@owox/backend 0.38.0 → 0.39.0

package/dist/src/plugin-host/plugin-host.module.js

@@ -15,6 +15,7 @@ const data_marts_module_1 = require("../data-marts/data-marts.module");
 const plugin_collections_data_source_options_config_1 = require("../config/plugin-collections-data-source-options.config");
 const plugin_runtime_authorizer_port_1 = require("../idp/ports/plugin-runtime-authorizer.port");
 const plugin_host_config_1 = require("./config/plugin-host.config");
+const plugin_action_execution_entity_1 = require("./entities/plugin-action-execution.entity");
 const plugin_audit_event_entity_1 = require("./entities/plugin-audit-event.entity");
 const plugin_installation_entity_1 = require("./entities/plugin-installation.entity");
 const plugin_publication_project_entity_1 = require("./entities/plugin-publication-project.entity");
@@ -23,15 +24,22 @@ const plugin_version_entity_1 = require("./entities/plugin-version.entity");
 const plugin_entity_1 = require("./entities/plugin.entity");
 const plugin_admin_controller_1 = require("./controllers/plugin-admin.controller");
 const plugin_gallery_controller_1 = require("./controllers/plugin-gallery.controller");
+const plugin_history_controller_1 = require("./controllers/plugin-history.controller");
 const plugin_installations_controller_1 = require("./controllers/plugin-installations.controller");
+const plugin_release_check_controller_1 = require("./controllers/plugin-release-check.controller");
 const plugin_publications_controller_1 = require("./controllers/plugin-publications.controller");
 const plugin_credential_runtime_controller_1 = require("./controllers/plugin-credential-runtime.controller");
+const plugin_action_runtime_controller_1 = require("./controllers/plugin-action-runtime.controller");
 const credential_definitions_github_controller_1 = require("./controllers/credential-definitions-github.controller");
 const github_api_service_1 = require("./services/github-api.service");
 const external_credential_definition_sync_service_1 = require("./services/external-credential-definition-sync.service");
 const github_auth_service_1 = require("./services/github-auth.service");
 const plugin_installation_lookup_facade_1 = require("./facades/plugin-installation-lookup.facade");
 const plugin_installation_lookup_facade_impl_1 = require("./facades/plugin-installation-lookup.facade.impl");
+const action_input_validator_service_1 = require("./services/action-input-validator.service");
+const plugin_action_dispatcher_service_1 = require("./services/plugin-action-dispatcher.service");
+const plugin_action_execution_service_1 = require("./services/plugin-action-execution.service");
+const plugin_action_starter_service_1 = require("./services/plugin-action-starter.service");
 const plugin_audit_service_1 = require("./services/plugin-audit.service");
 const plugin_installation_service_1 = require("./services/plugin-installation.service");
 const plugin_credential_binding_reconciliation_service_1 = require("./services/plugin-credential-binding-reconciliation.service");
@@ -42,15 +50,22 @@ const plugin_service_1 = require("./services/plugin.service");
 const publication_authorization_service_1 = require("./services/publication-authorization.service");
 const plugin_runtime_authorizer_service_1 = require("./services/plugin-runtime-authorizer.service");
 const remote_url_validator_service_1 = require("./services/remote-url-validator.service");
+const release_candidate_rules_service_1 = require("./services/release-candidate-rules.service");
 const plugin_presentation_mapper_1 = require("./mappers/plugin-presentation.mapper");
 const find_plugin_by_repository_service_1 = require("./use-cases/find-plugin-by-repository.service");
 const get_plugin_details_service_1 = require("./use-cases/get-plugin-details.service");
 const get_plugin_installation_entry_service_1 = require("./use-cases/get-plugin-installation-entry.service");
 const install_plugin_service_1 = require("./use-cases/install-plugin.service");
 const list_installations_service_1 = require("./use-cases/list-installations.service");
+const list_plugin_history_service_1 = require("./use-cases/list-plugin-history.service");
 const uninstall_plugin_service_1 = require("./use-cases/uninstall-plugin.service");
 const update_plugin_service_1 = require("./use-cases/update-plugin.service");
+const check_plugin_release_service_1 = require("./use-cases/check-plugin-release.service");
