@atom8n/n8n 2.2.0

package/dist/modules/external-secrets.ee/providers/vault.js

@@ -0,0 +1,406 @@
+"use strict";
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+var _VaultProvider_currentToken, _VaultProvider_tokenInfo, _VaultProvider_http;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VaultProvider = void 0;
+const backend_common_1 = require("@n8n/backend-common");
+const di_1 = require("@n8n/di");
+const axios_1 = __importDefault(require("axios"));
+const constants_1 = require("../constants");
+const external_secrets_config_1 = require("../external-secrets.config");
+const types_1 = require("../types");
+class VaultProvider extends types_1.SecretsProvider {
+    constructor(logger = di_1.Container.get(backend_common_1.Logger)) {
+        super();
+        this.logger = logger;
+        this.properties = [
+            constants_1.DOCS_HELP_NOTICE,
+            {
+                displayName: 'Vault URL',
+                name: 'url',
+                type: 'string',
+                required: true,
+                noDataExpression: true,
+                placeholder: 'e.g. https://example.com/v1/',
+                default: '',
+            },
+            {
+                displayName: 'Vault Namespace (optional)',
+                name: 'namespace',
+                type: 'string',
+                hint: 'Leave blank if not using namespaces',
+                required: false,
+                noDataExpression: true,
+                placeholder: 'e.g. admin',
+                default: '',
+            },
+            {
+                displayName: 'Authentication Method',
+                name: 'authMethod',
+                type: 'options',
+                required: true,
+                noDataExpression: true,
+                options: [
+                    { name: 'Token', value: 'token' },
+                    { name: 'Username and Password', value: 'usernameAndPassword' },
+                    { name: 'AppRole', value: 'appRole' },
+                ],
+                default: 'token',
+            },
+            {
+                displayName: 'Token',
+                name: 'token',
+                type: 'string',
+                default: '',
+                required: true,
+                noDataExpression: true,
+                placeholder: 'e.g. hvs.2OCsZxZA6Z9lChbt0janOOZI',
+                typeOptions: { password: true },
+                displayOptions: {
+                    show: {
+                        authMethod: ['token'],
+                    },
+                },
+            },
+            {
+                displayName: 'Username',
+                name: 'username',
+                type: 'string',
+                default: '',
+                required: true,
+                noDataExpression: true,
+                placeholder: 'Username',
+                displayOptions: {
+                    show: {
+                        authMethod: ['usernameAndPassword'],
+                    },
+                },
+            },
+            {
+                displayName: 'Password',
+                name: 'password',
+                type: 'string',
+                default: '',
+                required: true,
+                noDataExpression: true,
+                placeholder: '***************',
+                typeOptions: { password: true },
+                displayOptions: {
+                    show: {
+                        authMethod: ['usernameAndPassword'],
+                    },
+                },
+            },
+            {
+                displayName: 'Role ID',
+                name: 'roleId',
+                type: 'string',
+                default: '',
+                required: true,
+                noDataExpression: true,
+                placeholder: '59d6d1ca-47bb-4e7e-a40b-8be3bc5a0ba8',
+                displayOptions: {
+                    show: {
+                        authMethod: ['appRole'],
+                    },
+                },
+            },
+            {
+                displayName: 'Secret ID',
+                name: 'secretId',
+                type: 'string',
+                default: '',
+                required: true,
+                noDataExpression: true,
+                placeholder: '84896a0c-1347-aa90-a4f6-aca8b7558780',
+                typeOptions: { password: true },
+                displayOptions: {
