExD,IAAI,SAAkB,CAAC;QACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YACvE,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;oBAC/B,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ;oBACpC,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,YAAY;oBAC5C,UAAU,EAAE,eAAe;oBAC3B,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,YAAY;oBAC5C,cAAc,EAAE,MAAM;iBACvB,CAAC,CAAC;gBAEH,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC5C,MAAM,OAAO,GAAG;oBACd,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,SAAS;oBACxC,cAAc,EAAE,mCAAmC;oBACnD,eAAe,EAAE,UAAU;oBAC3B,eAAe,EAAE,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC;iBAC3B,CAAC;gBAE5B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;gBACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC7E,IAAI,CAAC;oBACH,qEAAqE;oBACrE,sEAAsE;oBACtE,oEAAoE;oBACpE,MAAM,YAAY,GAA4B;wBAC5C,MAAM,EAAE,MAAM;wBACd,IAAI;wBACJ,OAAO;wBACP,MAAM,EAAE,UAAU,CAAC,MAAM;qBAC1B,CAAC;oBACF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC;oBAClC,IAAI,KAAK,EAAE,OAAO,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;wBAC/C,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;wBACzC,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;wBACvD,MAAM,IAAI,GACR,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ;4BAC9B,CAAC,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG;4BAChF,CAAC,CAAC,EAAE,CAAC;wBACT,YAAY,CAAC,UAAU,GAAG,IAAI,UAAU,CACtC,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAChD,CAAC;oBACJ,CAAC;oBACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,YAA2C,CAAC,CAAC;oBAE/E,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;wBACjB,6FAA6F;wBAC7F,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;4BACvD,MAAM,YAAY,GAAG,qCAAqC,QAAQ,CAAC,MAAM,kDAAkD,CAAC;4BAC5H,MAAM,IAAI,4BAAmB,CAAC,YAAY,CAAC,CAAC;wBAC9C,CAAC;wBACD,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;oBACxF,CAAC;oBAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyB,CAAC;oBAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;oBAEtD,MAAM,MAAM,GAAqB;wBAC/B,WAAW,EAAE,IAAI,CAAC,YAAY;wBAC9B,SAAS;wBACT,YAAY,EAAE,IAAI,CAAC,aAAa;wBAChC,SAAS,EAAE,IAAI,CAAC,UAAU;qBAC3B,CAAC;oBAEF,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;oBAEhD,+DAA+D;oBAC/D,wEAAwE;oBACxE,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;wBAC/E,eAAM,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;wBAE9E,0CAA0C;wBAC1C,IAAI,CAAC,WAAW,CAAC,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC;wBAEnD,yCAAyC;wBACzC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,uBAAuB,EAAE;4BAC9C,WAAW,EAAE,EAAE;4BACf,SAAS;4BACT,YAAY,EAAE,IAAI,CAAC,aAAa;4BAChC,SAAS,EAAE,IAAI,CAAC,UAAU;yBAC3B,CAAC,CAAC;wBACH,eAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;wBAE1C,4CAA4C;wBAC5C,IAAI,CAAC;4BACH,MAAM,EAAE,kBAAkB,EAAE,GAAG,wDAAa,wBAAwB,GAAC,CAAC;4BACtE,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,QAAgB,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;4BACrF,kBAAkB,CAAC,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;4BACrD,eAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;wBAC/C,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,eAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE;gCACjD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;6BAC9D,CAAC,CAAC;wBACL,CAAC;wBAED,mEAAmE;wBACnE,gEAAgE;wBAChE,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;4BACpB,IAAI,CAAC;gCACH,MAAM,IAAA,oCAAqB,EAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;gCACjE,eAAM,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;4BAC7E,CAAC;4BAAC,OAAO,KAAK,EAAE,CAAC;gCACf,eAAM,CAAC,IAAI,CAAC,qDAAqD,EAAE;oCACjE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iCAC9D,CAAC,CAAC;gCACH,gDAAgD;4BAClD,CAAC;wBACH,CAAC;wBAED,eAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;oBAClE,CAAC;oBAED,eAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;oBAC5C,OAAO,MAAM,CAAC;gBAChB,CAAC;wBAAS,CAAC;oBACT,YAAY,CAAC,OAAO,CAAC,CAAC;gBACxB,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,GAAG,KAAK,CAAC;gBAClB,iFAAiF;gBACjF,IAAI,KAAK,YAAY,4BAAmB,EAAE,CAAC;oBACzC,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,eAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,OAAO,EAAE,OAAO,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;gBACzF,MAAM,IAAA,qBAAK,EAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QAED,sDAAsD;QACtD,IAAI,SAAS,YAAY,4BAAmB,EAAE,CAAC;YAC7C,MAAM,SAAS,CAAC;QAClB,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,CAAC,OAAO,CAAC,OAAO,cAAc,SAAS,EAAE,CAAC,CAAC;IACxG,CAAC;IAEO,kBAAkB,CAAC,IAAY;QACrC,MAAM,IAAI,GAAG,kCAAkC,CAAC;QAChD,OAAO,IAAA,wBAAU,EAAC,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC;CACF;AA9KD,8BA8KC"}
+{"version":3,"file":"PixivAuth.js","sourceRoot":"","sources":["../../src/auth/PixivAuth.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmCA,wCAGC;AAtCD,6CAAyC;AACzC,mDAA2D;AAG3D,sCAAmC;AAEnC,wDAA8D;AAC9D,4CAAsD;AActD,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAC7C,MAAM,uBAAuB,GAAG,qBAAqB,CAAC;AAEtD;;;;;;;;;;GAUG;AACH,SAAgB,cAAc;IAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACpE,OAAO,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,KAAK,CAAC;AAC9D,CAAC;AAED,MAAa,SAAS;IAID;IACA;IACA;IALX,UAAU,CAAU;IAE5B,YACmB,WAAkC,EAClC,OAAsB,EACtB,QAAkB,EACnC,UAAmB;QAHF,gBAAW,GAAX,WAAW,CAAuB;QAClC,YAAO,GAAP,OAAO,CAAe;QACtB,aAAQ,GAAR,QAAQ,CAAU;QAGnC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAEM,KAAK,CAAC,cAAc;QACzB,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;QACvD,IAAI,MAAM,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;YAC3E,OAAO,MAAM,CAAC,WAAW,CAAC;QAC5B,CAAC;QAED,IAAI,cAAc,EAAE,EAAE,CAAC;YACrB,MAAM,IAAI,4BAAmB,CAC3B,6FAA6F;gBAC3F,+FAA+F,CAClG,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAClD,OAAO,SAAS,CAAC,WAAW,CAAC;IAC/B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,2BAA2B;QAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAC/C,OAAO,MAAM,CAAC,WAAW,CAAC;IAC5B,CAAC;IAEO,KAAK,CAAC,kBAAkB;QAC9B,8EAA8E;QAC9E,8EAA8E;QAC9E,IAAI,cAAc,EAAE,EAAE,CAAC;YACrB,MAAM,IAAI,4BAAmB,CAC3B,2EAA2E;gBACzE,iEAAiE,CACpE,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,2CAA2C,CAAC;QAExD,IAAI,SAAkB,CAAC;QACvB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YACvE,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;oBAC/B,SAAS,EAAE,IAAI,CAAC,WAAW,CAAC,QAAQ;oBACpC,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,YAAY;oBAC5C,UAAU,EAAE,eAAe;oBAC3B,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,YAAY;oBAC5C,cAAc,EAAE,MAAM;iBACvB,CAAC,CAAC;gBAEH,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC5C,MAAM,OAAO,GAAG;oBACd,YAAY,EAAE,IAAI,CAAC,WAAW,CAAC,SAAS;oBACxC,cAAc,EAAE,mCAAmC;oBACnD,eAAe,EAAE,UAAU;oBAC3B,eAAe,EAAE,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC;iBAC3B,CAAC;gBAE5B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;gBACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC7E,IAAI,CAAC;oBACH,qEAAqE;oBACrE,sEAAsE;oBACtE,oEAAoE;oBACpE,MAAM,YAAY,GAA4B;wBAC5C,MAAM,EAAE,MAAM;wBACd,IAAI;wBACJ,OAAO;wBACP,MAAM,EAAE,UAAU,CAAC,MAAM;qBAC1B,CAAC;oBACF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC;oBAClC,IAAI,KAAK,EAAE,OAAO,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;wBAC/C,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;wBACzC,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;wBACvD,MAAM,IAAI,GACR,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ;4BAC9B,CAAC,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG;4BAChF,CAAC,CAAC,EAAE,CAAC;wBACT,YAAY,CAAC,UAAU,GAAG,IAAI,UAAU,CACtC,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,CAChD,CAAC;oBACJ,CAAC;oBACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,YAA2C,CAAC,CAAC;oBAE/E,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;wBACjB,6FAA6F;wBAC7F,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;4BACvD,MAAM,YAAY,GAAG,qCAAqC,QAAQ,CAAC,MAAM,kDAAkD,CAAC;4BAC5H,MAAM,IAAI,4BAAmB,CAAC,YAAY,CAAC,CAAC;wBAC9C,CAAC;wBACD,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;oBACxF,CAAC;oBAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyB,CAAC;oBAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;oBAEtD,MAAM,MAAM,GAAqB;wBAC/B,WAAW,EAAE,IAAI,CAAC,YAAY;wBAC9B,SAAS;wBACT,YAAY,EAAE,IAAI,CAAC,aAAa;wBAChC,SAAS,EAAE,IAAI,CAAC,UAAU;qBAC3B,CAAC;oBAEF,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;oBAEhD,+DAA+D;oBAC/D,wEAAwE;oBACxE,IAAI,IAAI,CAAC,aAAa,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;wBAC/E,eAAM,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;wBAE9E,0CAA0C;wBAC1C,IAAI,CAAC,WAAW,CAAC,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC;wBAEnD,yCAAyC;wBACzC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,uBAAuB,EAAE;4BAC9C,WAAW,EAAE,EAAE;4BACf,SAAS;4BACT,YAAY,EAAE,IAAI,CAAC,aAAa;4BAChC,SAAS,EAAE,IAAI,CAAC,UAAU;yBAC3B,CAAC,CAAC;wBACH,eAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;wBAE1C,4CAA4C;wBAC5C,IAAI,CAAC;4BACH,MAAM,EAAE,kBAAkB,EAAE,GAAG,wDAAa,wBAAwB,GAAC,CAAC;4BACtE,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,QAAgB,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;4BACrF,kBAAkB,CAAC,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;4BACrD,eAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;wBAC/C,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,eAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE;gCACjD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;6BAC9D,CAAC,CAAC;wBACL,CAAC;wBAED,mEAAmE;wBACnE,gEAAgE;wBAChE,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;4BACpB,IAAI,CAAC;gCACH,MAAM,IAAA,oCAAqB,EAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;gCACjE,eAAM,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;4BAC7E,CAAC;4BAAC,OAAO,KAAK,EAAE,CAAC;gCACf,eAAM,CAAC,IAAI,CAAC,qDAAqD,EAAE;oCACjE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iCAC9D,CAAC,CAAC;gCACH,gDAAgD;4BAClD,CAAC;wBACH,CAAC;wBAED,eAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;oBAClE,CAAC;oBAED,eAAM,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;oBAC5C,OAAO,MAAM,CAAC;gBAChB,CAAC;wBAAS,CAAC;oBACT,YAAY,CAAC,OAAO,CAAC,CAAC;gBACxB,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,SAAS,GAAG,KAAK,CAAC;gBAClB,iFAAiF;gBACjF,IAAI,KAAK,YAAY,4BAAmB,EAAE,CAAC;oBACzC,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,eAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,OAAO,EAAE,OAAO,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;gBACzF,MAAM,IAAA,qBAAK,EAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;YACpD,CAAC;QACH,CAAC;QAED,sDAAsD;QACtD,IAAI,SAAS,YAAY,4BAAmB,EAAE,CAAC;YAC7C,MAAM,SAAS,CAAC;QAClB,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,CAAC,OAAO,CAAC,OAAO,cAAc,SAAS,EAAE,CAAC,CAAC;IACxG,CAAC;IAEO,kBAAkB,CAAC,IAAY;QACrC,MAAM,IAAI,GAAG,kCAAkC,CAAC;QAChD,OAAO,IAAA,wBAAU,EAAC,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC;CACF;AA9LD,8BA8LC"}