 const issue_plugin_runtime_token_service_1 = require("./use-cases/issue-plugin-runtime-token.service");
+const start_plugin_action_execution_service_1 = require("./use-cases/start-plugin-action-execution.service");
+const cancel_plugin_action_execution_service_1 = require("./use-cases/cancel-plugin-action-execution.service");
+const get_current_plugin_action_execution_service_1 = require("./use-cases/get-current-plugin-action-execution.service");
+const get_plugin_action_execution_service_1 = require("./use-cases/get-plugin-action-execution.service");
 const get_plugin_gallery_service_1 = require("./use-cases/get-plugin-gallery.service");
 const list_publications_service_1 = require("./use-cases/list-publications.service");
 const publish_plugin_service_1 = require("./use-cases/publish-plugin.service");
@@ -58,6 +73,7 @@ const resume_plugin_service_1 = require("./use-cases/resume-plugin.service");
 const run_plugin_update_check_service_1 = require("./use-cases/run-plugin-update-check.service");
 const plugin_update_check_processor_1 = require("./system-triggers/plugin-update-check.processor");
 const credential_definition_update_check_processor_1 = require("./system-triggers/credential-definition-update-check.processor");
+const plugin_action_execution_sweep_processor_1 = require("./system-triggers/plugin-action-execution-sweep.processor");
 const suspend_plugin_service_1 = require("./use-cases/suspend-plugin.service");
 const sync_plugin_releases_service_1 = require("./use-cases/sync-plugin-releases.service");
 const unpublish_plugin_service_1 = require("./use-cases/unpublish-plugin.service");
@@ -89,6 +105,7 @@ exports.PluginHostModule = PluginHostModule = __decorate([
                 plugin_publication_project_entity_1.PluginPublicationProject,
                 plugin_installation_entity_1.PluginInstallation,
                 plugin_audit_event_entity_1.PluginAuditEvent,
+                plugin_action_execution_entity_1.PluginActionExecution,
             ]),
             typeorm_1.TypeOrmModule.forFeature([plugin_collection_document_collection_entity_1.PluginCollectionDocument, plugin_collection_usage_collection_entity_1.PluginCollectionUsage, plugin_collection_audit_event_collection_entity_1.PluginCollectionAuditEvent], plugin_collections_data_source_options_config_1.PLUGIN_COLLECTIONS_DATA_SOURCE),
             idp_module_1.IdpModule,
@@ -99,9 +116,12 @@ exports.PluginHostModule = PluginHostModule = __decorate([
             plugin_collections_controller_1.PluginCollectionsController,
             credential_definitions_github_controller_1.CredentialDefinitionsGithubController,
             plugin_credential_runtime_controller_1.PluginCredentialRuntimeController,
+            plugin_action_runtime_controller_1.PluginActionRuntimeController,
             plugin_publications_controller_1.PluginPublicationsController,
             plugin_admin_controller_1.PluginAdminController,
+            plugin_release_check_controller_1.PluginReleaseCheckController,
             plugin_installations_controller_1.PluginInstallationsController,
+            plugin_history_controller_1.PluginHistoryController,
             plugin_gallery_controller_1.PluginGalleryController,
         ],
         providers: [
@@ -121,6 +141,7 @@ exports.PluginHostModule = PluginHostModule = __decorate([
             external_credential_definition_sync_service_1.ExternalCredentialDefinitionSyncService,
             add_github_credential_definition_service_1.AddGithubCredentialDefinitionService,
             remote_url_validator_service_1.RemoteUrlValidatorService,
+            release_candidate_rules_service_1.ReleaseCandidateRulesService,
             plugin_service_1.PluginService,
             plugin_version_service_1.PluginVersionService,
             plugin_audit_service_1.PluginAuditService,
@@ -137,16 +158,27 @@ exports.PluginHostModule = PluginHostModule = __decorate([
             suspend_plugin_service_1.SuspendPluginService,
             resume_plugin_service_1.ResumePluginService,
             plugin_installation_service_1.PluginInstallationService,
+            plugin_action_execution_service_1.PluginActionExecutionService,
+            plugin_action_dispatcher_service_1.PluginActionDispatcherService,
+            action_input_validator_service_1.ActionInputValidatorService,
+            plugin_action_starter_service_1.PluginActionStarterService,
