typekro 0.28.0 → 0.29.0

package/dist/core/deployment/kro-readiness.d.ts

@@ -38,6 +38,8 @@ export interface KroReadinessOptions {
     pollInterval?: number;
     /** Optional context for error messages (e.g. factory name). */
     factoryContext?: string;
+    /** Signal for cancelling the readiness operation. */
+    abortSignal?: AbortSignal;
 }
 /**
  * Wait for a Kro custom resource instance to become ready.

package/dist/core/deployment/kro-readiness.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kro-readiness.d.ts","sourceRoot":"","sources":["../../../src/core/deployment/kro-readiness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,KAAK,GAAG,MAAM,yBAAyB,CAAC;AAMpD,kDAAkD;AAClD,MAAM,WAAW,mBAAmB;IAClC,6CAA6C;IAC7C,YAAY,EAAE,MAAM,CAAC;IAErB,+BAA+B;IAC/B,OAAO,EAAE,MAAM,CAAC;IAEhB,uEAAuE;IACvE,MAAM,EAAE,GAAG,CAAC,mBAAmB,CAAC;IAEhC,+DAA+D;IAC/D,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,CAAC;IAEvC,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAC;IAElB,yEAAyE;IACzE,UAAU,EAAE,MAAM,CAAC;IAEnB,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IAEb;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,+DAA+D;IAC/D,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,uBAAuB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAwNzF"}
+{"version":3,"file":"kro-readiness.d.ts","sourceRoot":"","sources":["../../../src/core/deployment/kro-readiness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,KAAK,GAAG,MAAM,yBAAyB,CAAC;AAWpD,kDAAkD;AAClD,MAAM,WAAW,mBAAmB;IAClC,6CAA6C;IAC7C,YAAY,EAAE,MAAM,CAAC;IAErB,+BAA+B;IAC/B,OAAO,EAAE,MAAM,CAAC;IAEhB,uEAAuE;IACvE,MAAM,EAAE,GAAG,CAAC,mBAAmB,CAAC;IAEhC,+DAA+D;IAC/D,gBAAgB,EAAE,GAAG,CAAC,gBAAgB,CAAC;IAEvC,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAC;IAElB,yEAAyE;IACzE,UAAU,EAAE,MAAM,CAAC;IAEnB,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAC;IAEb;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAC;IAEhB;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,+DAA+D;IAC/D,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB,qDAAqD;IACrD,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAkBD;;;;;;;;;;;GAWG;AACH,wBAAsB,uBAAuB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkQzF"}

package/dist/core/deployment/kro-readiness.js

@@ -9,9 +9,26 @@
  * - Kro conditions (InstanceSynced for v0.3.x, Ready for v0.8.x)
  * - Custom status fields populated from the RGD status schema
  */
-import { DEFAULT_FAST_POLL_INTERVAL, DEFAULT_POLL_INTERVAL } from '../config/defaults.js';
+import { DEFAULT_FAST_POLL_INTERVAL, DEFAULT_HTTP_READ_TIMEOUT, DEFAULT_POLL_INTERVAL, } from '../config/defaults.js';
 import { CRDInstanceError, DeploymentTimeoutError, ensureError } from '../errors.js';
 import { getComponentLogger } from '../logging/index.js';
+import { callWithTimeout, PollTimeoutError, perCallTimeout } from './poll-timeout.js';
+function abortableDelay(ms, abortSignal) {
+    abortSignal?.throwIfAborted();
+    if (!abortSignal)
+        return new Promise((resolve) => setTimeout(resolve, ms));
+    return new Promise((resolve, reject) => {
+        const onAbort = () => {
+            clearTimeout(timeout);
+            reject(abortSignal.reason ?? new DOMException('The operation was aborted', 'AbortError'));
+        };
+        const timeout = setTimeout(() => {
+            abortSignal.removeEventListener('abort', onAbort);
+            resolve();
+        }, ms);
+        abortSignal.addEventListener('abort', onAbort, { once: true });
+    });
+}
 /**
  * Wait for a Kro custom resource instance to become ready.
  *
@@ -25,27 +42,34 @@ import { getComponentLogger } from '../logging/index.js';
  * @throws {DeploymentTimeoutError} if the timeout is exceeded
  */
 export async function waitForKroInstanceReady(options) {
-    const { instanceName, timeout, k8sApi, customObjectsApi, namespace, apiVersion, kind, rgdName, pollInterval = DEFAULT_FAST_POLL_INTERVAL, factoryContext, } = options;
+    const { instanceName, timeout, k8sApi, customObjectsApi, namespace, apiVersion, kind, rgdName, pollInterval = DEFAULT_FAST_POLL_INTERVAL, factoryContext, abortSignal, } = options;
     const logger = getComponentLogger('kro-readiness');
     const readinessLogger = logger.child({ instanceName, rgdName });
     const startTime = Date.now();
     while (Date.now() - startTime < timeout) {
+        abortSignal?.throwIfAborted();
         try {
-            const response = await k8sApi.read({
+            // Bound the read so a wedged/expired kubeconfig exec credential rejects (and is re-thrown below)
+            // instead of hanging the poll forever — see poll-timeout.ts. A ≤0 budget means the deadline is
+            // spent: break to the overall DeploymentTimeoutError below (NOT a per-call PollTimeoutError).
+            const readTimeout = perCallTimeout(timeout - (Date.now() - startTime), DEFAULT_HTTP_READ_TIMEOUT);
+            if (readTimeout <= 0)
+                break;
+            const response = await callWithTimeout(() => k8sApi.read({
                 apiVersion,
                 kind,
                 metadata: {
                     name: instanceName,
                     namespace,
                 },
-            });
+            }), readTimeout, `read ${kind}/${instanceName}`, abortSignal);
             // In the new API, methods return objects directly (no .body wrapper)
             const instance = response;
             // Kro-specific readiness logic
             const status = instance.status;
             if (!status) {
                 readinessLogger.debug('No status found yet, continuing to wait', { instanceName });
-                await new Promise((resolve) => setTimeout(resolve, DEFAULT_POLL_INTERVAL));
+                await abortableDelay(DEFAULT_POLL_INTERVAL, abortSignal);
                 continue;
             }
             const state = status.state;
@@ -68,12 +92,17 @@ export async function waitForKroInstanceReady(options) {
             let expectedCustomStatusFields = false;
             let expectedStatusKeys = [];
             try {
-                const rgdResponse = await customObjectsApi.getClusterCustomObject({
+                const rgdReadTimeout = perCallTimeout(timeout - (Date.now() - startTime), DEFAULT_HTTP_READ_TIMEOUT);
+                // Deadline spent mid-iteration: break to the overall DeploymentTimeoutError rather than starting
+                // a doomed read (which would surface a misleading per-call PollTimeoutError).
+                if (rgdReadTimeout <= 0)
+                    break;
+                const rgdResponse = await callWithTimeout(() => customObjectsApi.getClusterCustomObject({
                     group: 'kro.run',
                     version: 'v1alpha1',
                     plural: 'resourcegraphdefinitions',
                     name: rgdName,
-                });
+                }), rgdReadTimeout, `read ResourceGraphDefinition/${rgdName}`, abortSignal);
                 const rgd = rgdResponse;
                 const rgdStatusSchema = rgd.spec?.schema?.status ?? {};
                 expectedStatusKeys = Object.keys(rgdStatusSchema).filter((key) => !basicKroFields.includes(key));
@@ -85,6 +114,13 @@ export async function waitForKroInstanceReady(options) {
                 });
             }
             catch (error) {
+                // A per-call TIMEOUT (wedged/expired credential) is NOT a fetchable-RGD failure — do not fall
+                // through to the permissive path, which would let an ACTIVE/synced instance be declared ready
+                // WITHOUT validating expected status fields (and after the deadline). Surface it so the outer
+                // catch re-throws it (fail fast).
+                if (error instanceof PollTimeoutError) {
+                    throw error;
+                }
                 readinessLogger.warn('Could not fetch ResourceGraphDefinition for status schema check', {
                     rgdName,
                     error: ensureError(error).message,
@@ -127,6 +163,12 @@ export async function waitForKroInstanceReady(options) {
                 projectedStatusIsCurrent &&
                 (!hasReadyField || statusReadyField === true);
             if (isReady) {
+                // Re-check the deadline: an API call earlier in THIS iteration may have consumed the remaining
+                // budget (e.g. a slow/bounded read), so an "isReady" reached past the deadline must still time
+                // out rather than silently succeed late.
+                if (Date.now() - startTime >= timeout) {
+                    break;
+                }
                 readinessLogger.info('Kro instance is ready', {
                     instanceName,
                     hasCustomStatusFields,
@@ -171,7 +213,7 @@ export async function waitForKroInstanceReady(options) {
             readinessLogger.debug('Instance not found yet, continuing to wait', { instanceName });
         }
         // Wait before checking again
-        await new Promise((resolve) => setTimeout(resolve, pollInterval));
+        await abortableDelay(pollInterval, abortSignal);
     }
     const elapsed = Date.now() - startTime;
     throw new DeploymentTimeoutError(`Timeout waiting for Kro instance ${instanceName} to be ready after ${elapsed}ms (timeout: ${timeout}ms).${factoryContext ? ` This usually means the Kro controller is not running or the RGD deployment failed. Check Kro controller logs: kubectl logs -n kro-system deployment/kro` : ''}`, kind, instanceName, timeout, 'instance-readiness');

