@owox/backend 0.37.0 → 0.39.0

package/dist/src/plugin-host/mappers/plugin-presentation.mapper.js

@@ -8,9 +8,13 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PluginPresentationMapper = void 0;
 const common_1 = require("@nestjs/common");
+const check_plugin_release_command_1 = require("../dto/domain/check-plugin-release.command");
+const list_plugin_history_command_1 = require("../dto/domain/list-plugin-history.command");
+const find_plugin_by_repository_command_1 = require("../dto/domain/find-plugin-by-repository.command");
 const get_plugin_details_command_1 = require("../dto/domain/get-plugin-details.command");
 const get_plugin_gallery_command_1 = require("../dto/domain/get-plugin-gallery.command");
 const get_plugin_installation_entry_command_1 = require("../dto/domain/get-plugin-installation-entry.command");
+const plugin_manifest_util_1 = require("../utils/plugin-manifest.util");
 const install_plugin_command_1 = require("../dto/domain/install-plugin.command");
 const list_installations_command_1 = require("../dto/domain/list-installations.command");
 const list_publications_command_1 = require("../dto/domain/list-publications.command");
@@ -44,6 +48,26 @@ let PluginPresentationMapper = class PluginPresentationMapper {
     toListInstallationsCommand(context, includeUninstalled) {
         return new list_installations_command_1.ListInstallationsCommand(context, includeUninstalled);
     }
+    toListPluginHistoryCommand(context, query) {
+        return new list_plugin_history_command_1.ListPluginHistoryCommand(context, query.type ?? 'all', query.limit ?? list_plugin_history_command_1.PLUGIN_HISTORY_DEFAULT_LIMIT, query.cursor ?? null);
+    }
+    toPluginHistoryResponse(page) {
+        return {
+            items: page.items.map(item => ({
+                id: item.id,
+                occurredAt: item.occurredAt.toISOString(),
+                action: item.action,
+                scope: item.scope,
+                plugin: { ...item.plugin },
+                actor: item.actor ? { ...item.actor } : null,
+                version: item.version,
+            })),
+            nextCursor: page.nextCursor,
+        };
+    }
+    toFindPluginByRepositoryCommand(repository, context) {
+        return new find_plugin_by_repository_command_1.FindPluginByRepositoryCommand(repository, context);
+    }
     toGetPluginInstallationEntryCommand(installationId, context) {
         return new get_plugin_installation_entry_command_1.GetPluginInstallationEntryCommand(installationId, context);
     }
@@ -56,6 +80,9 @@ let PluginPresentationMapper = class PluginPresentationMapper {
     toUpdateByRepositoryCommand(context, dto) {
         return new update_plugin_command_1.UpdatePluginCommand(context, undefined, dto.repository);
     }
+    toCheckReleaseCommand(context, dto) {
+        return new check_plugin_release_command_1.CheckPluginReleaseCommand(context, dto.repository, dto.ref, dto.version);
+    }
     toUninstallCommand(pluginId, context) {
         return new uninstall_plugin_command_1.UninstallPluginCommand(pluginId, context);
     }
@@ -68,7 +95,7 @@ let PluginPresentationMapper = class PluginPresentationMapper {
     toMemberDto(plugin, version, context) {
         return {
             pluginId: plugin.id,
-            displayName: version?.displayName ?? (plugin.isPrivateRepo ? plugin.repoOwner : plugin.repoName),
+            displayName: this.displayNameOf(plugin, version),
             description: version?.description ?? '',
             currentSemver: version?.semver ?? null,
             currentVersionId: version?.id ?? null,
@@ -79,8 +106,21 @@ let PluginPresentationMapper = class PluginPresentationMapper {
             addedAt: plugin.createdAt.toISOString(),
             nextCheckAt: plugin.nextUpdateCheckAt?.toISOString() ?? null,
             credentialRequirements: version?.credentialRequirements ?? [],
+            ...(version?.backend
+                ? { backendOrigin: new URL((0, plugin_manifest_util_1.resolveBackendUrl)(version.backend, version.deliveryUrl)).origin }
+                : {}),
         };
     }
+    toHistoryPlugin(plugin, version) {
+        return {
+            pluginId: plugin.id,
+            displayName: this.displayNameOf(plugin, version),
+            ownerName: plugin.repoOwner,
+        };
+    }