package/dist/batch/executionResult.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Machine-readable result of one batch execution.
+ *
+ * The batch runner is a disposable CI job: it cannot leave its state behind in a
+ * process, so its *only* handoff is this document. Everything a control plane
+ * needs to roll the occurrence up — and everything a human needs to debug a
+ * night's failure — has to be in here.
+ *
+ * Two rules the shape enforces:
+ *  - a target that produced NO outcome is reported as `missing`, never omitted and
+ *    never assumed successful;
+ *  - the exit code IS the execution status (0 success / 2 partial / 3 failed /
+ *    4 uncertain), so a supervisor that only reads the exit code still cannot
+ *    mistake "some targets failed" for "everything worked".
+ */
+import type { TargetOutcome } from '../scheduler/TargetOutcome';
+export type BatchTargetStatus = 'submitted' | 'stored' | 'delivery_pending' | 'no_candidate' | 'duplicate' | 'failed'
+/** The run produced no outcome for this target at all (aborted mid-way). */
+ | 'missing';
+export type BatchExecutionStatus = 'success' | 'partial' | 'failed' | 'uncertain';
+export interface BatchTargetResult {
+    targetId: string;
+    status: BatchTargetStatus;
+    workId?: string;
+    error?: string;
+    /** Only meaningful for `failed`: a later attempt may still succeed. */
+    retryable?: boolean;
+}
+export interface BatchOutboxSummary {
+    processed: number;
+    done: number;
+    retried: number;
+    dead: number;
+}
+export interface BatchExecutionResult {
+    slotId: string;
+    scheduleId: string;
+    botId?: string;
+    attempt: number;
+    mode: 'live' | 'shadow' | 'dry-run';
+    occurrenceAt?: number;
+    status: BatchExecutionStatus;
+    exitCode: number;
+    startedAt: string;
+    finishedAt: string;
+    durationMs: number;
+    targets: BatchTargetResult[];
+    outbox?: BatchOutboxSummary;
+    /** Process-level failure (config, auth, crash): not a per-target outcome. */
+    error?: string;
+    /**
+     * The category that best explains a failed run, and the server's own cooldown
+     * hint when it gave one.
+     *
+     * The control plane needs these to choose a retry delay: a rate-limited account
+     * should wait for the server, while a broken provider should not be retried on the
+     * same schedule. Exit codes alone cannot express that difference.
+     */
+    errorClass?: string;
+    retryAfterMs?: number | null;
+    /** How many Pixiv 429s this run observed; 0 or absent means none. */
+    rateLimitHits?: number;
+}
+export declare const EXIT_SUCCESS = 0;
+export declare const EXIT_ERROR = 1;
+export declare const EXIT_PARTIAL = 2;
+export declare const EXIT_FAILED = 3;
+export declare const EXIT_UNCERTAIN = 4;
+export declare function outcomeToTargetResult(targetId: string, outcome: TargetOutcome): BatchTargetResult;
+export interface ExecutionSummary {
+    status: BatchExecutionStatus;
+    exitCode: number;
+    targets: BatchTargetResult[];
+}
+/**
+ * Combine per-target results into the execution's status.
+ *
+ * `expectedTargetIds` is what makes this honest: a target that never reported is
+ * added as `missing` instead of being dropped, so a run that died halfway cannot
+ * come out as `success`.
+ */
+export declare function summarizeExecution(results: readonly BatchTargetResult[], expectedTargetIds: readonly string[]): ExecutionSummary;
+/** Exit code → execution status, the contract the control plane relies on. */
+export declare function executionStatusForExitCode(exitCode: number): BatchExecutionStatus;
+//# sourceMappingURL=executionResult.d.ts.map