package/dist/core/deployment/kro-readiness.js.map

@@ -1 +1 @@
-{"version":3,"file":"kro-readiness.js","sourceRoot":"","sources":["../../../src/core/deployment/kro-readiness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC1F,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AA0CzD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAA4B;IACxE,MAAM,EACJ,YAAY,EACZ,OAAO,EACP,MAAM,EACN,gBAAgB,EAChB,SAAS,EACT,UAAU,EACV,IAAI,EACJ,OAAO,EACP,YAAY,GAAG,0BAA0B,EACzC,cAAc,GACf,GAAG,OAAO,CAAC;IAEZ,MAAM,MAAM,GAAG,kBAAkB,CAAC,eAAe,CAAC,CAAC;IACnD,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,OAAO,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC;gBACjC,UAAU;gBACV,IAAI;gBACJ,QAAQ,EAAE;oBACR,IAAI,EAAE,YAAY;oBAClB,SAAS;iBACV;aACF,CAAC,CAAC;YAEH,qEAAqE;YACrE,MAAM,QAAQ,GAAG,QAehB,CAAC;YAEF,+BAA+B;YAC/B,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,eAAe,CAAC,KAAK,CAAC,yCAAyC,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;gBACnF,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC,CAAC;gBAC3E,SAAS;YACX,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;YAC3B,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;YAC3C,yEAAyE;YACzE,MAAM,eAAe,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC;YAC5E,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;YAClE,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;YACjD,MAAM,kBAAkB,GAAG,CAAC,SAAkD,EAAE,EAAE,CAChF,SAAS,EAAE,MAAM,KAAK,MAAM;gBAC5B,CAAC,UAAU,KAAK,SAAS;oBACvB,SAAS,CAAC,kBAAkB,KAAK,SAAS;oBAC1C,SAAS,CAAC,kBAAkB,IAAI,UAAU,CAAC,CAAC;YAEhD,6EAA6E;YAC7E,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,cAAc,GAAG,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YAC/C,MAAM,qBAAqB,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YAEtF,MAAM,QAAQ,GAAG,KAAK,KAAK,QAAQ,CAAC;YACpC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,eAAe,CAAC,IAAI,kBAAkB,CAAC,cAAc,CAAC,CAAC;YAE3F,kFAAkF;YAClF,IAAI,0BAA0B,GAAG,KAAK,CAAC;YACvC,IAAI,kBAAkB,GAAa,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,sBAAsB,CAAC;oBAChE,KAAK,EAAE,SAAS;oBAChB,OAAO,EAAE,UAAU;oBACnB,MAAM,EAAE,0BAA0B;oBAClC,IAAI,EAAE,OAAO;iBACd,CAAC,CAAC;gBACH,MAAM,GAAG,GAAG,WAA0B,CAAC;gBACvC,MAAM,eAAe,GAAG,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,CAAC;gBACvD,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,CACtD,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CACvC,CAAC;gBACF,0BAA0B,GAAG,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC;gBAE3D,eAAe,CAAC,KAAK,CAAC,6CAA6C,EAAE;oBACnE,OAAO;oBACP,aAAa,EAAE,kBAAkB;oBACjC,0BAA0B;iBAC3B,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAc,EAAE,CAAC;gBACxB,eAAe,CAAC,IAAI,CAAC,iEAAiE,EAAE;oBACtF,OAAO;oBACP,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,OAAO;iBAClC,CAAC,CAAC;gBACH,gGAAgG;gBAChG,0BAA0B,GAAG,KAAK,CAAC;YACrC,CAAC;YAED,eAAe,CAAC,KAAK,CAAC,2BAA2B,EAAE;gBACjD,YAAY;gBACZ,KAAK;gBACL,QAAQ;gBACR,QAAQ;gBACR,qBAAqB;gBACrB,0BAA0B;gBAC1B,kBAAkB;gBAClB,UAAU;gBACV,UAAU;gBACV,wBAAwB,EAAE,eAAe,EAAE,kBAAkB;gBAC7D,uBAAuB,EAAE,cAAc,EAAE,kBAAkB;aAC5D,CAAC,CAAC;YAEH,2EAA2E;YAC3E,4EAA4E;YAC5E,wDAAwD;YACxD,MAAM,gBAAgB,GAAG,MAAM,CAAC,KAAK,CAAC;YACtC,MAAM,aAAa,GAAG,OAAO,gBAAgB,KAAK,SAAS,CAAC;YAC5D,MAAM,uBAAuB,GAC3B,kBAAkB,CAAC,MAAM,KAAK,CAAC;gBAC/B,kBAAkB,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;YAChE,oEAAoE;YACpE,0EAA0E;YAC1E,sEAAsE;YACtE,qEAAqE;YACrE,2DAA2D;YAC3D,MAAM,2BAA2B,GAAG,MAAM,CAAC,kBAAkB,CAAC;YAC9D,MAAM,wBAAwB,GAC5B,2BAA2B,KAAK,SAAS;gBACzC,UAAU,KAAK,SAAS;gBACxB,2BAA2B,IAAI,UAAU,CAAC;YAC5C,MAAM,OAAO,GACX,QAAQ;gBACR,QAAQ;gBACR,uBAAuB;gBACvB,wBAAwB;gBACxB,CAAC,CAAC,aAAa,IAAI,gBAAgB,KAAK,IAAI,CAAC,CAAC;YAEhD,IAAI,OAAO,EAAE,CAAC;gBACZ,eAAe,CAAC,IAAI,CAAC,uBAAuB,EAAE;oBAC5C,YAAY;oBACZ,qBAAqB;oBACrB,0BAA0B;oBAC1B,kBAAkB;iBACnB,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,2EAA2E;YAC3E,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;gBAC5C,MAAM,eAAe,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;gBACrE,MAAM,YAAY,GAAG,eAAe,EAAE,OAAO,IAAI,eAAe,CAAC;gBACjE,MAAM,IAAI,gBAAgB,CACxB,yCAAyC,KAAK,MAAM,YAAY,EAAE,EAClE,UAAU,EACV,IAAI,EACJ,YAAY,EACZ,UAAU,CACX,CAAC;YACJ,CAAC;YAED,eAAe,CAAC,KAAK,CAAC,gDAAgD,EAAE;gBACtE,YAAY;gBACZ,KAAK;gBACL,QAAQ;gBACR,qBAAqB;gBACrB,kBAAkB;gBAClB,2BAA2B;gBAC3B,wBAAwB;aACzB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,kCAAkC;YAClC,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;gBACtC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,QAAQ,GAAG,KAKhB,CAAC;YACF,MAAM,SAAS,GACb,QAAQ,CAAC,UAAU;gBACnB,QAAQ,CAAC,IAAI,EAAE,IAAI;gBACnB,CAAC,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAClE,MAAM,UAAU,GACd,SAAS,KAAK,GAAG;gBACjB,QAAQ,CAAC,IAAI,EAAE,MAAM,KAAK,UAAU;gBACpC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,YAAY,CAAC,KAAK,IAAI;gBACjD,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC;YAClD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,KAAK,CAAC;YACd,CAAC;YACD,2CAA2C;YAC3C,eAAe,CAAC,KAAK,CAAC,4CAA4C,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QACxF,CAAC;QAED,6BAA6B;QAC7B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC;IACpE,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACvC,MAAM,IAAI,sBAAsB,CAC9B,oCAAoC,YAAY,sBAAsB,OAAO,gBAAgB,OAAO,OAAO,cAAc,CAAC,CAAC,CAAC,0JAA0J,CAAC,CAAC,CAAC,EAAE,EAAE,EAC7R,IAAI,EACJ,YAAY,EACZ,OAAO,EACP,oBAAoB,CACrB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"kro-readiness.js","sourceRoot":"","sources":["../../../src/core/deployment/kro-readiness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EACL,0BAA0B,EAC1B,yBAAyB,EACzB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AA4CtF,SAAS,cAAc,CAAC,EAAU,EAAE,WAAyB;IAC3D,WAAW,EAAE,cAAc,EAAE,CAAC;IAC9B,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,CAAC,WAAW,CAAC,MAAM,IAAI,IAAI,YAAY,CAAC,2BAA2B,EAAE,YAAY,CAAC,CAAC,CAAC;QAC5F,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,WAAW,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAClD,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,WAAW,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAA4B;IACxE,MAAM,EACJ,YAAY,EACZ,OAAO,EACP,MAAM,EACN,gBAAgB,EAChB,SAAS,EACT,UAAU,EACV,IAAI,EACJ,OAAO,EACP,YAAY,GAAG,0BAA0B,EACzC,cAAc,EACd,WAAW,GACZ,GAAG,OAAO,CAAC;IAEZ,MAAM,MAAM,GAAG,kBAAkB,CAAC,eAAe,CAAC,CAAC;IACnD,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,OAAO,EAAE,CAAC;QACxC,WAAW,EAAE,cAAc,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,iGAAiG;YACjG,+FAA+F;YAC/F,8FAA8F;YAC9F,MAAM,WAAW,GAAG,cAAc,CAChC,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,EAClC,yBAAyB,CAC1B,CAAC;YACF,IAAI,WAAW,IAAI,CAAC;gBAAE,MAAM;YAC5B,MAAM,QAAQ,GAAG,MAAM,eAAe,CACpC,GAAG,EAAE,CACH,MAAM,CAAC,IAAI,CAAC;gBACV,UAAU;gBACV,IAAI;gBACJ,QAAQ,EAAE;oBACR,IAAI,EAAE,YAAY;oBAClB,SAAS;iBACV;aACF,CAAC,EACJ,WAAW,EACX,QAAQ,IAAI,IAAI,YAAY,EAAE,EAC9B,WAAW,CACZ,CAAC;YAEF,qEAAqE;YACrE,MAAM,QAAQ,GAAG,QAehB,CAAC;YAEF,+BAA+B;YAC/B,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,eAAe,CAAC,KAAK,CAAC,yCAAyC,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;gBACnF,MAAM,cAAc,CAAC,qBAAqB,EAAE,WAAW,CAAC,CAAC;gBACzD,SAAS;YACX,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;YAC3B,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;YAC3C,yEAAyE;YACzE,MAAM,eAAe,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,gBAAgB,CAAC,CAAC;YAC5E,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;YAClE,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;YACjD,MAAM,kBAAkB,GAAG,CAAC,SAAkD,EAAE,EAAE,CAChF,SAAS,EAAE,MAAM,KAAK,MAAM;gBAC5B,CAAC,UAAU,KAAK,SAAS;oBACvB,SAAS,CAAC,kBAAkB,KAAK,SAAS;oBAC1C,SAAS,CAAC,kBAAkB,IAAI,UAAU,CAAC,CAAC;YAEhD,6EAA6E;YAC7E,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,cAAc,GAAG,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YAC/C,MAAM,qBAAqB,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YAEtF,MAAM,QAAQ,GAAG,KAAK,KAAK,QAAQ,CAAC;YACpC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,eAAe,CAAC,IAAI,kBAAkB,CAAC,cAAc,CAAC,CAAC;YAE3F,kFAAkF;YAClF,IAAI,0BAA0B,GAAG,KAAK,CAAC;YACvC,IAAI,kBAAkB,GAAa,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,cAAc,GAAG,cAAc,CACnC,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,EAClC,yBAAyB,CAC1B,CAAC;gBACF,iGAAiG;gBACjG,8EAA8E;gBAC9E,IAAI,cAAc,IAAI,CAAC;oBAAE,MAAM;gBAC/B,MAAM,WAAW,GAAG,MAAM,eAAe,CACvC,GAAG,EAAE,CACH,gBAAgB,CAAC,sBAAsB,CAAC;oBACtC,KAAK,EAAE,SAAS;oBAChB,OAAO,EAAE,UAAU;oBACnB,MAAM,EAAE,0BAA0B;oBAClC,IAAI,EAAE,OAAO;iBACd,CAAC,EACJ,cAAc,EACd,gCAAgC,OAAO,EAAE,EACzC,WAAW,CACZ,CAAC;gBACF,MAAM,GAAG,GAAG,WAA0B,CAAC;gBACvC,MAAM,eAAe,GAAG,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,CAAC;gBACvD,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,CACtD,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,CACvC,CAAC;gBACF,0BAA0B,GAAG,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC;gBAE3D,eAAe,CAAC,KAAK,CAAC,6CAA6C,EAAE;oBACnE,OAAO;oBACP,aAAa,EAAE,kBAAkB;oBACjC,0BAA0B;iBAC3B,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAc,EAAE,CAAC;gBACxB,8FAA8F;gBAC9F,8FAA8F;gBAC9F,8FAA8F;gBAC9F,kCAAkC;gBAClC,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;oBACtC,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,eAAe,CAAC,IAAI,CAAC,iEAAiE,EAAE;oBACtF,OAAO;oBACP,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,OAAO;iBAClC,CAAC,CAAC;gBACH,gGAAgG;gBAChG,0BAA0B,GAAG,KAAK,CAAC;YACrC,CAAC;YAED,eAAe,CAAC,KAAK,CAAC,2BAA2B,EAAE;gBACjD,YAAY;gBACZ,KAAK;gBACL,QAAQ;gBACR,QAAQ;gBACR,qBAAqB;gBACrB,0BAA0B;gBAC1B,kBAAkB;gBAClB,UAAU;gBACV,UAAU;gBACV,wBAAwB,EAAE,eAAe,EAAE,kBAAkB;gBAC7D,uBAAuB,EAAE,cAAc,EAAE,kBAAkB;aAC5D,CAAC,CAAC;YAEH,2EAA2E;YAC3E,4EAA4E;YAC5E,wDAAwD;YACxD,MAAM,gBAAgB,GAAG,MAAM,CAAC,KAAK,CAAC;YACtC,MAAM,aAAa,GAAG,OAAO,gBAAgB,KAAK,SAAS,CAAC;YAC5D,MAAM,uBAAuB,GAC3B,kBAAkB,CAAC,MAAM,KAAK,CAAC;gBAC/B,kBAAkB,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;YAChE,oEAAoE;YACpE,0EAA0E;YAC1E,sEAAsE;YACtE,qEAAqE;YACrE,2DAA2D;YAC3D,MAAM,2BAA2B,GAAG,MAAM,CAAC,kBAAkB,CAAC;YAC9D,MAAM,wBAAwB,GAC5B,2BAA2B,KAAK,SAAS;gBACzC,UAAU,KAAK,SAAS;gBACxB,2BAA2B,IAAI,UAAU,CAAC;YAC5C,MAAM,OAAO,GACX,QAAQ;gBACR,QAAQ;gBACR,uBAAuB;gBACvB,wBAAwB;gBACxB,CAAC,CAAC,aAAa,IAAI,gBAAgB,KAAK,IAAI,CAAC,CAAC;YAEhD,IAAI,OAAO,EAAE,CAAC;gBACZ,+FAA+F;gBAC/F,+FAA+F;gBAC/F,yCAAyC;gBACzC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,IAAI,OAAO,EAAE,CAAC;oBACtC,MAAM;gBACR,CAAC;gBACD,eAAe,CAAC,IAAI,CAAC,uBAAuB,EAAE;oBAC5C,YAAY;oBACZ,qBAAqB;oBACrB,0BAA0B;oBAC1B,kBAAkB;iBACnB,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,2EAA2E;YAC3E,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;gBAC5C,MAAM,eAAe,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;gBACrE,MAAM,YAAY,GAAG,eAAe,EAAE,OAAO,IAAI,eAAe,CAAC;gBACjE,MAAM,IAAI,gBAAgB,CACxB,yCAAyC,KAAK,MAAM,YAAY,EAAE,EAClE,UAAU,EACV,IAAI,EACJ,YAAY,EACZ,UAAU,CACX,CAAC;YACJ,CAAC;YAED,eAAe,CAAC,KAAK,CAAC,gDAAgD,EAAE;gBACtE,YAAY;gBACZ,KAAK;gBACL,QAAQ;gBACR,qBAAqB;gBACrB,kBAAkB;gBAClB,2BAA2B;gBAC3B,wBAAwB;aACzB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,kCAAkC;YAClC,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;gBACtC,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,QAAQ,GAAG,KAKhB,CAAC;YACF,MAAM,SAAS,GACb,QAAQ,CAAC,UAAU;gBACnB,QAAQ,CAAC,IAAI,EAAE,IAAI;gBACnB,CAAC,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAClE,MAAM,UAAU,GACd,SAAS,KAAK,GAAG;gBACjB,QAAQ,CAAC,IAAI,EAAE,MAAM,KAAK,UAAU;gBACpC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,YAAY,CAAC,KAAK,IAAI;gBACjD,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC;YAClD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,MAAM,KAAK,CAAC;YACd,CAAC;YACD,2CAA2C;YAC3C,eAAe,CAAC,KAAK,CAAC,4CAA4C,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QACxF,CAAC;QAED,6BAA6B;QAC7B,MAAM,cAAc,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACvC,MAAM,IAAI,sBAAsB,CAC9B,oCAAoC,YAAY,sBAAsB,OAAO,gBAAgB,OAAO,OAAO,cAAc,CAAC,CAAC,CAAC,0JAA0J,CAAC,CAAC,CAAC,EAAE,EAAE,EAC7R,IAAI,EACJ,YAAY,EACZ,OAAO,EACP,oBAAoB,CACrB,CAAC;AACJ,CAAC"}