+            start_plugin_action_execution_service_1.StartPluginActionExecutionService,
+            get_plugin_action_execution_service_1.GetPluginActionExecutionService,
+            cancel_plugin_action_execution_service_1.CancelPluginActionExecutionService,
+            get_current_plugin_action_execution_service_1.GetCurrentPluginActionExecutionService,
             plugin_credential_binding_reconciliation_service_1.PluginCredentialBindingReconciliationService,
             plugin_update_schedule_service_1.PluginUpdateScheduleService,
             run_plugin_update_check_service_1.RunPluginUpdateCheckService,
             plugin_update_check_processor_1.PluginUpdateCheckProcessor,
             credential_definition_update_check_processor_1.CredentialDefinitionUpdateCheckProcessor,
+            plugin_action_execution_sweep_processor_1.PluginActionExecutionSweepProcessor,
             install_plugin_service_1.InstallPluginService,
             uninstall_plugin_service_1.UninstallPluginService,
             list_installations_service_1.ListInstallationsService,
+            list_plugin_history_service_1.ListPluginHistoryService,
             get_plugin_installation_entry_service_1.GetPluginInstallationEntryService,
             update_plugin_service_1.UpdatePluginService,
+            check_plugin_release_service_1.CheckPluginReleaseService,
             issue_plugin_runtime_token_service_1.IssuePluginRuntimeTokenService,
             plugin_installation_lookup_facade_impl_1.PluginInstallationLookupFacade,
             { provide: plugin_installation_lookup_facade_1.PLUGIN_INSTALLATION_LOOKUP, useExisting: plugin_installation_lookup_facade_impl_1.PluginInstallationLookupFacade },

package/dist/src/plugin-host/services/action-input-validator.service.d.ts

@@ -0,0 +1,23 @@
+import { OnModuleDestroy } from '@nestjs/common';
+import { type ActionInputError } from '../errors/plugin-action.errors';
+export interface ActionInputSchema {
+    readonly path: string;
+    readonly schema: Record<string, unknown>;
+}
+export declare class ActionInputValidatorService implements OnModuleDestroy {
+    private readonly logger;
+    private readonly slots;
+    private readonly queue;
+    private readonly pendingByVersion;
+    private stopped;
+    validate(pluginVersionId: string, action: string, schema: Record<string, unknown>, input: unknown): Promise<readonly ActionInputError[]>;
+    compile(schemas: readonly ActionInputSchema[]): Promise<string | null>;
+    onModuleDestroy(): Promise<void>;
+    private refuseToQueue;
+    private drain;
+    private run;
+    private startBudget;
+    private spawn;
+    private replace;
+    private release;
+}

package/dist/src/plugin-host/services/action-input-validator.service.js

@@ -0,0 +1,277 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var ActionInputValidatorService_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ActionInputValidatorService = void 0;
+const common_1 = require("@nestjs/common");
+const internal_helpers_1 = require("@owox/internal-helpers");
+const node_worker_threads_1 = require("node:worker_threads");
+const plugin_action_limits_1 = require("../constants/plugin-action-limits");
+const plugin_action_errors_1 = require("../errors/plugin-action.errors");
+const action_input_schema_util_1 = require("../utils/action-input-schema.util");
+const AJV_PATH = require.resolve('ajv/dist/2020');
+const WORKER_SOURCE = `
+const { parentPort, workerData } = require('node:worker_threads');
+const Ajv2020 = require(workerData.ajvPath).default;
+const { ajv: setup, cacheSize, maxErrors } = workerData;
+const compiled = new Map();
+
+const reason = error => String((error && error.message) || error);
+
+function build(schema) {
+  const ajv = new Ajv2020(setup.options);
+  ajv.getSchema(setup.metaSchema);
+  for (const keyword of setup.refusedKeywords) ajv.removeKeyword(keyword);
+  return ajv.compile(schema);
+}
+
+function compile(key, schema) {
+  const cached = compiled.get(key);
+  if (cached) {
+    compiled.delete(key);
+    compiled.set(key, cached);
+    return cached;
+  }
+  const validate = build(schema);
+  if (compiled.size >= cacheSize) compiled.delete(compiled.keys().next().value);
+  compiled.set(key, validate);
+  return validate;
+}
+
+// A release's schemas, as JSON text: the first one ajv refuses, or none. Not cached, it is no version yet.