package/dist/batch/executionResult.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"executionResult.d.ts","sourceRoot":"","sources":["../../src/batch/executionResult.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAEhE,MAAM,MAAM,iBAAiB,GACzB,WAAW,GACX,QAAQ,GACR,kBAAkB,GAClB,cAAc,GACd,WAAW,GACX,QAAQ;AACV,4EAA4E;GAC1E,SAAS,CAAC;AAEd,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,SAAS,GAAG,QAAQ,GAAG,WAAW,CAAC;AAElF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;IACpC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,oBAAoB,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B,6EAA6E;IAC7E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,qEAAqE;IACrE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,eAAO,MAAM,YAAY,IAAI,CAAC;AAC9B,eAAO,MAAM,UAAU,IAAI,CAAC;AAC5B,eAAO,MAAM,YAAY,IAAI,CAAC;AAC9B,eAAO,MAAM,WAAW,IAAI,CAAC;AAC7B,eAAO,MAAM,cAAc,IAAI,CAAC;AAKhC,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,iBAAiB,CAoBjG;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,oBAAoB,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,iBAAiB,EAAE,CAAC;CAC9B;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,SAAS,iBAAiB,EAAE,EACrC,iBAAiB,EAAE,SAAS,MAAM,EAAE,GACnC,gBAAgB,CAmClB;AAED,8EAA8E;AAC9E,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,GAAG,oBAAoB,CAWjF"}