package/dist/core/deployment/poll-timeout.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Per-call timeout for readiness-poll Kubernetes API requests.
+ *
+ * Readiness polls loop as `while (Date.now() - startTime < timeout) { await k8sApi.read(...) }`. The
+ * deadline is only re-checked between iterations, so it relies on each `await` eventually settling. When
+ * the kubeconfig's exec credential WEDGES — e.g. `aws eks get-token` hangs, or the AWS/SSO session
+ * expired mid-deploy so the auth plugin never returns — the awaited request never resolves OR rejects,
+ * the loop never re-evaluates its deadline, and the whole deploy hangs SILENTLY (observed multi-hour).
+ *
+ * Bounding each call converts that wedge into a rejection, so the poll's existing error handling runs and
+ * the configured `timeout` is honored: a failed/expired credential is not a transient "not ready yet" —
+ * it counts against the deadline (or fails fast) instead of hanging forever.
+ *
+ * SCOPE / LIMITATION: this bounds the caller's `await` (so the poll and the deploy terminate). It does
+ * NOT cancel the in-flight request or kill a wedged exec-auth subprocess: `@kubernetes/client-node`'s
+ * `KubernetesObjectApi.read` does not thread an `AbortSignal` to its fetch, and its `ExecAuth` spawns the
+ * credential process (`child_process.spawn`) with no cancellation hook. A wedged subprocess can therefore
+ * keep the Node process alive until it exits or the process is terminated. The durable cure for the
+ * exec-auth failure mode is to avoid per-request exec auth during polling (e.g. a pre-minted bearer token
+ * in the kubeconfig), so no credential subprocess is spawned in the first place.
+ */
+/** Thrown when a readiness-poll API call exceeds its per-call budget (distinguishable so callers can fail fast vs. retry). */
+export declare class PollTimeoutError extends Error {
+    readonly timeoutMs: number;
+    constructor(label: string, timeoutMs: number);
+}
+/**
+ * Run `op`, rejecting with {@link PollTimeoutError} if it hasn't settled within `timeoutMs`.
+ *
+ * PRECONDITION: `timeoutMs` must be positive — callers pass a per-call budget derived from the poll's
+ * REMAINING deadline (see {@link perCallTimeout}) and must handle an exhausted (≤0) budget themselves by
+ * exiting their loop and throwing their own overall-timeout error. A `PollTimeoutError` therefore always
+ * means "an operation that actually started did not return in time" (a wedged call), never "the overall
+ * poll deadline had already elapsed" — the two are distinct and must not be conflated.
+ */
+export declare function callWithTimeout<T>(op: () => Promise<T>, timeoutMs: number, label: string, abortSignal?: AbortSignal): Promise<T>;
+/**
+ * The per-call budget: the configured cap (HTTP read timeout), capped STRICTLY by the poll's remaining
+ * deadline so one call can never overshoot the overall `timeout`. Returns ≤ 0 when the deadline is
+ * already spent; callers MUST treat a ≤0 budget as "deadline reached" — exit the poll loop and throw the
+ * poll's own overall-timeout error — rather than starting a (doomed) call. Never hand a ≤0 value to
+ * {@link callWithTimeout}.
+ */
+export declare function perCallTimeout(remainingMs: number, capMs: number): number;
+//# sourceMappingURL=poll-timeout.d.ts.map

package/dist/core/deployment/poll-timeout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"poll-timeout.d.ts","sourceRoot":"","sources":["../../../src/core/deployment/poll-timeout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,8HAA8H;AAC9H,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBACf,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CAS7C;AAED;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CAAC,CAAC,EACrC,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAAC,CAAC,CAAC,CAuBZ;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAEzE"}

package/dist/core/deployment/poll-timeout.js

@@ -0,0 +1,78 @@
+/**
+ * Per-call timeout for readiness-poll Kubernetes API requests.
+ *
+ * Readiness polls loop as `while (Date.now() - startTime < timeout) { await k8sApi.read(...) }`. The
+ * deadline is only re-checked between iterations, so it relies on each `await` eventually settling. When
+ * the kubeconfig's exec credential WEDGES — e.g. `aws eks get-token` hangs, or the AWS/SSO session
+ * expired mid-deploy so the auth plugin never returns — the awaited request never resolves OR rejects,
+ * the loop never re-evaluates its deadline, and the whole deploy hangs SILENTLY (observed multi-hour).
+ *
+ * Bounding each call converts that wedge into a rejection, so the poll's existing error handling runs and
+ * the configured `timeout` is honored: a failed/expired credential is not a transient "not ready yet" —
+ * it counts against the deadline (or fails fast) instead of hanging forever.
+ *
+ * SCOPE / LIMITATION: this bounds the caller's `await` (so the poll and the deploy terminate). It does
+ * NOT cancel the in-flight request or kill a wedged exec-auth subprocess: `@kubernetes/client-node`'s
+ * `KubernetesObjectApi.read` does not thread an `AbortSignal` to its fetch, and its `ExecAuth` spawns the
+ * credential process (`child_process.spawn`) with no cancellation hook. A wedged subprocess can therefore
+ * keep the Node process alive until it exits or the process is terminated. The durable cure for the
+ * exec-auth failure mode is to avoid per-request exec auth during polling (e.g. a pre-minted bearer token
+ * in the kubeconfig), so no credential subprocess is spawned in the first place.
+ */
+/** Thrown when a readiness-poll API call exceeds its per-call budget (distinguishable so callers can fail fast vs. retry). */
+export class PollTimeoutError extends Error {
+    timeoutMs;
+    constructor(label, timeoutMs) {
+        super(`${label} exceeded its ${timeoutMs}ms request timeout — the Kubernetes API call did not return. ` +
+            `The usual cause is a wedged or expired kubeconfig exec credential (e.g. an AWS SSO/EKS token ` +
+            `that expired mid-deploy). Re-run with fresh credentials.`);
+        this.name = 'PollTimeoutError';
+        this.timeoutMs = timeoutMs;
+    }
+}
+/**
+ * Run `op`, rejecting with {@link PollTimeoutError} if it hasn't settled within `timeoutMs`.
+ *
+ * PRECONDITION: `timeoutMs` must be positive — callers pass a per-call budget derived from the poll's
+ * REMAINING deadline (see {@link perCallTimeout}) and must handle an exhausted (≤0) budget themselves by
+ * exiting their loop and throwing their own overall-timeout error. A `PollTimeoutError` therefore always
+ * means "an operation that actually started did not return in time" (a wedged call), never "the overall
+ * poll deadline had already elapsed" — the two are distinct and must not be conflated.
+ */
+export async function callWithTimeout(op, timeoutMs, label, abortSignal) {
+    let timer;
+    let detachAbort = () => undefined;
+    try {
+        abortSignal?.throwIfAborted();
+        const aborted = new Promise((_, reject) => {
+            if (!abortSignal)
+                return;
+            const onAbort = () => reject(abortSignal.reason ?? new DOMException('The operation was aborted', 'AbortError'));
+            abortSignal.addEventListener('abort', onAbort, { once: true });
+            detachAbort = () => abortSignal.removeEventListener('abort', onAbort);
+        });
+        return await Promise.race([
+            op(),
+            new Promise((_, reject) => {
+                timer = setTimeout(() => reject(new PollTimeoutError(label, timeoutMs)), timeoutMs);
+            }),
+            aborted,
+        ]);
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+        detachAbort();
+    }
+}
+/**
+ * The per-call budget: the configured cap (HTTP read timeout), capped STRICTLY by the poll's remaining
+ * deadline so one call can never overshoot the overall `timeout`. Returns ≤ 0 when the deadline is
+ * already spent; callers MUST treat a ≤0 budget as "deadline reached" — exit the poll loop and throw the
+ * poll's own overall-timeout error — rather than starting a (doomed) call. Never hand a ≤0 value to
+ * {@link callWithTimeout}.
+ */
+export function perCallTimeout(remainingMs, capMs) {
+    return Math.min(capMs, remainingMs);
+}
+//# sourceMappingURL=poll-timeout.js.map

package/dist/core/deployment/poll-timeout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"poll-timeout.js","sourceRoot":"","sources":["../../../src/core/deployment/poll-timeout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,8HAA8H;AAC9H,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAChC,SAAS,CAAS;IAC3B,YAAY,KAAa,EAAE,SAAiB;QAC1C,KAAK,CACH,GAAG,KAAK,iBAAiB,SAAS,+DAA+D;YAC/F,+FAA+F;YAC/F,0DAA0D,CAC7D,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,EAAoB,EACpB,SAAiB,EACjB,KAAa,EACb,WAAyB;IAEzB,IAAI,KAAgD,CAAC;IACrD,IAAI,WAAW,GAAG,GAAS,EAAE,CAAC,SAAS,CAAC;IACxC,IAAI,CAAC;QACH,WAAW,EAAE,cAAc,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;YAC/C,IAAI,CAAC,WAAW;gBAAE,OAAO;YACzB,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,MAAM,CAAC,WAAW,CAAC,MAAM,IAAI,IAAI,YAAY,CAAC,2BAA2B,EAAE,YAAY,CAAC,CAAC,CAAC;YAC5F,WAAW,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/D,WAAW,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,EAAE,EAAE;YACJ,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC/B,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YACtF,CAAC,CAAC;YACF,OAAO;SACR,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAC/B,WAAW,EAAE,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,WAAmB,EAAE,KAAa;IAC/D,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;AACtC,CAAC"}

