chore: rebuild dist for provider timeout and credential fixes

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

dist/index.js

@@ -2867,10 +2867,34 @@ exports["default"] = Orchestrator;
 
 "use strict";
 
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", ({ value: true }));
+const core = __importStar(__nccwpck_require__(42186));
 const orchestrator_system_1 = __nccwpck_require__(9744);
 const orchestrator_logger_1 = __importDefault(__nccwpck_require__(32549));
 const provider_resource_1 = __nccwpck_require__(72538);
@@ -2910,6 +2934,15 @@ class AnsibleProvider {
         catch (error) {
             throw new Error(`Ansible not found on PATH: ${error.message || error}`);
         }
+        // Verify ansible-playbook binary exists (may be separate from ansible)
+        try {
+            await orchestrator_system_1.OrchestratorSystem.Run('command -v ansible-playbook || which ansible-playbook || where ansible-playbook');
+            orchestrator_logger_1.default.log(`[Ansible] ansible-playbook binary verified`);
+        }
+        catch (error) {
+            core.error('ansible-playbook not found. Install Ansible or ensure it is in PATH.');
+            throw new Error(`ansible-playbook not found on PATH: ${error.message || error}`);
+        }
         // Verify inventory exists
         try {
             await orchestrator_system_1.OrchestratorSystem.Run(`test -e "${this.inventory}"`);
@@ -5182,14 +5215,39 @@ exports["default"] = LocalDockerOrchestrator;
 
 "use strict";
 
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", ({ value: true }));
+const core = __importStar(__nccwpck_require__(42186));
 const orchestrator_system_1 = __nccwpck_require__(9744);
 const orchestrator_logger_1 = __importDefault(__nccwpck_require__(32549));
 const provider_resource_1 = __nccwpck_require__(72538);
 const provider_workflow_1 = __nccwpck_require__(60511);
+const MAX_POLLING_DURATION_MS = 14400000; // 4 hours
 /**
  * GitHub Actions provider — triggers builds as workflow_dispatch events
  * on a target repository via the GitHub API.
@@ -5281,9 +5339,18 @@ class GitHubActionsProvider {
         if (!this.runId) {
             throw new Error(`Workflow run did not start within ${maxAttempts * 10}s`);
         }
-        // Poll until completion and stream logs
+        // Poll until completion and stream logs (with maximum duration guard)
         let status = 'in_progress';
+        const pollingStartTime = Date.now();
+        const runUrl = `https://github.com/${this.repo}/actions/runs/${this.runId}`;
         while (status === 'in_progress' || status === 'queued') {
+            const elapsedMs = Date.now() - pollingStartTime;
+            if (elapsedMs >= MAX_POLLING_DURATION_MS) {
+                const hours = Math.round(MAX_POLLING_DURATION_MS / 3600000);
+                const message = `GitHub Actions workflow did not complete within ${hours} hours. Run URL: ${runUrl}`;
+                core.error(message);
+                throw new Error(message);
+            }
             await new Promise((resolve) => setTimeout(resolve, 15000));
             try {
                 const statusJson = await orchestrator_system_1.OrchestratorSystem.Run(`GH_TOKEN=${this.token} gh api repos/${this.repo}/actions/runs/${this.runId} --jq '{status, conclusion}'`, true);
@@ -5302,6 +5369,9 @@ class GitHubActionsProvider {
                 if (error.message && error.message.includes('conclusion')) {
                     throw error;
                 }
+                if (error.message && error.message.includes('did not complete within')) {
+                    throw error;
+                }
                 orchestrator_logger_1.default.logWarning(`[GitHubActions] Status check error: ${error.message || error}`);
             }
         }
@@ -5395,13 +5465,38 @@ exports["default"] = GitHubActionsProvider;
 
 "use strict";
 
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", ({ value: true }));
+const core = __importStar(__nccwpck_require__(42186));
 const orchestrator_system_1 = __nccwpck_require__(9744);
 const orchestrator_logger_1 = __importDefault(__nccwpck_require__(32549));
 const provider_workflow_1 = __nccwpck_require__(60511);
+const MAX_POLLING_DURATION_MS = 14400000; // 4 hours
 /**
  * GitLab CI provider — triggers builds as GitLab CI pipelines
  * via the GitLab API.
@@ -5467,10 +5562,19 @@ class GitLabCIProvider {
         catch (error) {
             throw new Error(`Failed to trigger pipeline: ${error.message || error}`);
         }
-        // Poll until completion
+        // Poll until completion (with maximum duration guard)
         let status = 'pending';
         const terminalStatuses = new Set(['success', 'failed', 'canceled', 'skipped']);
+        const pollingStartTime = Date.now();
+        const pipelineUrl = `${this.apiUrl}/${this.projectId}/-/pipelines/${this.pipelineId}`;
         while (!terminalStatuses.has(status)) {
+            const elapsedMs = Date.now() - pollingStartTime;
+            if (elapsedMs >= MAX_POLLING_DURATION_MS) {
+                const hours = Math.round(MAX_POLLING_DURATION_MS / 3600000);
+                const message = `GitLab CI pipeline did not complete within ${hours} hours. Pipeline URL: ${pipelineUrl}`;
+                core.error(message);
+                throw new Error(message);
+            }
             await new Promise((resolve) => setTimeout(resolve, 15000));
             try {
                 const statusResponse = await orchestrator_system_1.OrchestratorSystem.Run(`curl -sf -H "PRIVATE-TOKEN: ${this.triggerToken}" "${this.apiUrl}/api/v4/projects/${encodedProject}/pipelines/${this.pipelineId}"`, true);
@@ -8039,9 +8143,17 @@ class RemotePowershellProvider {
             return `pwsh -NoProfile -NonInteractive -Command "Invoke-Command -HostName '${this.host}' -ScriptBlock { ${escapedScript} }"`;
         }
         // WinRM (default)
-        const credentialPart = this.credential
-            ? `-Credential (New-Object PSCredential('${this.credential.split(':')[0]}', (ConvertTo-SecureString '${this.credential.split(':')[1]}' -AsPlainText -Force)))`
-            : '';
+        // Split on the FIRST colon only — passwords may contain colons
+        let credentialPart = '';
+        if (this.credential) {
+            const colonIndex = this.credential.indexOf(':');
+            if (colonIndex === -1) {
+                throw new Error('remotePowershellCredential must be in "username:password" format (no colon found)');
+            }
+            const user = this.credential.substring(0, colonIndex);
+            const pass = this.credential.substring(colonIndex + 1);
+            credentialPart = `-Credential (New-Object PSCredential('${user}', (ConvertTo-SecureString '${pass}' -AsPlainText -Force)))`;
+        }
         return `pwsh -NoProfile -NonInteractive -Command "Invoke-Command -ComputerName '${this.host}' ${credentialPart} -ScriptBlock { ${escapedScript} }"`;
     }
 }