+    toLookupResponse(result) {
+        return { pluginId: result.pluginId };
+    }
     toGalleryEntryResponse(dto) {
         return {
             pluginId: dto.pluginId,
@@ -95,6 +135,7 @@ let PluginPresentationMapper = class PluginPresentationMapper {
             addedAt: dto.addedAt,
             nextCheckAt: dto.nextCheckAt,
             credentialRequirements: dto.credentialRequirements.map(requirement => typeof requirement === 'string' ? requirement : { ...requirement }),
+            ...(dto.backendOrigin ? { backendOrigin: dto.backendOrigin } : {}),
         };
     }
     toGalleryEntryResponseList(dtos) {
@@ -168,6 +209,17 @@ let PluginPresentationMapper = class PluginPresentationMapper {
             diagnostics: dto.diagnostics ? this.toDiagnosticsResponse(dto.diagnostics) : null,
         };
     }
+    toReleaseCheckResponse(dto) {
+        return {
+            pluginId: dto.pluginId,
+            repository: dto.repository,
+            commitSha: dto.commitSha,
+            candidateVersion: dto.candidateVersion,
+            baselineVersion: dto.baselineVersion,
+            collectionsEvaluated: dto.collectionsEvaluated,
+            issues: dto.issues.map(issue => ({ code: issue.code, detail: issue.detail })),
+        };
+    }
     toSuspensionResponse(dto) {
         return {
             pluginId: dto.pluginId,
@@ -175,6 +227,40 @@ let PluginPresentationMapper = class PluginPresentationMapper {
             note: dto.note,
         };
     }
+    toStartedActionExecutionResponse(dto) {
+        return { id: dto.id, status: dto.status };
+    }
+    toActionExecutionResponse(dto) {
+        return {
+            id: dto.id,
+            action: dto.action,
+            status: dto.status,
+            trigger: dto.trigger,
+            startedAt: dto.startedAt,
+            deadlineAt: dto.deadlineAt,
+            finishedAt: dto.finishedAt,
+            result: dto.result,
+            error: dto.error ? { code: dto.error.code, message: dto.error.message } : null,
+        };
+    }
+    toActionWorkerContextResponse(dto) {
+        return {
+            executionId: dto.executionId,
+            action: dto.action,
+            input: dto.input,
+            trigger: dto.trigger,
+            deadlineAt: dto.deadlineAt,
+            plugin: { id: dto.plugin.id, repositoryId: dto.plugin.repositoryId },
+            pluginVersion: dto.pluginVersion,
+            installationId: dto.installationId,
+            projectId: dto.projectId,
+            userId: dto.userId,
+            credentialHandles: dto.credentialHandles.map(handle => ({ ...handle })),
+        };
+    }
+    displayNameOf(plugin, version) {
+        return version?.displayName ?? (plugin.isPrivateRepo ? plugin.repoOwner : plugin.repoName);
+    }
     toSource(plugin) {
         const owner = {
             ownerName: plugin.repoOwner,

package/dist/src/plugin-host/plugin-host.module.js

@@ -15,6 +15,7 @@ const data_marts_module_1 = require("../data-marts/data-marts.module");
 const plugin_collections_data_source_options_config_1 = require("../config/plugin-collections-data-source-options.config");
 const plugin_runtime_authorizer_port_1 = require("../idp/ports/plugin-runtime-authorizer.port");
 const plugin_host_config_1 = require("./config/plugin-host.config");
+const plugin_action_execution_entity_1 = require("./entities/plugin-action-execution.entity");
 const plugin_audit_event_entity_1 = require("./entities/plugin-audit-event.entity");
 const plugin_installation_entity_1 = require("./entities/plugin-installation.entity");
 const plugin_publication_project_entity_1 = require("./entities/plugin-publication-project.entity");
@@ -23,15 +24,22 @@ const plugin_version_entity_1 = require("./entities/plugin-version.entity");
 const plugin_entity_1 = require("./entities/plugin.entity");
 const plugin_admin_controller_1 = require("./controllers/plugin-admin.controller");
 const plugin_gallery_controller_1 = require("./controllers/plugin-gallery.controller");
+const plugin_history_controller_1 = require("./controllers/plugin-history.controller");
 const plugin_installations_controller_1 = require("./controllers/plugin-installations.controller");
+const plugin_release_check_controller_1 = require("./controllers/plugin-release-check.controller");