package/dist/core/deployment/readiness.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"readiness.d.ts","sourceRoot":"","sources":["../../../src/core/deployment/readiness.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,KAAK,GAAG,MAAM,yBAAyB,CAAC;AAQpD,OAAO,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAmB,MAAM,wBAAwB,CAAC;AAClG,OAAO,KAAK,EACV,gBAAgB,EAChB,kBAAkB,EAEnB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGrD,qBAAa,wBAAwB;IAIvB,OAAO,CAAC,MAAM;IAH1B,OAAO,CAAC,eAAe,CAAC,CAAuC;IAC/D,OAAO,CAAC,WAAW,CAAC,CAAc;gBAEd,MAAM,EAAE,GAAG,CAAC,mBAAmB;IAEnD;;OAEG;IACH,kBAAkB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,gBAAgB,KAAK,IAAI,GAAG,IAAI;IAIxE;;OAEG;IACH,cAAc,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI;IAI9C;;OAEG;IACG,oBAAoB,CACxB,gBAAgB,EAAE,gBAAgB,EAClC,OAAO,EAAE,iBAAiB,EAC1B,SAAS,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,GAC1C,OAAO,CAAC,IAAI,CAAC;IAUhB;;OAEG;YACW,+BAA+B;IA4I7C;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAW1B;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAIjC;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAWzB;;;;OAIG;IACH,eAAe,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO;IAYtD;;OAEG;IACH,OAAO,CAAC,sBAAsB;CAoB/B"}
+{"version":3,"file":"readiness.d.ts","sourceRoot":"","sources":["../../../src/core/deployment/readiness.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,KAAK,GAAG,MAAM,yBAAyB,CAAC;AAUpD,OAAO,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAmB,MAAM,wBAAwB,CAAC;AAClG,OAAO,KAAK,EACV,gBAAgB,EAChB,kBAAkB,EAEnB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGrD,qBAAa,wBAAwB;IAIvB,OAAO,CAAC,MAAM;IAH1B,OAAO,CAAC,eAAe,CAAC,CAAuC;IAC/D,OAAO,CAAC,WAAW,CAAC,CAAc;gBAEd,MAAM,EAAE,GAAG,CAAC,mBAAmB;IAEnD;;OAEG;IACH,kBAAkB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,gBAAgB,KAAK,IAAI,GAAG,IAAI;IAIxE;;OAEG;IACH,cAAc,CAAC,WAAW,EAAE,WAAW,GAAG,IAAI;IAI9C;;OAEG;IACG,oBAAoB,CACxB,gBAAgB,EAAE,gBAAgB,EAClC,OAAO,EAAE,iBAAiB,EAC1B,SAAS,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,GAC1C,OAAO,CAAC,IAAI,CAAC;IAUhB;;OAEG;YACW,+BAA+B;IA6J7C;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAW1B;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAIjC;;OAEG;IACH,OAAO,CAAC,iBAAiB;IAWzB;;;;OAIG;IACH,eAAe,CAAC,QAAQ,EAAE,kBAAkB,GAAG,OAAO;IAYtD;;OAEG;IACH,OAAO,CAAC,sBAAsB;CAoB/B"}

package/dist/core/deployment/readiness.js

@@ -3,8 +3,9 @@
  *
  * Handles checking if Kubernetes resources are ready after deployment
  */
-import { DEFAULT_DEPLOYMENT_TIMEOUT, DEFAULT_FAST_POLL_INTERVAL, DEFAULT_POLL_INTERVAL, DEFAULT_READINESS_MAX_BACKOFF, } from '../config/defaults.js';
+import { DEFAULT_DEPLOYMENT_TIMEOUT, DEFAULT_FAST_POLL_INTERVAL, DEFAULT_HTTP_READ_TIMEOUT, DEFAULT_POLL_INTERVAL, DEFAULT_READINESS_MAX_BACKOFF, } from '../config/defaults.js';
 import { ensureError } from '../errors.js';
+import { callWithTimeout, perCallTimeout } from './poll-timeout.js';
 import { ResourceReadinessTimeoutError } from './errors.js';
 export class ResourceReadinessChecker {
     k8sApi;
@@ -38,6 +39,9 @@ export class ResourceReadinessChecker {
     async waitForResourceReadyWithPolling(deployedResource, _options, readinessConfig, emitEvent) {
         const startTime = Date.now();
         let attempt = 0;
+        // The most recent successfully-read resource, reused for the on-timeout debug log so we never issue a
+        // fresh (post-deadline) read that could hang or delay the timeout error.
+        let lastObserved;
         emitEvent({
             type: 'progress',
             resourceId: deployedResource.id,
@@ -47,15 +51,23 @@ export class ResourceReadinessChecker {
         while (Date.now() - startTime < readinessConfig.timeout) {
             attempt++;
             try {
-                // In the new API, methods return objects directly (no .body wrapper)
-                const currentResource = await this.k8sApi.read({
+                // In the new API, methods return objects directly (no .body wrapper).
+                // Bound the read so a wedged/expired kubeconfig exec credential rejects (→ handled below, retried
+                // within the deadline) instead of hanging the poll forever — see poll-timeout.ts.
+                const readTimeout = perCallTimeout(readinessConfig.timeout - (Date.now() - startTime), DEFAULT_HTTP_READ_TIMEOUT);
+                // Deadline spent: stop and fall through to ResourceReadinessTimeoutError (the poll's own overall
+                // timeout) rather than starting a doomed read.
+                if (readTimeout <= 0)
+                    break;
+                const currentResource = await callWithTimeout(() => this.k8sApi.read({
                     apiVersion: deployedResource.manifest.apiVersion,
                     kind: deployedResource.kind,
                     metadata: {
                         name: deployedResource.name,
                         namespace: deployedResource.namespace,
                     },
-                });
+                }), readTimeout, `read ${deployedResource.kind}/${deployedResource.name}`);
+                lastObserved = currentResource;
                 const isReady = this.isResourceReady(currentResource);
                 // Debug logging for status polling
                 if (this.debugLogger) {
@@ -112,27 +124,24 @@ export class ResourceReadinessChecker {
                         timestamp: new Date(),
                     });
                 }
-                // Wait before retry
-                await new Promise((resolve) => setTimeout(resolve, readinessConfig.errorRetryDelay));
+                // Wait before retry — but never past the deadline. If a bounded read consumed the remaining
+                // budget, sleeping the full errorRetryDelay would overshoot the configured timeout; cap it to
+                // what's left (0 → the while re-check exits immediately).
+                const retryDelay = Math.max(0, Math.min(readinessConfig.errorRetryDelay, readinessConfig.timeout - (Date.now() - startTime)));
+                if (retryDelay > 0) {
+                    await new Promise((resolve) => setTimeout(resolve, retryDelay));
+                }
             }
         }
-        // Debug logging for timeout with final status
+        // Debug logging for timeout with final status. Use the LAST OBSERVED resource rather than issuing a
+        // fresh read: the deadline is already spent, so a new read would either hang (wedged credential — the
+        // very failure mode this fixes) or delay ResourceReadinessTimeoutError past the configured timeout.
         if (this.debugLogger) {
-            try {
-                // In the new API, methods return objects directly (no .body wrapper)
-                const finalResource = await this.k8sApi.read({
-                    apiVersion: deployedResource.manifest.apiVersion,
-                    kind: deployedResource.kind,
-                    metadata: {
-                        name: deployedResource.name,
-                        namespace: deployedResource.namespace,
-                    },
-                });
-                this.debugLogger.logTimeout(deployedResource, finalResource.status || finalResource, Date.now() - startTime, attempt);
+            if (lastObserved !== undefined) {
+                this.debugLogger.logTimeout(deployedResource, lastObserved.status || lastObserved, Date.now() - startTime, attempt);
             }
-            catch (_error) {
-                // If we can't get final status, log timeout without it
-                this.debugLogger.logTimeout(deployedResource, { error: 'Could not retrieve final status' }, Date.now() - startTime, attempt);
+            else {
+                this.debugLogger.logTimeout(deployedResource, { error: 'No status observed before timeout' }, Date.now() - startTime, attempt);
             }
         }
         throw new ResourceReadinessTimeoutError(deployedResource, readinessConfig.timeout);