+function compileAll(schemas) {
+  for (let index = 0; index < schemas.length; index += 1) {
+    try {
+      build(JSON.parse(schemas[index]));
+    } catch (error) {
+      return parentPort.postMessage({ schemaError: reason(error), index });
+    }
+  }
+  parentPort.postMessage({ schemaError: null });
+}
+
+parentPort.on('message', message => {
+  if (message.schemas) return compileAll(message.schemas);
+  const { key, schema, input } = message;
+  let validate;
+  try {
+    validate = compile(key, schema);
+  } catch (error) {
+    parentPort.postMessage({ schemaError: reason(error) });
+    return;
+  }
+  parentPort.postMessage({ compiled: true });
+  // A throw from here ends the worker, which the pool reads as an exceeded budget.
+  const valid = validate(input);
+  if (typeof valid !== 'boolean') {
+    // An async schema answers a Promise: no verdict in time. It answers once settled, so its work stays
+    // inside its own budget, and its rejection must not end the worker.
+    return Promise.resolve(valid).catch(() => {}).then(() => parentPort.postMessage({ overBudget: true }));
+  }
+  if (valid) return parentPort.postMessage({ errors: [] });
+  const errors = (validate.errors || []).slice(0, maxErrors).map(error => ({
+    instancePath: error.instancePath,
+    message: error.message || 'is invalid',
+  }));
+  parentPort.postMessage({
+    errors: errors.length > 0 ? errors : [{ instancePath: '', message: 'is invalid' }],
+  });
+});
+
+parentPort.postMessage({ ready: true });
+`;
+const OVER_BUDGET = [
+    { instancePath: '', message: 'Input validation exceeded its budget' },
+];
+const COMPILE_OVER_BUDGET = 'Input schema compilation exceeded its budget';
+function stoppedError() {
+    return new Error('Input validation stopped');
+}
+let ActionInputValidatorService = ActionInputValidatorService_1 = class ActionInputValidatorService {
+    logger = new common_1.Logger(ActionInputValidatorService_1.name);
+    slots = new Set();
+    queue = [];
+    pendingByVersion = new Map();
+    stopped = false;
+    validate(pluginVersionId, action, schema, input) {
+        return new Promise((resolve, reject) => {
+            const pending = this.pendingByVersion.get(pluginVersionId) ?? 0;
+            if (pending >= plugin_action_limits_1.PLUGIN_ACTION_LIMITS.maxValidationsPerVersion) {
+                this.logger.warn(`TOO_MANY_EXECUTIONS: ${plugin_action_limits_1.PLUGIN_ACTION_LIMITS.maxValidationsPerVersion} validations per version reached, pluginVersionId=${pluginVersionId}`);
+                reject(new plugin_action_errors_1.TooManyExecutionsError('Too many inputs of this plugin are being validated. Try again shortly.'));
+                return;
+            }
+            const refusal = this.refuseToQueue(`pluginVersionId=${pluginVersionId}`);
+            if (refusal) {
+                reject(refusal);
+                return;
+            }
+            this.pendingByVersion.set(pluginVersionId, pending + 1);
+            const release = () => this.release(pluginVersionId);
+            this.queue.push({
+                message: { key: `${pluginVersionId}:${action}`, schema, input },
+                budgetMs: plugin_action_limits_1.PLUGIN_ACTION_LIMITS.validationBootMs,
+                resolve: verdict => {
+                    release();
+                    if ('errors' in verdict)
+                        resolve(verdict.errors);
+                    else if ('overBudget' in verdict)
+                        resolve(OVER_BUDGET);
+                    else
+                        reject(new Error(String(verdict.schemaError)));
+                },
+                reject: error => {
+                    release();
+                    reject(error);
+                },
+            });
+            this.drain();
+        });
+    }
+    async compile(schemas) {
+        if (schemas.length === 0)
+            return null;
+        const texts = [];
+        for (const { path, schema } of schemas) {
+            try {
+                texts.push(JSON.stringify(schema));
+            }
+            catch (error) {
+                return `${path}: ${(0, internal_helpers_1.castError)(error).message}`;
+            }
+        }
+        return new Promise((resolve, reject) => {