 const plugin_publications_controller_1 = require("./controllers/plugin-publications.controller");
 const plugin_credential_runtime_controller_1 = require("./controllers/plugin-credential-runtime.controller");
+const plugin_action_runtime_controller_1 = require("./controllers/plugin-action-runtime.controller");
 const credential_definitions_github_controller_1 = require("./controllers/credential-definitions-github.controller");
 const github_api_service_1 = require("./services/github-api.service");
 const external_credential_definition_sync_service_1 = require("./services/external-credential-definition-sync.service");
 const github_auth_service_1 = require("./services/github-auth.service");
 const plugin_installation_lookup_facade_1 = require("./facades/plugin-installation-lookup.facade");
 const plugin_installation_lookup_facade_impl_1 = require("./facades/plugin-installation-lookup.facade.impl");
+const action_input_validator_service_1 = require("./services/action-input-validator.service");
+const plugin_action_dispatcher_service_1 = require("./services/plugin-action-dispatcher.service");
+const plugin_action_execution_service_1 = require("./services/plugin-action-execution.service");
+const plugin_action_starter_service_1 = require("./services/plugin-action-starter.service");
 const plugin_audit_service_1 = require("./services/plugin-audit.service");
 const plugin_installation_service_1 = require("./services/plugin-installation.service");
 const plugin_credential_binding_reconciliation_service_1 = require("./services/plugin-credential-binding-reconciliation.service");
@@ -42,14 +50,22 @@ const plugin_service_1 = require("./services/plugin.service");
 const publication_authorization_service_1 = require("./services/publication-authorization.service");
 const plugin_runtime_authorizer_service_1 = require("./services/plugin-runtime-authorizer.service");
 const remote_url_validator_service_1 = require("./services/remote-url-validator.service");
+const release_candidate_rules_service_1 = require("./services/release-candidate-rules.service");
 const plugin_presentation_mapper_1 = require("./mappers/plugin-presentation.mapper");
+const find_plugin_by_repository_service_1 = require("./use-cases/find-plugin-by-repository.service");
 const get_plugin_details_service_1 = require("./use-cases/get-plugin-details.service");
 const get_plugin_installation_entry_service_1 = require("./use-cases/get-plugin-installation-entry.service");
 const install_plugin_service_1 = require("./use-cases/install-plugin.service");
 const list_installations_service_1 = require("./use-cases/list-installations.service");
+const list_plugin_history_service_1 = require("./use-cases/list-plugin-history.service");
 const uninstall_plugin_service_1 = require("./use-cases/uninstall-plugin.service");
 const update_plugin_service_1 = require("./use-cases/update-plugin.service");
+const check_plugin_release_service_1 = require("./use-cases/check-plugin-release.service");
 const issue_plugin_runtime_token_service_1 = require("./use-cases/issue-plugin-runtime-token.service");
+const start_plugin_action_execution_service_1 = require("./use-cases/start-plugin-action-execution.service");
+const cancel_plugin_action_execution_service_1 = require("./use-cases/cancel-plugin-action-execution.service");
+const get_current_plugin_action_execution_service_1 = require("./use-cases/get-current-plugin-action-execution.service");
+const get_plugin_action_execution_service_1 = require("./use-cases/get-plugin-action-execution.service");
 const get_plugin_gallery_service_1 = require("./use-cases/get-plugin-gallery.service");
 const list_publications_service_1 = require("./use-cases/list-publications.service");
 const publish_plugin_service_1 = require("./use-cases/publish-plugin.service");
@@ -57,6 +73,7 @@ const resume_plugin_service_1 = require("./use-cases/resume-plugin.service");
 const run_plugin_update_check_service_1 = require("./use-cases/run-plugin-update-check.service");
 const plugin_update_check_processor_1 = require("./system-triggers/plugin-update-check.processor");
 const credential_definition_update_check_processor_1 = require("./system-triggers/credential-definition-update-check.processor");
+const plugin_action_execution_sweep_processor_1 = require("./system-triggers/plugin-action-execution-sweep.processor");