package/dist/core/deployment/readiness.js.map

@@ -1 +1 @@
-{"version":3,"file":"readiness.js","sourceRoot":"","sources":["../../../src/core/deployment/readiness.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,qBAAqB,EACrB,6BAA6B,GAC9B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAQ3C,OAAO,EAAE,6BAA6B,EAAE,MAAM,aAAa,CAAC;AAE5D,MAAM,OAAO,wBAAwB;IAIf;IAHZ,eAAe,CAAwC;IACvD,WAAW,CAAe;IAElC,YAAoB,MAA+B;QAA/B,WAAM,GAAN,MAAM,CAAyB;IAAG,CAAC;IAEvD;;OAEG;IACH,kBAAkB,CAAC,QAA8C;QAC/D,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,WAAwB;QACrC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CACxB,gBAAkC,EAClC,OAA0B,EAC1B,SAA2C;QAE3C,MAAM,eAAe,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACzD,MAAM,IAAI,CAAC,+BAA+B,CACxC,gBAAgB,EAChB,OAAO,EACP,eAAe,EACf,SAAS,CACV,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,+BAA+B,CAC3C,gBAAkC,EAClC,QAA2B,EAC3B,eAAgC,EAChC,SAA2C;QAE3C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,SAAS,CAAC;YACR,IAAI,EAAE,UAAU;YAChB,UAAU,EAAE,gBAAgB,CAAC,EAAE;YAC/B,OAAO,EAAE,eAAe,gBAAgB,CAAC,IAAI,IAAI,gBAAgB,CAAC,IAAI,cAAc;YACpF,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,eAAe,CAAC,OAAO,EAAE,CAAC;YACxD,OAAO,EAAE,CAAC;YAEV,IAAI,CAAC;gBACH,qEAAqE;gBACrE,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;oBAC7C,UAAU,EAAE,gBAAgB,CAAC,QAAQ,CAAC,UAAU;oBAChD,IAAI,EAAE,gBAAgB,CAAC,IAAI;oBAC3B,QAAQ,EAAE;wBACR,IAAI,EAAE,gBAAgB,CAAC,IAAI;wBAC3B,SAAS,EAAE,gBAAgB,CAAC,SAAS;qBACtC;iBACF,CAAC,CAAC;gBAEH,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;gBAEtD,mCAAmC;gBACnC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBACrB,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAChC,gBAAgB,EACf,eAAwC,CAAC,MAAM,IAAI,eAAe,EACnE,OAAO,EACP;wBACE,OAAO;wBACP,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;wBACnC,SAAS,EAAE,KAAK;wBAChB,gBAAgB,EAAE,SAAS;qBAC5B,CACF,CAAC;gBACJ,CAAC;gBAED,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;oBAExC,6DAA6D;oBAC7D,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;wBACzB,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC;oBACzC,CAAC;oBAED,SAAS,CAAC;wBACR,IAAI,EAAE,UAAU;wBAChB,UAAU,EAAE,gBAAgB,CAAC,EAAE;wBAC/B,OAAO,EAAE,GAAG,gBAAgB,CAAC,IAAI,IAAI,gBAAgB,CAAC,IAAI,mBAAmB,QAAQ,IAAI;wBACzF,SAAS,EAAE,IAAI,IAAI,EAAE;qBACtB,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBAED,uBAAuB;gBACvB,IAAI,OAAO,GAAG,eAAe,CAAC,gBAAgB,KAAK,CAAC,EAAE,CAAC;oBACrD,SAAS,CAAC;wBACR,IAAI,EAAE,UAAU;wBAChB,UAAU,EAAE,gBAAgB,CAAC,EAAE;wBAC/B,OAAO,EAAE,qBAAqB,gBAAgB,CAAC,IAAI,IAAI,gBAAgB,CAAC,IAAI,aAAa,OAAO,GAAG;wBACnG,SAAS,EAAE,IAAI,IAAI,EAAE;qBACtB,CAAC,CAAC;gBACL,CAAC;gBAED,kDAAkD;gBAClD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,eAAe,CAAC,YAAY,GAAG,eAAe,CAAC,iBAAiB,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,EACjF,eAAe,CAAC,QAAQ,CACzB,CAAC;gBAEF,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;YAC7D,CAAC;YAAC,OAAO,KAAc,EAAE,CAAC;gBACxB,+BAA+B;gBAC/B,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBACrB,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,gBAAgB,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE;wBACjE,OAAO;wBACP,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;wBACnC,SAAS,EAAE,KAAK;wBAChB,gBAAgB,EAAE,SAAS;qBAC5B,CAAC,CAAC;gBACL,CAAC;gBAED,iCAAiC;gBACjC,IAAI,OAAO,GAAG,eAAe,CAAC,gBAAgB,KAAK,CAAC,EAAE,CAAC;oBACrD,SAAS,CAAC;wBACR,IAAI,EAAE,UAAU;wBAChB,UAAU,EAAE,gBAAgB,CAAC,EAAE;wBAC/B,OAAO,EAAE,gCAAgC,gBAAgB,CAAC,IAAI,IAAI,gBAAgB,CAAC,IAAI,KAAK,WAAW,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE;wBACxH,SAAS,EAAE,IAAI,IAAI,EAAE;qBACtB,CAAC,CAAC;gBACL,CAAC;gBAED,oBAAoB;gBACpB,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,eAAe,CAAC,eAAe,CAAC,CAAC,CAAC;YACvF,CAAC;QACH,CAAC;QAED,8CAA8C;QAC9C,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,qEAAqE;gBACrE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;oBAC3C,UAAU,EAAE,gBAAgB,CAAC,QAAQ,CAAC,UAAU;oBAChD,IAAI,EAAE,gBAAgB,CAAC,IAAI;oBAC3B,QAAQ,EAAE;wBACR,IAAI,EAAE,gBAAgB,CAAC,IAAI;wBAC3B,SAAS,EAAE,gBAAgB,CAAC,SAAS;qBACtC;iBACF,CAAC,CAAC;gBAEH,IAAI,CAAC,WAAW,CAAC,UAAU,CACzB,gBAAgB,EACf,aAAsC,CAAC,MAAM,IAAI,aAAa,EAC/D,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EACtB,OAAO,CACR,CAAC;YACJ,CAAC;YAAC,OAAO,MAAe,EAAE,CAAC;gBACzB,uDAAuD;gBACvD,IAAI,CAAC,WAAW,CAAC,UAAU,CACzB,gBAAgB,EAChB,EAAE,KAAK,EAAE,iCAAiC,EAAE,EAC5C,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EACtB,OAAO,CACR,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,IAAI,6BAA6B,CAAC,gBAAgB,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC;IACrF,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,OAA0B;QACnD,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,0BAA0B;YACtD,YAAY,EAAE,0BAA0B;YACxC,QAAQ,EAAE,6BAA6B;YACvC,iBAAiB,EAAE,GAAG;YACtB,eAAe,EAAE,qBAAqB;YACtC,gBAAgB,EAAE,CAAC,EAAE,iCAAiC;SACvD,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,yBAAyB,CAAC,GAAyB,EAAE,KAAa;QACxE,OAAQ,GAA+B,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IAED;;OAEG;IACK,iBAAiB,CACvB,QAA4B;QAE5B,IAAI,QAAQ,IAAI,QAAQ,IAAI,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC/C,0EAA0E;YAC1E,OAAO,QAAQ,CAAC,MAAuB,CAAC;QAC1C,CAAC;QACD,qDAAqD;QACrD,OAAO,IAAI,CAAC,yBAAyB,CAAC,QAAQ,EAAE,QAAQ,CAAkB,CAAC;IAC7E,CAAC;IAED;;;;OAIG;IACH,eAAe,CAAC,QAA4B;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAEhD,+DAA+D;QAC/D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC;QACf,CAAC;QAED,iEAAiE;QACjE,OAAO,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,QAA4B;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAA2B,QAAQ,CAAC,CAAC;QAE1E,wCAAwC;QACxC,IAAI,MAAM,EAAE,UAAU,EAAE,CAAC;YACvB,MAAM,cAAc,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;YACzE,IAAI,cAAc,EAAE,CAAC;gBACnB,OAAO,cAAc,CAAC,MAAM,KAAK,MAAM,CAAC;YAC1C,CAAC;YAED,gCAAgC;YAChC,MAAM,kBAAkB,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;YACjF,IAAI,kBAAkB,EAAE,CAAC;gBACvB,OAAO,kBAAkB,CAAC,MAAM,KAAK,MAAM,CAAC;YAC9C,CAAC;QACH,CAAC;QAED,2DAA2D;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}