+            const refusal = this.refuseToQueue('release compile');
+            if (refusal) {
+                reject(refusal);
+                return;
+            }
+            this.queue.push({
+                message: { schemas: texts },
+                budgetMs: plugin_action_limits_1.PLUGIN_ACTION_LIMITS.inputSchemaCompileBudgetMs,
+                resolve: verdict => {
+                    if ('overBudget' in verdict)
+                        resolve(COMPILE_OVER_BUDGET);
+                    else if ('schemaError' in verdict && verdict.schemaError !== null) {
+                        resolve(`${schemas[verdict.index ?? 0].path}: ${verdict.schemaError}`);
+                    }
+                    else
+                        resolve(null);
+                },
+                reject,
+            });
+            this.drain();
+        });
+    }
+    async onModuleDestroy() {
+        this.stopped = true;
+        const slots = [...this.slots];
+        this.slots.clear();
+        for (const job of this.queue.splice(0))
+            job.reject(stoppedError());
+        for (const slot of slots) {
+            clearTimeout(slot.timer);
+            slot.job?.reject(stoppedError());
+        }
+        await Promise.all(slots.map(slot => slot.worker.terminate()));
+    }
+    refuseToQueue(subject) {
+        if (this.queue.length >= plugin_action_limits_1.PLUGIN_ACTION_LIMITS.maxQueuedValidations) {
+            this.logger.warn(`TOO_MANY_EXECUTIONS: ${plugin_action_limits_1.PLUGIN_ACTION_LIMITS.maxQueuedValidations} queued validations reached, ${subject}`);
+            return new plugin_action_errors_1.TooManyExecutionsError('Input validation is busy. Try again shortly.');
+        }
+        return this.stopped ? stoppedError() : null;
+    }
+    drain() {
+        for (const slot of this.slots) {
+            const next = slot.job ? undefined : this.queue.shift();
+            if (next)
+                this.run(slot, next);
+        }
+        while (this.queue.length > 0 && this.slots.size < plugin_action_limits_1.PLUGIN_ACTION_LIMITS.validationWorkers) {
+            this.run(this.spawn(), this.queue.shift());
+        }
+    }
+    run(slot, job) {
+        slot.job = job;
+        slot.worker.ref();
+        slot.worker.postMessage(job.message);
+        if (slot.ready)
+            this.startBudget(slot);
+    }
+    startBudget(slot, budgetMs = slot.job?.budgetMs) {
+        slot.timer = setTimeout(() => this.replace(slot), budgetMs);
+    }
+    spawn() {
+        const worker = new node_worker_threads_1.Worker(WORKER_SOURCE, {
+            eval: true,
+            workerData: {
+                ajvPath: AJV_PATH,
+                ajv: action_input_schema_util_1.ACTION_INPUT_AJV,
+                cacheSize: plugin_action_limits_1.PLUGIN_ACTION_LIMITS.validationWorkerCacheSize,
+                maxErrors: plugin_action_limits_1.PLUGIN_ACTION_LIMITS.maxReportedInputErrors,
+            },
+            resourceLimits: { maxOldGenerationSizeMb: plugin_action_limits_1.PLUGIN_ACTION_LIMITS.validationWorkerHeapMb },
+        });
+        const slot = { worker, ready: false };
+        slot.timer = setTimeout(() => setImmediate(() => {
+            if (!slot.ready)
+                this.replace(slot);
+        }), plugin_action_limits_1.PLUGIN_ACTION_LIMITS.validationBootMs);
+        worker.on('message', (reply) => {
+            if (!this.slots.has(slot))
+                return;
+            clearTimeout(slot.timer);
+            if ('ready' in reply) {
+                slot.ready = true;
+                if (slot.job)
+                    this.startBudget(slot);
+                return;
+            }
+            if ('compiled' in reply) {
+                this.startBudget(slot, plugin_action_limits_1.PLUGIN_ACTION_LIMITS.validationBudgetMs);
+                return;
+            }
+            const { job } = slot;
+            slot.job = undefined;
+            worker.unref();
+            job?.resolve(reply);
+            this.drain();
+        });
+        worker.on('error', error => this.replace(slot, error));
+        worker.on('exit', () => this.replace(slot));
+        worker.unref();
+        this.slots.add(slot);
+        return slot;
+    }
+    replace(slot, error) {
+        if (!this.slots.delete(slot))