 const suspend_plugin_service_1 = require("./use-cases/suspend-plugin.service");
 const sync_plugin_releases_service_1 = require("./use-cases/sync-plugin-releases.service");
 const unpublish_plugin_service_1 = require("./use-cases/unpublish-plugin.service");
@@ -88,6 +105,7 @@ exports.PluginHostModule = PluginHostModule = __decorate([
                 plugin_publication_project_entity_1.PluginPublicationProject,
                 plugin_installation_entity_1.PluginInstallation,
                 plugin_audit_event_entity_1.PluginAuditEvent,
+                plugin_action_execution_entity_1.PluginActionExecution,
             ]),
             typeorm_1.TypeOrmModule.forFeature([plugin_collection_document_collection_entity_1.PluginCollectionDocument, plugin_collection_usage_collection_entity_1.PluginCollectionUsage, plugin_collection_audit_event_collection_entity_1.PluginCollectionAuditEvent], plugin_collections_data_source_options_config_1.PLUGIN_COLLECTIONS_DATA_SOURCE),
             idp_module_1.IdpModule,
@@ -98,9 +116,12 @@ exports.PluginHostModule = PluginHostModule = __decorate([
             plugin_collections_controller_1.PluginCollectionsController,
             credential_definitions_github_controller_1.CredentialDefinitionsGithubController,
             plugin_credential_runtime_controller_1.PluginCredentialRuntimeController,
+            plugin_action_runtime_controller_1.PluginActionRuntimeController,
             plugin_publications_controller_1.PluginPublicationsController,
             plugin_admin_controller_1.PluginAdminController,
+            plugin_release_check_controller_1.PluginReleaseCheckController,
             plugin_installations_controller_1.PluginInstallationsController,
+            plugin_history_controller_1.PluginHistoryController,
             plugin_gallery_controller_1.PluginGalleryController,
         ],
         providers: [
@@ -120,6 +141,7 @@ exports.PluginHostModule = PluginHostModule = __decorate([
             external_credential_definition_sync_service_1.ExternalCredentialDefinitionSyncService,
             add_github_credential_definition_service_1.AddGithubCredentialDefinitionService,
             remote_url_validator_service_1.RemoteUrlValidatorService,
+            release_candidate_rules_service_1.ReleaseCandidateRulesService,
             plugin_service_1.PluginService,
             plugin_version_service_1.PluginVersionService,
             plugin_audit_service_1.PluginAuditService,
@@ -132,19 +154,31 @@ exports.PluginHostModule = PluginHostModule = __decorate([
             plugin_presentation_mapper_1.PluginPresentationMapper,
             get_plugin_gallery_service_1.GetPluginGalleryService,
             get_plugin_details_service_1.GetPluginDetailsService,
+            find_plugin_by_repository_service_1.FindPluginByRepositoryService,
             suspend_plugin_service_1.SuspendPluginService,
             resume_plugin_service_1.ResumePluginService,
             plugin_installation_service_1.PluginInstallationService,
+            plugin_action_execution_service_1.PluginActionExecutionService,
+            plugin_action_dispatcher_service_1.PluginActionDispatcherService,
+            action_input_validator_service_1.ActionInputValidatorService,
+            plugin_action_starter_service_1.PluginActionStarterService,
+            start_plugin_action_execution_service_1.StartPluginActionExecutionService,
+            get_plugin_action_execution_service_1.GetPluginActionExecutionService,
+            cancel_plugin_action_execution_service_1.CancelPluginActionExecutionService,
+            get_current_plugin_action_execution_service_1.GetCurrentPluginActionExecutionService,
             plugin_credential_binding_reconciliation_service_1.PluginCredentialBindingReconciliationService,
             plugin_update_schedule_service_1.PluginUpdateScheduleService,
             run_plugin_update_check_service_1.RunPluginUpdateCheckService,
             plugin_update_check_processor_1.PluginUpdateCheckProcessor,
             credential_definition_update_check_processor_1.CredentialDefinitionUpdateCheckProcessor,
+            plugin_action_execution_sweep_processor_1.PluginActionExecutionSweepProcessor,
             install_plugin_service_1.InstallPluginService,
             uninstall_plugin_service_1.UninstallPluginService,
             list_installations_service_1.ListInstallationsService,