package/dist/batch/executionResult.js

@@ -0,0 +1,102 @@
+"use strict";
+/**
+ * Machine-readable result of one batch execution.
+ *
+ * The batch runner is a disposable CI job: it cannot leave its state behind in a
+ * process, so its *only* handoff is this document. Everything a control plane
+ * needs to roll the occurrence up — and everything a human needs to debug a
+ * night's failure — has to be in here.
+ *
+ * Two rules the shape enforces:
+ *  - a target that produced NO outcome is reported as `missing`, never omitted and
+ *    never assumed successful;
+ *  - the exit code IS the execution status (0 success / 2 partial / 3 failed /
+ *    4 uncertain), so a supervisor that only reads the exit code still cannot
+ *    mistake "some targets failed" for "everything worked".
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EXIT_UNCERTAIN = exports.EXIT_FAILED = exports.EXIT_PARTIAL = exports.EXIT_ERROR = exports.EXIT_SUCCESS = void 0;
+exports.outcomeToTargetResult = outcomeToTargetResult;
+exports.summarizeExecution = summarizeExecution;
+exports.executionStatusForExitCode = executionStatusForExitCode;
+exports.EXIT_SUCCESS = 0;
+exports.EXIT_ERROR = 1;
+exports.EXIT_PARTIAL = 2;
+exports.EXIT_FAILED = 3;
+exports.EXIT_UNCERTAIN = 4;
+/** Outcomes that mean "this target is done and content went somewhere". */
+const OK_STATUSES = ['submitted', 'stored', 'duplicate'];
+function outcomeToTargetResult(targetId, outcome) {
+    switch (outcome.kind) {
+        case 'submitted':
+            return { targetId, status: 'submitted', workId: outcome.workId };
+        case 'stored':
+            return { targetId, status: 'stored', workId: outcome.workId };
+        case 'delivery_pending':
+            return { targetId, status: 'delivery_pending', workId: outcome.workId };
+        case 'duplicate':
+            return { targetId, status: 'duplicate', workId: outcome.workId, error: outcome.reason };
+        case 'no_candidate':
+            return { targetId, status: 'no_candidate', error: outcome.reason };
+        case 'failed':
+            return {
+                targetId,
+                status: 'failed',
+                error: outcome.error,
+                retryable: outcome.retryable,
+            };
+    }
+}
+/**
+ * Combine per-target results into the execution's status.
+ *
+ * `expectedTargetIds` is what makes this honest: a target that never reported is
+ * added as `missing` instead of being dropped, so a run that died halfway cannot
+ * come out as `success`.
+ */
+function summarizeExecution(results, expectedTargetIds) {
+    const byTarget = new Map(results.map((result) => [result.targetId, result]));
+    const targets = expectedTargetIds.map((targetId) => byTarget.get(targetId) ?? {
+        targetId,
+        status: 'missing',
+        error: 'no outcome was produced for this target',
+    });
+    for (const result of results) {
+        if (!expectedTargetIds.includes(result.targetId))
+            targets.push(result);
+    }
+    const ok = targets.filter((target) => OK_STATUSES.includes(target.status));
+    const uncertain = targets.filter((target) => target.status === 'delivery_pending');
+    if (uncertain.length > 0) {
+        // An unconfirmed Telegram send must never be retried automatically: the
+        // control plane treats this as terminal and a human resolves it.
+        return { status: 'uncertain', exitCode: exports.EXIT_UNCERTAIN, targets };
+    }
+    if (targets.length === 0) {
+        return { status: 'failed', exitCode: exports.EXIT_FAILED, targets };
+    }
+    if (ok.length === targets.length) {
+        return { status: 'success', exitCode: exports.EXIT_SUCCESS, targets };
+    }
+    if (ok.length === 0) {
+        // Nothing was delivered. All-empty-candidates is a business outcome (retrying
+        // the same day rarely helps) but it is still "nothing published", not success.
+        const allNoCandidate = targets.every((target) => target.status === 'no_candidate');
+        return { status: allNoCandidate ? 'partial' : 'failed', exitCode: allNoCandidate ? exports.EXIT_PARTIAL : exports.EXIT_FAILED, targets };
+    }
+    return { status: 'partial', exitCode: exports.EXIT_PARTIAL, targets };
+}
+/** Exit code → execution status, the contract the control plane relies on. */
+function executionStatusForExitCode(exitCode) {
+    switch (exitCode) {
+        case exports.EXIT_SUCCESS:
+            return 'success';
+        case exports.EXIT_PARTIAL:
+            return 'partial';
+        case exports.EXIT_UNCERTAIN:
+            return 'uncertain';
+        default:
+            return 'failed';
+    }
+}
+//# sourceMappingURL=executionResult.js.map