+            return;
+        clearTimeout(slot.timer);
+        const { job } = slot;
+        slot.job = undefined;
+        if (slot.ready)
+            job?.resolve({ overBudget: true });
+        else
+            job?.reject(error ?? new Error('The input validation worker did not start'));
+        void slot.worker.terminate();
+        this.drain();
+    }
+    release(pluginVersionId) {
+        const pending = (this.pendingByVersion.get(pluginVersionId) ?? 1) - 1;
+        if (pending > 0)
+            this.pendingByVersion.set(pluginVersionId, pending);
+        else
+            this.pendingByVersion.delete(pluginVersionId);
+    }
+};
+exports.ActionInputValidatorService = ActionInputValidatorService;
+exports.ActionInputValidatorService = ActionInputValidatorService = ActionInputValidatorService_1 = __decorate([
+    (0, common_1.Injectable)()
+], ActionInputValidatorService);
+//# sourceMappingURL=action-input-validator.service.js.map

package/dist/src/plugin-host/services/external-credential-definition-sync.service.d.ts

@@ -11,5 +11,8 @@ export declare class ExternalCredentialDefinitionSyncService {
     private readonly registry;
     constructor(github: GithubApiService, registry: CredentialExternalDefinitionRegistryService);
     syncLocator(locator: string): Promise<ResolvedCredentialDefinition>;
+    private settleLocator;
     resolveRequirements(requirements: readonly PluginCredentialRequirement[]): Promise<StoredCredentialRequirement[]>;
+    previewRequirements(requirements: readonly PluginCredentialRequirement[]): Promise<void>;
+    private settleRequirements;
 }

package/dist/src/plugin-host/services/external-credential-definition-sync.service.js

@@ -17,6 +17,7 @@ const credential_external_definition_registry_service_1 = require("../../data-ma
 const external_credential_manifest_1 = require("../../data-marts/credentials/services/external-credential-manifest");
 const credential_types_1 = require("../../data-marts/credentials/credential.types");
 const github_read_policy_enum_1 = require("../enums/github-read-policy.enum");
+const plugin_host_errors_1 = require("../errors/plugin-host.errors");
 const github_repo_locator_util_1 = require("../utils/github-repo-locator.util");
 const semver_util_1 = require("../utils/semver.util");
 const github_api_service_1 = require("./github-api.service");
@@ -30,7 +31,10 @@ let ExternalCredentialDefinitionSyncService = class ExternalCredentialDefinition
         this.github = github;
         this.registry = registry;
     }
-    async syncLocator(locator) {
+    syncLocator(locator) {
+        return this.settleLocator(locator, input => this.registry.register(input));
+    }
+    async settleLocator(locator, settle) {
         const ref = parseExternalLocator(locator);
         const repo = await this.github.getRepo(ref, github_read_policy_enum_1.GithubReadPolicy.CONFIGURED);
         const releases = (await this.github.listReleases(ref, github_read_policy_enum_1.GithubReadPolicy.CONFIGURED))
@@ -54,7 +58,7 @@ let ExternalCredentialDefinitionSyncService = class ExternalCredentialDefinition
                 continue;
             }
             try {
-                return await this.registry.register({
+                return await settle({
                     githubRepoId: repo.githubRepoId,
                     repoOwner: repo.owner,
                     repoName: repo.name,
@@ -77,19 +81,51 @@ let ExternalCredentialDefinitionSyncService = class ExternalCredentialDefinition
         throw new ExternalCredentialRequirementError('No eligible Credential definition release was found');
     }
     async resolveRequirements(requirements) {
-        const resolved = [];
+        const settled = await this.settleRequirements(requirements, locator => this.syncLocator(locator));
+        return settled.map(({ requirement, definition }) => {
+            if (!definition)
+                return requirement;
+            const external = {
+                id: definition.contract.id,
+                definitionId: definition.definitionId,
+                optional: typeof requirement === 'string' ? false : requirement.optional,
+                models: typeof requirement === 'string' ? undefined : requirement.models,
+            };
+            return external;