+            list_plugin_history_service_1.ListPluginHistoryService,
             get_plugin_installation_entry_service_1.GetPluginInstallationEntryService,
             update_plugin_service_1.UpdatePluginService,
+            check_plugin_release_service_1.CheckPluginReleaseService,
             issue_plugin_runtime_token_service_1.IssuePluginRuntimeTokenService,
             plugin_installation_lookup_facade_impl_1.PluginInstallationLookupFacade,
             { provide: plugin_installation_lookup_facade_1.PLUGIN_INSTALLATION_LOOKUP, useExisting: plugin_installation_lookup_facade_impl_1.PluginInstallationLookupFacade },

package/dist/src/plugin-host/services/action-input-validator.service.d.ts

@@ -0,0 +1,23 @@
+import { OnModuleDestroy } from '@nestjs/common';
+import { type ActionInputError } from '../errors/plugin-action.errors';
+export interface ActionInputSchema {
+    readonly path: string;
+    readonly schema: Record<string, unknown>;
+}
+export declare class ActionInputValidatorService implements OnModuleDestroy {
+    private readonly logger;
+    private readonly slots;
+    private readonly queue;
+    private readonly pendingByVersion;
+    private stopped;
+    validate(pluginVersionId: string, action: string, schema: Record<string, unknown>, input: unknown): Promise<readonly ActionInputError[]>;
+    compile(schemas: readonly ActionInputSchema[]): Promise<string | null>;
+    onModuleDestroy(): Promise<void>;
+    private refuseToQueue;
+    private drain;
+    private run;
+    private startBudget;
+    private spawn;
+    private replace;
+    private release;
+}

package/dist/src/plugin-host/services/action-input-validator.service.js

@@ -0,0 +1,277 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var ActionInputValidatorService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ActionInputValidatorService = void 0;
+const common_1 = require("@nestjs/common");
+const internal_helpers_1 = require("@owox/internal-helpers");
+const node_worker_threads_1 = require("node:worker_threads");
+const plugin_action_limits_1 = require("../constants/plugin-action-limits");
+const plugin_action_errors_1 = require("../errors/plugin-action.errors");
+const action_input_schema_util_1 = require("../utils/action-input-schema.util");
+const AJV_PATH = require.resolve('ajv/dist/2020');
+const WORKER_SOURCE = `
+const { parentPort, workerData } = require('node:worker_threads');
+const Ajv2020 = require(workerData.ajvPath).default;
+const { ajv: setup, cacheSize, maxErrors } = workerData;
+const compiled = new Map();
+
+const reason = error => String((error && error.message) || error);
+
+function build(schema) {
+  const ajv = new Ajv2020(setup.options);
+  ajv.getSchema(setup.metaSchema);
+  for (const keyword of setup.refusedKeywords) ajv.removeKeyword(keyword);
+  return ajv.compile(schema);
+}
+
+function compile(key, schema) {
+  const cached = compiled.get(key);
+  if (cached) {
+    compiled.delete(key);
+    compiled.set(key, cached);
+    return cached;
+  }
+  const validate = build(schema);
+  if (compiled.size >= cacheSize) compiled.delete(compiled.keys().next().value);
+  compiled.set(key, validate);
+  return validate;
+}
+
+// A release's schemas, as JSON text: the first one ajv refuses, or none. Not cached, it is no version yet.
+function compileAll(schemas) {
+  for (let index = 0; index < schemas.length; index += 1) {
+    try {
+      build(JSON.parse(schemas[index]));
+    } catch (error) {
+      return parentPort.postMessage({ schemaError: reason(error), index });
+    }
+  }
+  parentPort.postMessage({ schemaError: null });
+}
+
+parentPort.on('message', message => {
+  if (message.schemas) return compileAll(message.schemas);
+  const { key, schema, input } = message;
+  let validate;
+  try {
+    validate = compile(key, schema);
+  } catch (error) {
+    parentPort.postMessage({ schemaError: reason(error) });
+    return;
+  }
+  parentPort.postMessage({ compiled: true });
+  // A throw from here ends the worker, which the pool reads as an exceeded budget.
+  const valid = validate(input);
+  if (typeof valid !== 'boolean') {
+    // An async schema answers a Promise: no verdict in time. It answers once settled, so its work stays
+    // inside its own budget, and its rejection must not end the worker.