package/dist/batch/executionResult.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executionResult.js","sourceRoot":"","sources":["../../src/batch/executionResult.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;AAuEH,sDAoBC;AAeD,gDAsCC;AAGD,gEAWC;AAhGY,QAAA,YAAY,GAAG,CAAC,CAAC;AACjB,QAAA,UAAU,GAAG,CAAC,CAAC;AACf,QAAA,YAAY,GAAG,CAAC,CAAC;AACjB,QAAA,WAAW,GAAG,CAAC,CAAC;AAChB,QAAA,cAAc,GAAG,CAAC,CAAC;AAEhC,2EAA2E;AAC3E,MAAM,WAAW,GAAiC,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;AAEvF,SAAgB,qBAAqB,CAAC,QAAgB,EAAE,OAAsB;IAC5E,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACrB,KAAK,WAAW;YACd,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QACnE,KAAK,QAAQ;YACX,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QAChE,KAAK,kBAAkB;YACrB,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,kBAAkB,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1E,KAAK,WAAW;YACd,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1F,KAAK,cAAc;YACjB,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QACrE,KAAK,QAAQ;YACX,OAAO;gBACL,QAAQ;gBACR,MAAM,EAAE,QAAQ;gBAChB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC;IACN,CAAC;AACH,CAAC;AAQD;;;;;;GAMG;AACH,SAAgB,kBAAkB,CAChC,OAAqC,EACrC,iBAAoC;IAEpC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAwB,iBAAiB,CAAC,GAAG,CACxD,CAAC,QAAQ,EAAE,EAAE,CACX,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI;QACxB,QAAQ;QACR,MAAM,EAAE,SAAkB;QAC1B,KAAK,EAAE,yCAAyC;KACjD,CACJ,CAAC;IACF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3E,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,kBAAkB,CAAC,CAAC;IAEnF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,wEAAwE;QACxE,iEAAiE;QACjE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,sBAAc,EAAE,OAAO,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,mBAAW,EAAE,OAAO,EAAE,CAAC;IAC9D,CAAC;IACD,IAAI,EAAE,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QACjC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,oBAAY,EAAE,OAAO,EAAE,CAAC;IAChE,CAAC;IACD,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpB,8EAA8E;QAC9E,+EAA+E;QAC/E,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC;QACnF,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,oBAAY,CAAC,CAAC,CAAC,mBAAW,EAAE,OAAO,EAAE,CAAC;IAC3H,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,oBAAY,EAAE,OAAO,EAAE,CAAC;AAChE,CAAC;AAED,8EAA8E;AAC9E,SAAgB,0BAA0B,CAAC,QAAgB;IACzD,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,oBAAY;YACf,OAAO,SAAS,CAAC;QACnB,KAAK,oBAAY;YACf,OAAO,SAAS,CAAC;QACnB,KAAK,sBAAc;YACjB,OAAO,WAAW,CAAC;QACrB;YACE,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC"}

package/dist/batch/runDiagnostics.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Run-scoped diagnostics for the business errors a batch execution hits.
+ *
+ * The control plane needs to tell a rate-limited run apart from a broken one: they
+ * share an exit code but not a remedy. A batch runner has no daemon behind it, so
+ * the only way that distinction survives is if this process records it and the
+ * result file carries it back.
+ *
+ * Deliberately module-level and reset per run: the runner is a fresh process each
+ * time, and a long-lived caller (tests, the scheduler) must not inherit counts.
+ */
+/** Stable categories the control plane understands. */
+export type RunErrorCategory = 'pixiv_rate_limit' | 'network_timeout' | 'download_failed' | 'provider_error' | 'internal_error';
+export interface RunDiagnostics {
+    categories: Partial<Record<RunErrorCategory, number>>;
+    /** How many times a Pixiv 429 was observed. */
+    rateLimitHits: number;
+    /** The longest cooldown the server asked for, if it said. */
+    maxRetryAfterMs: number | null;
+    /** The category that best explains a failed run, if any. */
+    dominantCategory: RunErrorCategory | null;
+}
+/** Called at the start of a run so counts cannot leak between runs. */
+export declare function resetRunDiagnostics(): void;
+/**
+ * Record one observed Pixiv rate limit.
+ *
+ * `waitMs` is the server's own hint when it provided one (Retry-After); the longest
+ * hint seen during the run is what the report carries, because it is the one that
+ * governs when this account may be used again.
+ */
+export declare function recordRateLimit(waitMs?: number): void;
+/**
+ * Classify a failure message into a category.
+ *
+ * Message matching is the fallback, not the primary mechanism: the Pixiv client
+ * raises typed errors and the paths that see them call `recordRateLimit` directly.
+ * This exists for the places where only a string survives, and it is intentionally
+ * narrower than a generic "is this retryable" test — the point is to keep a rate
+ * limit from being confused with a broken provider.
+ */
+export declare function classifyRunError(message: string): RunErrorCategory;
+/** Record a failure the run actually hit, from its message. */
+export declare function recordRunError(message: string): RunErrorCategory;
+/** Record an explicit category (used where the caller already knows it). */
+export declare function recordRunCategory(category: RunErrorCategory): void;
+export declare function runDiagnostics(): RunDiagnostics;
+//# sourceMappingURL=runDiagnostics.d.ts.map