+        });
+    }
+    async previewRequirements(requirements) {
+        await this.settleRequirements(requirements, async (locator) => {
+            try {
+                return await this.settleLocator(locator, input => this.registry.preview(input));
+            }
+            catch (error) {
+                if (error instanceof plugin_host_errors_1.InvalidRepoLocatorError ||
+                    error instanceof plugin_host_errors_1.GithubRepoNotFoundError ||
+                    error instanceof plugin_host_errors_1.GithubRepoNotAccessibleError) {
+                    const installationUrl = error instanceof plugin_host_errors_1.GithubRepoNotAccessibleError
+                        ? error.errorDetails?.installationUrl
+                        : undefined;
+                    throw new ExternalCredentialRequirementError(`${locator}: ${error.message}${installationUrl ? ` ${installationUrl}` : ''}`);
+                }
+                throw error;
+            }
+        });
+    }
+    async settleRequirements(requirements, settle) {
+        const settled = [];
         for (const requirement of requirements) {
             const locator = typeof requirement === 'string' ? requirement : requirement.id;
             if (!locator.startsWith('@')) {
                 if (locator !== 'ai' && !builtin_credential_definitions_1.BUILTIN_CREDENTIAL_DEFINITION_IDS.has(locator)) {
                     throw new ExternalCredentialRequirementError(`Unknown Credential requirement "${locator}"; use ai, a built-in definition, or @owner/repository`);
                 }
-                resolved.push(requirement);
+                settled.push({ requirement, definition: null });
                 continue;
             }
             let definition;
             try {
-                definition = await this.syncLocator(locator);
+                definition = await settle(locator);
             }
             catch (error) {
                 if (error instanceof ExternalCredentialRequirementError)
@@ -99,23 +135,19 @@ let ExternalCredentialDefinitionSyncService = class ExternalCredentialDefinition
                 }
                 throw error;
             }
-            const external = {
-                id: definition.contract.id,
-                definitionId: definition.definitionId,
-                optional: typeof requirement === 'string' ? false : requirement.optional,
-                models: typeof requirement === 'string' ? undefined : requirement.models,
-            };
-            resolved.push(external);
+            settled.push({ requirement, definition });
         }
         const keys = new Set();
-        for (const requirement of resolved) {
-            const key = (0, credential_types_1.normalizeCredentialRequirement)(requirement).key;
+        for (const { requirement, definition } of settled) {
+            const key = definition
+                ? definition.contract.id
+                : (0, credential_types_1.normalizeCredentialRequirement)(requirement).key;
             if (keys.has(key)) {
                 throw new ExternalCredentialRequirementError(`Duplicate resolved Credential handle ${key}`);
             }
             keys.add(key);
         }
-        return resolved;
+        return settled;
     }
 };
 exports.ExternalCredentialDefinitionSyncService = ExternalCredentialDefinitionSyncService;

package/dist/src/plugin-host/services/plugin-action-dispatcher.service.d.ts

@@ -0,0 +1,13 @@
+import { GracefulShutdownService } from '../../common/scheduler/services/graceful-shutdown.service';
+import { PluginHostConfigService } from '../config/plugin-host.config';
+import type { PluginActionExecution } from '../entities/plugin-action-execution.entity';
+import { PluginActionExecutionService } from './plugin-action-execution.service';
+export declare class PluginActionDispatcherService {
+    private readonly executions;
+    private readonly shutdown;
+    private readonly config;
+    private readonly logger;
+    constructor(executions: PluginActionExecutionService, shutdown: GracefulShutdownService, config: PluginHostConfigService);
+    dispatch(execution: PluginActionExecution, backendUrl: string, token: string, timeoutSeconds: number): Promise<void>;
+    private call;
+}