+    return Promise.resolve(valid).catch(() => {}).then(() => parentPort.postMessage({ overBudget: true }));
+  }
+  if (valid) return parentPort.postMessage({ errors: [] });
+  const errors = (validate.errors || []).slice(0, maxErrors).map(error => ({
+    instancePath: error.instancePath,
+    message: error.message || 'is invalid',
+  }));
+  parentPort.postMessage({
+    errors: errors.length > 0 ? errors : [{ instancePath: '', message: 'is invalid' }],
+  });
+});
+
+parentPort.postMessage({ ready: true });
+`;
+const OVER_BUDGET = [
+    { instancePath: '', message: 'Input validation exceeded its budget' },
+];
+const COMPILE_OVER_BUDGET = 'Input schema compilation exceeded its budget';
+function stoppedError() {
+    return new Error('Input validation stopped');
+}
+let ActionInputValidatorService = ActionInputValidatorService_1 = class ActionInputValidatorService {
+    logger = new common_1.Logger(ActionInputValidatorService_1.name);
+    slots = new Set();
+    queue = [];
+    pendingByVersion = new Map();
+    stopped = false;
+    validate(pluginVersionId, action, schema, input) {
+        return new Promise((resolve, reject) => {
+            const pending = this.pendingByVersion.get(pluginVersionId) ?? 0;
+            if (pending >= plugin_action_limits_1.PLUGIN_ACTION_LIMITS.maxValidationsPerVersion) {
+                this.logger.warn(`TOO_MANY_EXECUTIONS: ${plugin_action_limits_1.PLUGIN_ACTION_LIMITS.maxValidationsPerVersion} validations per version reached, pluginVersionId=${pluginVersionId}`);
+                reject(new plugin_action_errors_1.TooManyExecutionsError('Too many inputs of this plugin are being validated. Try again shortly.'));
+                return;
+            }
+            const refusal = this.refuseToQueue(`pluginVersionId=${pluginVersionId}`);
+            if (refusal) {
+                reject(refusal);
+                return;
+            }
+            this.pendingByVersion.set(pluginVersionId, pending + 1);
+            const release = () => this.release(pluginVersionId);
+            this.queue.push({
+                message: { key: `${pluginVersionId}:${action}`, schema, input },
+                budgetMs: plugin_action_limits_1.PLUGIN_ACTION_LIMITS.validationBootMs,
+                resolve: verdict => {
+                    release();
+                    if ('errors' in verdict)
+                        resolve(verdict.errors);
+                    else if ('overBudget' in verdict)
+                        resolve(OVER_BUDGET);
+                    else
+                        reject(new Error(String(verdict.schemaError)));
+                },
+                reject: error => {
+                    release();
+                    reject(error);
+                },
+            });
+            this.drain();
+        });
+    }
+    async compile(schemas) {
+        if (schemas.length === 0)
+            return null;
+        const texts = [];
+        for (const { path, schema } of schemas) {
+            try {
+                texts.push(JSON.stringify(schema));
+            }
+            catch (error) {
+                return `${path}: ${(0, internal_helpers_1.castError)(error).message}`;
+            }
+        }
+        return new Promise((resolve, reject) => {
+            const refusal = this.refuseToQueue('release compile');
+            if (refusal) {
+                reject(refusal);
+                return;
+            }
+            this.queue.push({
+                message: { schemas: texts },
+                budgetMs: plugin_action_limits_1.PLUGIN_ACTION_LIMITS.inputSchemaCompileBudgetMs,
+                resolve: verdict => {
+                    if ('overBudget' in verdict)
+                        resolve(COMPILE_OVER_BUDGET);
+                    else if ('schemaError' in verdict && verdict.schemaError !== null) {
+                        resolve(`${schemas[verdict.index ?? 0].path}: ${verdict.schemaError}`);
+                    }
+                    else
+                        resolve(null);
+                },
+                reject,
+            });
+            this.drain();
+        });
+    }
+    async onModuleDestroy() {
+        this.stopped = true;
+        const slots = [...this.slots];
+        this.slots.clear();
+        for (const job of this.queue.splice(0))
+            job.reject(stoppedError());
+        for (const slot of slots) {
+            clearTimeout(slot.timer);
+            slot.job?.reject(stoppedError());
+        }
+        await Promise.all(slots.map(slot => slot.worker.terminate()));
+    }
+    refuseToQueue(subject) {