package/dist/batch/runDiagnostics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runDiagnostics.d.ts","sourceRoot":"","sources":["../../src/batch/runDiagnostics.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,uDAAuD;AACvD,MAAM,MAAM,gBAAgB,GACxB,kBAAkB,GAClB,iBAAiB,GACjB,iBAAiB,GACjB,gBAAgB,GAChB,gBAAgB,CAAC;AAErB,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,+CAA+C;IAC/C,aAAa,EAAE,MAAM,CAAC;IACtB,6DAA6D;IAC7D,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,4DAA4D;IAC5D,gBAAgB,EAAE,gBAAgB,GAAG,IAAI,CAAC;CAC3C;AAWD,uEAAuE;AACvE,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C;AAMD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAMrD;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,CAOlE;AAED,+DAA+D;AAC/D,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,CAShE;AAED,4EAA4E;AAC5E,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAKlE;AAED,wBAAgB,cAAc,IAAI,cAAc,CAiB/C"}

package/dist/batch/runDiagnostics.js

@@ -0,0 +1,103 @@
+"use strict";
+/**
+ * Run-scoped diagnostics for the business errors a batch execution hits.
+ *
+ * The control plane needs to tell a rate-limited run apart from a broken one: they
+ * share an exit code but not a remedy. A batch runner has no daemon behind it, so
+ * the only way that distinction survives is if this process records it and the
+ * result file carries it back.
+ *
+ * Deliberately module-level and reset per run: the runner is a fresh process each
+ * time, and a long-lived caller (tests, the scheduler) must not inherit counts.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resetRunDiagnostics = resetRunDiagnostics;
+exports.recordRateLimit = recordRateLimit;
+exports.classifyRunError = classifyRunError;
+exports.recordRunError = recordRunError;
+exports.recordRunCategory = recordRunCategory;
+exports.runDiagnostics = runDiagnostics;
+const empty = () => ({
+    categories: {},
+    rateLimitHits: 0,
+    maxRetryAfterMs: null,
+    dominantCategory: null,
+});
+let state = empty();
+/** Called at the start of a run so counts cannot leak between runs. */
+function resetRunDiagnostics() {
+    state = empty();
+}
+function record(category) {
+    state.categories[category] = (state.categories[category] ?? 0) + 1;
+}
+/**
+ * Record one observed Pixiv rate limit.
+ *
+ * `waitMs` is the server's own hint when it provided one (Retry-After); the longest
+ * hint seen during the run is what the report carries, because it is the one that
+ * governs when this account may be used again.
+ */
+function recordRateLimit(waitMs) {
+    state.rateLimitHits += 1;
+    if (typeof waitMs === 'number' && Number.isFinite(waitMs) && waitMs > 0) {
+        state.maxRetryAfterMs = Math.max(state.maxRetryAfterMs ?? 0, waitMs);
+    }
+    record('pixiv_rate_limit');
+}
+/**
+ * Classify a failure message into a category.
+ *
+ * Message matching is the fallback, not the primary mechanism: the Pixiv client
+ * raises typed errors and the paths that see them call `recordRateLimit` directly.
+ * This exists for the places where only a string survives, and it is intentionally
+ * narrower than a generic "is this retryable" test — the point is to keep a rate
+ * limit from being confused with a broken provider.
+ */
+function classifyRunError(message) {
+    if (/\b429\b|rate.?limit|too many requests|cooldown/i.test(message))
+        return 'pixiv_rate_limit';
+    if (/timeout|timed out|abort|econnreset|econnrefused|enotfound|socket hang up/i.test(message)) {
+        return 'network_timeout';
+    }
+    if (/download|file|write|disk|enospc/i.test(message))
+        return 'download_failed';
+    return 'internal_error';
+}
+/** Record a failure the run actually hit, from its message. */
+function recordRunError(message) {
+    const category = classifyRunError(message);
+    if (category === 'pixiv_rate_limit') {
+        state.rateLimitHits += 1;
+        record(category);
+        return category;
+    }
+    record(category);
+    return category;
+}
+/** Record an explicit category (used where the caller already knows it). */
+function recordRunCategory(category) {
+    if (category === 'pixiv_rate_limit') {
+        state.rateLimitHits += 1;
+    }
+    record(category);
+}
+function runDiagnostics() {
+    const rank = [
+        'pixiv_rate_limit',
+        'network_timeout',
+        'download_failed',
+        'provider_error',
+        'internal_error',
+    ];
+    // A rate limit outranks everything: it is the one category with a server-provided
+    // remedy, and reporting it as "internal_error" would hide that.
+    const dominant = rank.find((category) => (state.categories[category] ?? 0) > 0) ?? null;
+    return {
+        categories: { ...state.categories },
+        rateLimitHits: state.rateLimitHits,
+        maxRetryAfterMs: state.maxRetryAfterMs,
+        dominantCategory: dominant,
+    };
+}
+//# sourceMappingURL=runDiagnostics.js.map