+{"version":3,"file":"readiness.js","sourceRoot":"","sources":["../../../src/core/deployment/readiness.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAC1B,yBAAyB,EACzB,qBAAqB,EACrB,6BAA6B,GAC9B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAQpE,OAAO,EAAE,6BAA6B,EAAE,MAAM,aAAa,CAAC;AAE5D,MAAM,OAAO,wBAAwB;IAIf;IAHZ,eAAe,CAAwC;IACvD,WAAW,CAAe;IAElC,YAAoB,MAA+B;QAA/B,WAAM,GAAN,MAAM,CAAyB;IAAG,CAAC;IAEvD;;OAEG;IACH,kBAAkB,CAAC,QAA8C;QAC/D,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,WAAwB;QACrC,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,oBAAoB,CACxB,gBAAkC,EAClC,OAA0B,EAC1B,SAA2C;QAE3C,MAAM,eAAe,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACzD,MAAM,IAAI,CAAC,+BAA+B,CACxC,gBAAgB,EAChB,OAAO,EACP,eAAe,EACf,SAAS,CACV,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,+BAA+B,CAC3C,gBAAkC,EAClC,QAA2B,EAC3B,eAAgC,EAChC,SAA2C;QAE3C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,sGAAsG;QACtG,yEAAyE;QACzE,IAAI,YAA8C,CAAC;QAEnD,SAAS,CAAC;YACR,IAAI,EAAE,UAAU;YAChB,UAAU,EAAE,gBAAgB,CAAC,EAAE;YAC/B,OAAO,EAAE,eAAe,gBAAgB,CAAC,IAAI,IAAI,gBAAgB,CAAC,IAAI,cAAc;YACpF,SAAS,EAAE,IAAI,IAAI,EAAE;SACtB,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,eAAe,CAAC,OAAO,EAAE,CAAC;YACxD,OAAO,EAAE,CAAC;YAEV,IAAI,CAAC;gBACH,sEAAsE;gBACtE,kGAAkG;gBAClG,kFAAkF;gBAClF,MAAM,WAAW,GAAG,cAAc,CAChC,eAAe,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,EAClD,yBAAyB,CAC1B,CAAC;gBACF,iGAAiG;gBACjG,+CAA+C;gBAC/C,IAAI,WAAW,IAAI,CAAC;oBAAE,MAAM;gBAC5B,MAAM,eAAe,GAAG,MAAM,eAAe,CAC3C,GAAG,EAAE,CACH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC;oBACf,UAAU,EAAE,gBAAgB,CAAC,QAAQ,CAAC,UAAU;oBAChD,IAAI,EAAE,gBAAgB,CAAC,IAAI;oBAC3B,QAAQ,EAAE;wBACR,IAAI,EAAE,gBAAgB,CAAC,IAAI;wBAC3B,SAAS,EAAE,gBAAgB,CAAC,SAAS;qBACtC;iBACF,CAAC,EACJ,WAAW,EACX,QAAQ,gBAAgB,CAAC,IAAI,IAAI,gBAAgB,CAAC,IAAI,EAAE,CACzD,CAAC;gBACF,YAAY,GAAG,eAAe,CAAC;gBAE/B,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;gBAEtD,mCAAmC;gBACnC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBACrB,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAChC,gBAAgB,EACf,eAAwC,CAAC,MAAM,IAAI,eAAe,EACnE,OAAO,EACP;wBACE,OAAO;wBACP,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;wBACnC,SAAS,EAAE,KAAK;wBAChB,gBAAgB,EAAE,SAAS;qBAC5B,CACF,CAAC;gBACJ,CAAC;gBAED,IAAI,OAAO,EAAE,CAAC;oBACZ,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;oBAExC,6DAA6D;oBAC7D,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;wBACzB,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC;oBACzC,CAAC;oBAED,SAAS,CAAC;wBACR,IAAI,EAAE,UAAU;wBAChB,UAAU,EAAE,gBAAgB,CAAC,EAAE;wBAC/B,OAAO,EAAE,GAAG,gBAAgB,CAAC,IAAI,IAAI,gBAAgB,CAAC,IAAI,mBAAmB,QAAQ,IAAI;wBACzF,SAAS,EAAE,IAAI,IAAI,EAAE;qBACtB,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBAED,uBAAuB;gBACvB,IAAI,OAAO,GAAG,eAAe,CAAC,gBAAgB,KAAK,CAAC,EAAE,CAAC;oBACrD,SAAS,CAAC;wBACR,IAAI,EAAE,UAAU;wBAChB,UAAU,EAAE,gBAAgB,CAAC,EAAE;wBAC/B,OAAO,EAAE,qBAAqB,gBAAgB,CAAC,IAAI,IAAI,gBAAgB,CAAC,IAAI,aAAa,OAAO,GAAG;wBACnG,SAAS,EAAE,IAAI,IAAI,EAAE;qBACtB,CAAC,CAAC;gBACL,CAAC;gBAED,kDAAkD;gBAClD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,eAAe,CAAC,YAAY,GAAG,eAAe,CAAC,iBAAiB,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,EACjF,eAAe,CAAC,QAAQ,CACzB,CAAC;gBAEF,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;YAC7D,CAAC;YAAC,OAAO,KAAc,EAAE,CAAC;gBACxB,+BAA+B;gBAC/B,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBACrB,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,gBAAgB,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE;wBACjE,OAAO;wBACP,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;wBACnC,SAAS,EAAE,KAAK;wBAChB,gBAAgB,EAAE,SAAS;qBAC5B,CAAC,CAAC;gBACL,CAAC;gBAED,iCAAiC;gBACjC,IAAI,OAAO,GAAG,eAAe,CAAC,gBAAgB,KAAK,CAAC,EAAE,CAAC;oBACrD,SAAS,CAAC;wBACR,IAAI,EAAE,UAAU;wBAChB,UAAU,EAAE,gBAAgB,CAAC,EAAE;wBAC/B,OAAO,EAAE,gCAAgC,gBAAgB,CAAC,IAAI,IAAI,gBAAgB,CAAC,IAAI,KAAK,WAAW,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE;wBACxH,SAAS,EAAE,IAAI,IAAI,EAAE;qBACtB,CAAC,CAAC;gBACL,CAAC;gBAED,4FAA4F;gBAC5F,8FAA8F;gBAC9F,0DAA0D;gBAC1D,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CACzB,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,eAAe,EAAE,eAAe,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC,CAC9F,CAAC;gBACF,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;oBACnB,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;gBAClE,CAAC;YACH,CAAC;QACH,CAAC;QAED,oGAAoG;QACpG,sGAAsG;QACtG,oGAAoG;QACpG,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC/B,IAAI,CAAC,WAAW,CAAC,UAAU,CACzB,gBAAgB,EACf,YAAqC,CAAC,MAAM,IAAI,YAAY,EAC7D,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EACtB,OAAO,CACR,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,WAAW,CAAC,UAAU,CACzB,gBAAgB,EAChB,EAAE,KAAK,EAAE,mCAAmC,EAAE,EAC9C,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,EACtB,OAAO,CACR,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,IAAI,6BAA6B,CAAC,gBAAgB,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC;IACrF,CAAC;IAED;;OAEG;IACK,kBAAkB,CAAC,OAA0B;QACnD,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,0BAA0B;YACtD,YAAY,EAAE,0BAA0B;YACxC,QAAQ,EAAE,6BAA6B;YACvC,iBAAiB,EAAE,GAAG;YACtB,eAAe,EAAE,qBAAqB;YACtC,gBAAgB,EAAE,CAAC,EAAE,iCAAiC;SACvD,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,yBAAyB,CAAC,GAAyB,EAAE,KAAa;QACxE,OAAQ,GAA+B,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IAED;;OAEG;IACK,iBAAiB,CACvB,QAA4B;QAE5B,IAAI,QAAQ,IAAI,QAAQ,IAAI,MAAM,IAAI,QAAQ,EAAE,CAAC;YAC/C,0EAA0E;YAC1E,OAAO,QAAQ,CAAC,MAAuB,CAAC;QAC1C,CAAC;QACD,qDAAqD;QACrD,OAAO,IAAI,CAAC,yBAAyB,CAAC,QAAQ,EAAE,QAAQ,CAAkB,CAAC;IAC7E,CAAC;IAED;;;;OAIG;IACH,eAAe,CAAC,QAA4B;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAEhD,+DAA+D;QAC/D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC;QACf,CAAC;QAED,iEAAiE;QACjE,OAAO,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACK,sBAAsB,CAAC,QAA4B;QACzD,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAA2B,QAAQ,CAAC,CAAC;QAE1E,wCAAwC;QACxC,IAAI,MAAM,EAAE,UAAU,EAAE,CAAC;YACvB,MAAM,cAAc,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;YACzE,IAAI,cAAc,EAAE,CAAC;gBACnB,OAAO,cAAc,CAAC,MAAM,KAAK,MAAM,CAAC;YAC1C,CAAC;YAED,gCAAgC;YAChC,MAAM,kBAAkB,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;YACjF,IAAI,kBAAkB,EAAE,CAAC;gBACvB,OAAO,kBAAkB,CAAC,MAAM,KAAK,MAAM,CAAC;YAC9C,CAAC;QACH,CAAC;QAED,2DAA2D;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/core/deployment/resource-applier.d.ts