+        if (this.queue.length >= plugin_action_limits_1.PLUGIN_ACTION_LIMITS.maxQueuedValidations) {
+            this.logger.warn(`TOO_MANY_EXECUTIONS: ${plugin_action_limits_1.PLUGIN_ACTION_LIMITS.maxQueuedValidations} queued validations reached, ${subject}`);
+            return new plugin_action_errors_1.TooManyExecutionsError('Input validation is busy. Try again shortly.');
+        }
+        return this.stopped ? stoppedError() : null;
+    }
+    drain() {
+        for (const slot of this.slots) {
+            const next = slot.job ? undefined : this.queue.shift();
+            if (next)
+                this.run(slot, next);
+        }
+        while (this.queue.length > 0 && this.slots.size < plugin_action_limits_1.PLUGIN_ACTION_LIMITS.validationWorkers) {
+            this.run(this.spawn(), this.queue.shift());
+        }
+    }
+    run(slot, job) {
+        slot.job = job;
+        slot.worker.ref();
+        slot.worker.postMessage(job.message);
+        if (slot.ready)
+            this.startBudget(slot);
+    }
+    startBudget(slot, budgetMs = slot.job?.budgetMs) {
+        slot.timer = setTimeout(() => this.replace(slot), budgetMs);
+    }
+    spawn() {
+        const worker = new node_worker_threads_1.Worker(WORKER_SOURCE, {
+            eval: true,
+            workerData: {
+                ajvPath: AJV_PATH,
+                ajv: action_input_schema_util_1.ACTION_INPUT_AJV,
+                cacheSize: plugin_action_limits_1.PLUGIN_ACTION_LIMITS.validationWorkerCacheSize,
+                maxErrors: plugin_action_limits_1.PLUGIN_ACTION_LIMITS.maxReportedInputErrors,
+            },
+            resourceLimits: { maxOldGenerationSizeMb: plugin_action_limits_1.PLUGIN_ACTION_LIMITS.validationWorkerHeapMb },
+        });
+        const slot = { worker, ready: false };
+        slot.timer = setTimeout(() => setImmediate(() => {
+            if (!slot.ready)
+                this.replace(slot);
+        }), plugin_action_limits_1.PLUGIN_ACTION_LIMITS.validationBootMs);
+        worker.on('message', (reply) => {
+            if (!this.slots.has(slot))
+                return;
+            clearTimeout(slot.timer);
+            if ('ready' in reply) {
+                slot.ready = true;
+                if (slot.job)
+                    this.startBudget(slot);
+                return;
+            }
+            if ('compiled' in reply) {
+                this.startBudget(slot, plugin_action_limits_1.PLUGIN_ACTION_LIMITS.validationBudgetMs);
+                return;
+            }
+            const { job } = slot;
+            slot.job = undefined;
+            worker.unref();
+            job?.resolve(reply);
+            this.drain();
+        });
+        worker.on('error', error => this.replace(slot, error));
+        worker.on('exit', () => this.replace(slot));
+        worker.unref();
+        this.slots.add(slot);
+        return slot;
+    }
+    replace(slot, error) {
+        if (!this.slots.delete(slot))
+            return;
+        clearTimeout(slot.timer);
+        const { job } = slot;
+        slot.job = undefined;
+        if (slot.ready)
+            job?.resolve({ overBudget: true });
+        else
+            job?.reject(error ?? new Error('The input validation worker did not start'));
+        void slot.worker.terminate();
+        this.drain();
+    }
+    release(pluginVersionId) {
+        const pending = (this.pendingByVersion.get(pluginVersionId) ?? 1) - 1;
+        if (pending > 0)
+            this.pendingByVersion.set(pluginVersionId, pending);
+        else
+            this.pendingByVersion.delete(pluginVersionId);
+    }
+};
+exports.ActionInputValidatorService = ActionInputValidatorService;
+exports.ActionInputValidatorService = ActionInputValidatorService = ActionInputValidatorService_1 = __decorate([
+    (0, common_1.Injectable)()
+], ActionInputValidatorService);
+//# sourceMappingURL=action-input-validator.service.js.map

package/dist/src/plugin-host/services/external-credential-definition-sync.service.d.ts

@@ -11,5 +11,8 @@ export declare class ExternalCredentialDefinitionSyncService {
     private readonly registry;
     constructor(github: GithubApiService, registry: CredentialExternalDefinitionRegistryService);
     syncLocator(locator: string): Promise<ResolvedCredentialDefinition>;
+    private settleLocator;
     resolveRequirements(requirements: readonly PluginCredentialRequirement[]): Promise<StoredCredentialRequirement[]>;
+    previewRequirements(requirements: readonly PluginCredentialRequirement[]): Promise<void>;
+    private settleRequirements;
 }