package/dist/batch/runDiagnostics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runDiagnostics.js","sourceRoot":"","sources":["../../src/batch/runDiagnostics.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;AA8BH,kDAEC;AAaD,0CAMC;AAWD,4CAOC;AAGD,wCASC;AAGD,8CAKC;AAED,wCAiBC;AAxFD,MAAM,KAAK,GAAG,GAAmB,EAAE,CAAC,CAAC;IACnC,UAAU,EAAE,EAAE;IACd,aAAa,EAAE,CAAC;IAChB,eAAe,EAAE,IAAI;IACrB,gBAAgB,EAAE,IAAI;CACvB,CAAC,CAAC;AAEH,IAAI,KAAK,GAAG,KAAK,EAAE,CAAC;AAEpB,uEAAuE;AACvE,SAAgB,mBAAmB;IACjC,KAAK,GAAG,KAAK,EAAE,CAAC;AAClB,CAAC;AAED,SAAS,MAAM,CAAC,QAA0B;IACxC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,eAAe,CAAC,MAAe;IAC7C,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC;IACzB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;QACxE,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,CAAC,kBAAkB,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,gBAAgB,CAAC,OAAe;IAC9C,IAAI,iDAAiD,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,kBAAkB,CAAC;IAC/F,IAAI,2EAA2E,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9F,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IACD,IAAI,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,iBAAiB,CAAC;IAC/E,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,+DAA+D;AAC/D,SAAgB,cAAc,CAAC,OAAe;IAC5C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,QAAQ,KAAK,kBAAkB,EAAE,CAAC;QACpC,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC;QACzB,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjB,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,CAAC,QAAQ,CAAC,CAAC;IACjB,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,4EAA4E;AAC5E,SAAgB,iBAAiB,CAAC,QAA0B;IAC1D,IAAI,QAAQ,KAAK,kBAAkB,EAAE,CAAC;QACpC,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,CAAC,QAAQ,CAAC,CAAC;AACnB,CAAC;AAED,SAAgB,cAAc;IAC5B,MAAM,IAAI,GAAuB;QAC/B,kBAAkB;QAClB,iBAAiB;QACjB,iBAAiB;QACjB,gBAAgB;QAChB,gBAAgB;KACjB,CAAC;IACF,kFAAkF;IAClF,gEAAgE;IAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC;IACxF,OAAO;QACL,UAAU,EAAE,EAAE,GAAG,KAAK,CAAC,UAAU,EAAE;QACnC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,gBAAgB,EAAE,QAAQ;KAC3B,CAAC;AACJ,CAAC"}

package/dist/commands/Command.d.ts

@@ -67,6 +67,11 @@ export declare abstract class BaseCommand implements Command {
      * Create a failure result
      */
     protected failure(error: Error | string, data?: unknown): CommandResult;
+    /**
+     * Attach an explicit process exit code (batch/CI commands: a partial run and a
+     * failed run are different outcomes for a supervisor).
+     */
+    protected withExitCode(result: CommandResult, exitCode: number): CommandResult;
     /**
      * Check if command name or alias matches
      */

package/dist/commands/Command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Command.d.ts","sourceRoot":"","sources":["../../src/commands/Command.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AACvF,OAAO,EAAE,eAAe,EAAoB,MAAM,YAAY,CAAC;AAE/D;;GAEG;AACH,MAAM,WAAW,OAAO;IACtB;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B;;;OAGG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IAEjC;;OAEG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAE5B;;OAEG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC;IAEpC;;;;;OAKG;IACH,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAE5E;;;;OAIG;IACH,QAAQ,CAAC,CAAC,IAAI,EAAE,WAAW,GAAG,gBAAgB,CAAC;IAE/C;;;OAGG;IACH,QAAQ,CAAC,IAAI,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,8BAAsB,WAAY,YAAW,OAAO;IAClD,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAQ;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC;IAEpC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC;IAEpF,QAAQ,CAAC,CAAC,IAAI,EAAE,WAAW,GAAG,gBAAgB;IAI9C,QAAQ,CAAC,IAAI,MAAM;IAInB;;OAEG;IACH,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,aAAa;IAIlE;;OAEG;IACH,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,aAAa;IAKvE;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAU9B;;OAEG;IACH,WAAW,IAAI,eAAe;CAG/B"}
+{"version":3,"file":"Command.d.ts","sourceRoot":"","sources":["../../src/commands/Command.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AACvF,OAAO,EAAE,eAAe,EAAoB,MAAM,YAAY,CAAC;AAE/D;;GAEG;AACH,MAAM,WAAW,OAAO;IACtB;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B;;;OAGG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IAEjC;;OAEG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAE5B;;OAEG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC;IAEpC;;;;;OAKG;IACH,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAE5E;;;;OAIG;IACH,QAAQ,CAAC,CAAC,IAAI,EAAE,WAAW,GAAG,gBAAgB,CAAC;IAE/C;;;OAGG;IACH,QAAQ,CAAC,IAAI,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,8BAAsB,WAAY,YAAW,OAAO;IAClD,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAQ;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,eAAe,CAAC;IAEpC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC;IAEpF,QAAQ,CAAC,CAAC,IAAI,EAAE,WAAW,GAAG,gBAAgB;IAI9C,QAAQ,CAAC,IAAI,MAAM;IAInB;;OAEG;IACH,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,aAAa;IAIlE;;OAEG;IACH,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,aAAa;IAKvE;;;OAGG;IACH,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,GAAG,aAAa;IAI9E;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAU9B;;OAEG;IACH,WAAW,IAAI,eAAe;CAG/B"}