@@ -10,14 +10,22 @@
  */
 import type * as k8s from '@kubernetes/client-node';
 import type { TypeKroLogger } from '../logging/index.js';
+import type { ArtifactApplyPolicy } from '../planning/artifacts.js';
 import type { ReferenceResolver } from '../references/index.js';
 import type { DeploymentOptions, ResolutionContext } from '../types/deployment.js';
 import type { DeployableK8sResource, Enhanced, KubernetesResource } from '../types.js';
-export declare class ResourceApplier {
+/** Host-neutral contract for applying one compiled Kubernetes artifact operation. */
+export interface ArtifactResourceApplier {
+    applyArtifactResource(resource: KubernetesResource, policy: ArtifactApplyPolicy | undefined, options: DeploymentOptions, resourceLogger: TypeKroLogger): Promise<k8s.KubernetesObject>;
+}
+export declare class ResourceApplier implements ArtifactResourceApplier {
     private k8sApi;
     private referenceResolver;
-    constructor(k8sApi: k8s.KubernetesObjectApi, referenceResolver: ReferenceResolver, _logger: TypeKroLogger);
+    constructor(k8sApi: k8s.KubernetesObjectApi, referenceResolver: ReferenceResolver | undefined, _logger: TypeKroLogger);
     private buildResourceIdentityMetadata;
+    private throwIfAborted;
+    private abortableDelay;
+    private isImmutableFieldError;
     /**
      * Serialize a resource for sending to the Kubernetes API.
      * Calls toJSON() if available (to preserve arrays via custom implementation),
@@ -55,12 +63,20 @@ export declare class ResourceApplier {
      * Handle a 409 Conflict error based on the configured conflict strategy.
      * Returns the applied resource if the conflict was handled, or undefined if it wasn't.
      */
-    handleConflictStrategy(resolvedResource: KubernetesResource, conflictStrategy: NonNullable<DeploymentOptions['conflictStrategy']>, resourceLogger: TypeKroLogger): Promise<k8s.KubernetesObject | undefined>;
+    handleConflictStrategy(resolvedResource: KubernetesResource, conflictStrategy: NonNullable<DeploymentOptions['conflictStrategy']>, resourceLogger: TypeKroLogger, abortSignal?: AbortSignal, timeout?: number): Promise<k8s.KubernetesObject | undefined>;
+    private createResource;
+    private patchResource;
+    private replaceResource;
+    private waitForResourceDeletion;
+    private serverSideApply;
+    private applyWithPolicy;
     /**
      * Apply a resource to the Kubernetes cluster with retry logic, conflict handling,
      * and support for both create and patch operations.
      */
     applyResourceToCluster(resolvedResource: KubernetesResource, options: DeploymentOptions, resourceLogger: TypeKroLogger): Promise<k8s.KubernetesObject>;
+    /** Apply one compiled artifact operation through the canonical policy executor. */
+    applyArtifactResource(resolvedResource: KubernetesResource, applyPolicy: ArtifactApplyPolicy | undefined, options: DeploymentOptions, resourceLogger: TypeKroLogger): Promise<k8s.KubernetesObject>;
     /**
      * Check if a resource already exists in the cluster.
      * Returns the existing resource if found, or undefined if it doesn't exist (404).