package/dist/commands/Command.js

@@ -31,6 +31,13 @@ class BaseCommand {
         const errorObj = error instanceof Error ? error : new Error(error);
         return { success: false, error: errorObj, data };
     }
+    /**
+     * Attach an explicit process exit code (batch/CI commands: a partial run and a
+     * failed run are different outcomes for a supervisor).
+     */
+    withExitCode(result, exitCode) {
+        return { ...result, exitCode };
+    }
     /**
      * Check if command name or alias matches
      */

package/dist/commands/Command.js.map

@@ -1 +1 @@
-{"version":3,"file":"Command.js","sourceRoot":"","sources":["../../src/commands/Command.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAGH,yCAA+D;AAsD/D;;GAEG;AACH,MAAsB,WAAW;IAGtB,OAAO,CAAY;IACnB,aAAa,GAAY,IAAI,CAAC;IAC9B,QAAQ,CAAmB;IAIpC,QAAQ,CAAE,IAAiB;QACzB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACrC,CAAC;IAED,QAAQ;QACN,OAAO,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;IAC7C,CAAC;IAED;;OAEG;IACO,OAAO,CAAC,OAAgB,EAAE,IAAc;QAChD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IAED;;OAEG;IACO,OAAO,CAAC,KAAqB,EAAE,IAAc;QACrD,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;QACnE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAAY;QAClB,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,IAAI,2BAAgB,CAAC;IAC3C,CAAC;CACF;AAnDD,kCAmDC"}
+{"version":3,"file":"Command.js","sourceRoot":"","sources":["../../src/commands/Command.ts"],"names":[],"mappings":";AAAA;;GAEG;;;AAGH,yCAA+D;AAsD/D;;GAEG;AACH,MAAsB,WAAW;IAGtB,OAAO,CAAY;IACnB,aAAa,GAAY,IAAI,CAAC;IAC9B,QAAQ,CAAmB;IAIpC,QAAQ,CAAE,IAAiB;QACzB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACrC,CAAC;IAED,QAAQ;QACN,OAAO,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;IAC7C,CAAC;IAED;;OAEG;IACO,OAAO,CAAC,OAAgB,EAAE,IAAc;QAChD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IAED;;OAEG;IACO,OAAO,CAAC,KAAqB,EAAE,IAAc;QACrD,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;QACnE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACnD,CAAC;IAED;;;OAGG;IACO,YAAY,CAAC,MAAqB,EAAE,QAAgB;QAC5D,OAAO,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,IAAY;QAClB,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,IAAI,2BAAgB,CAAC;IAC3C,CAAC;CACF;AA3DD,kCA2DC"}

package/dist/commands/ExecuteSlotCommand.d.ts

@@ -0,0 +1,37 @@
+/**
+ * execute-slot: run ONE canonical occurrence as a disposable batch job.
+ *
+ * This is the execution plane of the serverless production architecture. The
+ * control plane has already decided *which* occurrence is due and hands the runner
+ * its canonical identity; the runner never re-derives "what should run today" and
+ * never opens a long-lived daemon:
+ *
+ *   control plane → workflow_dispatch(slot_id, schedule_id, occurrence_at, ...)
+ *     → this command runs exactly that slot's targets once
+ *     → writes one machine-readable result document
+ *     → exits with a status-bearing code
+ *
+ * Deliberately NOT `pixivflow scheduler`: no cron, no slots, no leases, no local
+ * ledger requirement. Duplicate history still comes from the local database when
+ * one is present, and the control plane owns cross-runner duplicate state.
+ */
+import { BaseCommand } from './Command';
+import { CommandCategory } from './metadata';
+import { CommandContext, CommandArgs, CommandResult } from './types';
+export declare class ExecuteSlotCommand extends BaseCommand {
+    readonly name = "execute-slot";
+    readonly description = "Execute one canonical occurrence once (batch/CI execution plane)";
+    readonly aliases: string[];
+    readonly metadata: {
+        category: CommandCategory;
+        requiresAuth: boolean;
+        longRunning: boolean;
+    };
+    validate(args: CommandArgs): {
+        valid: boolean;
+        errors: string[];
+    };
+    execute(context: CommandContext, args: CommandArgs): Promise<CommandResult>;
+    getUsage(): string;
+}
+//# sourceMappingURL=ExecuteSlotCommand.d.ts.map

package/dist/commands/ExecuteSlotCommand.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecuteSlotCommand.d.ts","sourceRoot":"","sources":["../../src/commands/ExecuteSlotCommand.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAiCrE,qBAAa,kBAAmB,SAAQ,WAAW;IACjD,QAAQ,CAAC,IAAI,kBAAkB;IAC/B,QAAQ,CAAC,WAAW,sEAAsE;IAC1F,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,CAAa;IACvC,QAAQ,CAAC,QAAQ;;;;MAIf;IAEF,QAAQ,CAAC,IAAI,EAAE,WAAW;;;;IAqBpB,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,CAAC;IA+IjF,QAAQ,IAAI,MAAM;CAqCnB"}