package/dist/core/deployment/resource-applier.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resource-applier.d.ts","sourceRoot":"","sources":["../../../src/core/deployment/resource-applier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,KAAK,GAAG,MAAM,yBAAyB,CAAC;AAUpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAMzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AACnF,OAAO,KAAK,EACV,qBAAqB,EACrB,QAAQ,EAER,kBAAkB,EACnB,MAAM,aAAa,CAAC;AAarB,qBAAa,eAAe;IAExB,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,iBAAiB;gBADjB,MAAM,EAAE,GAAG,CAAC,mBAAmB,EAC/B,iBAAiB,EAAE,iBAAiB,EAC5C,OAAO,EAAE,aAAa;IAGxB,OAAO,CAAC,6BAA6B;IAWrC;;;;OAIG;IACH,uBAAuB,CACrB,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,GACzD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAgB1B;;;OAGG;IACG,yBAAyB,CAC7B,QAAQ,EAAE,qBAAqB,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,EAC3D,OAAO,EAAE,iBAAiB,EAC1B,OAAO,EAAE,iBAAiB,EAC1B,cAAc,EAAE,aAAa,GAC5B,OAAO,CAAC,kBAAkB,CAAC;IAgD9B;;;OAGG;IACH,wBAAwB,CACtB,QAAQ,EAAE,kBAAkB,EAC5B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,cAAc,EAAE,aAAa,GAC5B,kBAAkB;IAuCrB;;;;;;;;;;;OAWG;IACH,kBAAkB,CAChB,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,EAAE,iBAAiB,EAC1B,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,iBAAiB,GACzB,IAAI;IAwBP;;OAEG;IACH,iBAAiB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IA4CxE;;;OAGG;IACG,sBAAsB,CAC1B,gBAAgB,EAAE,kBAAkB,EACpC,gBAAgB,EAAE,WAAW,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,EACpE,cAAc,EAAE,aAAa,GAC5B,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAyF5C;;;OAGG;IACG,sBAAsB,CAC1B,gBAAgB,EAAE,kBAAkB,EACpC,OAAO,EAAE,iBAAiB,EAC1B,cAAc,EAAE,aAAa,GAC5B,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IA6IhC;;;;OAIG;IACG,mBAAmB,CACvB,QAAQ,EAAE,kBAAkB,EAC5B,cAAc,EAAE,aAAa,GAC5B,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,SAAS,CAAC;CAoC7C"}
+{"version":3,"file":"resource-applier.d.ts","sourceRoot":"","sources":["../../../src/core/deployment/resource-applier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,KAAK,GAAG,MAAM,yBAAyB,CAAC;AAUpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAMzD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AACnF,OAAO,KAAK,EACV,qBAAqB,EACrB,QAAQ,EAER,kBAAkB,EACnB,MAAM,aAAa,CAAC;AAiBrB,qFAAqF;AACrF,MAAM,WAAW,uBAAuB;IACtC,qBAAqB,CACnB,QAAQ,EAAE,kBAAkB,EAC5B,MAAM,EAAE,mBAAmB,GAAG,SAAS,EACvC,OAAO,EAAE,iBAAiB,EAC1B,cAAc,EAAE,aAAa,GAC5B,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;CAClC;AAED,qBAAa,eAAgB,YAAW,uBAAuB;IAE3D,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,iBAAiB;gBADjB,MAAM,EAAE,GAAG,CAAC,mBAAmB,EAC/B,iBAAiB,EAAE,iBAAiB,GAAG,SAAS,EACxD,OAAO,EAAE,aAAa;IAGxB,OAAO,CAAC,6BAA6B;IAWrC,OAAO,CAAC,cAAc;YAIR,cAAc;IAqB5B,OAAO,CAAC,qBAAqB;IAS7B;;;;OAIG;IACH,uBAAuB,CACrB,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,GACzD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAgB1B;;;OAGG;IACG,yBAAyB,CAC7B,QAAQ,EAAE,qBAAqB,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,EAC3D,OAAO,EAAE,iBAAiB,EAC1B,OAAO,EAAE,iBAAiB,EAC1B,cAAc,EAAE,aAAa,GAC5B,OAAO,CAAC,kBAAkB,CAAC;IAoD9B;;;OAGG;IACH,wBAAwB,CACtB,QAAQ,EAAE,kBAAkB,EAC5B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,cAAc,EAAE,aAAa,GAC5B,kBAAkB;IAuCrB;;;;;;;;;;;OAWG;IACH,kBAAkB,CAChB,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,EAAE,iBAAiB,EAC1B,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,iBAAiB,GACzB,IAAI;IAwBP;;OAEG;IACH,iBAAiB,CAAC,QAAQ,EAAE,kBAAkB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IA4CxE;;;OAGG;IACG,sBAAsB,CAC1B,gBAAgB,EAAE,kBAAkB,EACpC,gBAAgB,EAAE,WAAW,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,EACpE,cAAc,EAAE,aAAa,EAC7B,WAAW,CAAC,EAAE,WAAW,EACzB,OAAO,SAA4B,GAClC,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,SAAS,CAAC;YAgG9B,cAAc;YAoBd,aAAa;YAkBb,eAAe;YAoBf,uBAAuB;YAyCvB,eAAe;YA+Bf,eAAe;IAgJ7B;;;OAGG;IACG,sBAAsB,CAC1B,gBAAgB,EAAE,kBAAkB,EACpC,OAAO,EAAE,iBAAiB,EAC1B,cAAc,EAAE,aAAa,GAC5B,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IAShC,mFAAmF;IAC7E,qBAAqB,CACzB,gBAAgB,EAAE,kBAAkB,EACpC,WAAW,EAAE,mBAAmB,GAAG,SAAS,EAC5C,OAAO,EAAE,iBAAiB,EAC1B,cAAc,EAAE,aAAa,GAC5B,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IA2IhC;;;;OAIG;IACG,mBAAmB,CACvB,QAAQ,EAAE,kBAAkB,EAC5B,cAAc,EAAE,aAAa,GAC5B,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,SAAS,CAAC;CAoC7C"}