+                    show: {
+                        authMethod: ['appRole'],
+                    },
+                },
+            },
+        ];
+        this.displayName = 'HashiCorp Vault';
+        this.name = 'vault';
+        this.cachedSecrets = {};
+        _VaultProvider_currentToken.set(this, null);
+        _VaultProvider_tokenInfo.set(this, null);
+        _VaultProvider_http.set(this, void 0);
+        this.refreshAbort = new AbortController();
+        this.tokenRefresh = async () => {
+            var _a;
+            if (this.refreshAbort.signal.aborted) {
+                return;
+            }
+            try {
+                await __classPrivateFieldGet(this, _VaultProvider_http, "f").post('auth/token/renew-self');
+                _a = this, [({ set value(_b) { __classPrivateFieldSet(_a, _VaultProvider_tokenInfo, _b, "f"); } }).value] = await this.getTokenInfo();
+                if (!__classPrivateFieldGet(this, _VaultProvider_tokenInfo, "f")) {
+                    this.logger.error('Failed to fetch token info during renewal. Cancelling all future renewals.');
+                    return;
+                }
+                if (this.refreshAbort.signal.aborted) {
+                    return;
+                }
+                this.setupTokenRefresh();
+            }
+            catch {
+                this.logger.error('Failed to renew Vault token. Attempting to reconnect.');
+                void this.connect();
+            }
+        };
+        this.logger = this.logger.scoped('external-secrets');
+    }
+    async init(settings) {
+        this.settings = settings.settings;
+        const baseURL = new URL(this.settings.url);
+        __classPrivateFieldSet(this, _VaultProvider_http, axios_1.default.create({ baseURL: baseURL.toString() }), "f");
+        if (this.settings.namespace) {
+            __classPrivateFieldGet(this, _VaultProvider_http, "f").interceptors.request.use((config) => {
+                config.headers['X-Vault-Namespace'] = this.settings.namespace;
+                return config;
+            });
+        }
+        __classPrivateFieldGet(this, _VaultProvider_http, "f").interceptors.request.use((config) => {
+            if (__classPrivateFieldGet(this, _VaultProvider_currentToken, "f")) {
+                config.headers['X-Vault-Token'] = __classPrivateFieldGet(this, _VaultProvider_currentToken, "f");
+            }
+            return config;
+        });
+        this.logger.debug('Vault provider initialized');
+    }
+    async doConnect() {
+        var _a;
+        if (this.settings.authMethod === 'token') {
+            __classPrivateFieldSet(this, _VaultProvider_currentToken, this.settings.token, "f");
+        }
+        else if (this.settings.authMethod === 'usernameAndPassword') {
+            __classPrivateFieldSet(this, _VaultProvider_currentToken, await this.authUsernameAndPassword(this.settings.username, this.settings.password), "f");
+            if (!__classPrivateFieldGet(this, _VaultProvider_currentToken, "f")) {
+                throw new Error('Failed to authenticate with Username and Password');
+            }
+        }
+        else if (this.settings.authMethod === 'appRole') {
+            __classPrivateFieldSet(this, _VaultProvider_currentToken, await this.authAppRole(this.settings.roleId, this.settings.secretId), "f");
+            if (!__classPrivateFieldGet(this, _VaultProvider_currentToken, "f")) {
+                throw new Error('Failed to authenticate with AppRole');
+            }
+        }
+        const [testSuccess] = await this.test();
+        if (!testSuccess) {
+            throw new Error('Connection test failed');
+        }
+        _a = this, [({ set value(_b) { __classPrivateFieldSet(_a, _VaultProvider_tokenInfo, _b, "f"); } }).value] = await this.getTokenInfo();
+        this.setupTokenRefresh();
+    }
+    async disconnect() {
+        if (this.refreshTimeout !== null) {
+            clearTimeout(this.refreshTimeout);
+        }
+        this.refreshAbort.abort();
+    }
+    setupTokenRefresh() {
+        if (!__classPrivateFieldGet(this, _VaultProvider_tokenInfo, "f")) {
+            return;
+        }
+        if (__classPrivateFieldGet(this, _VaultProvider_tokenInfo, "f").expire_time === null) {
+            return;
+        }
+        if (!__classPrivateFieldGet(this, _VaultProvider_tokenInfo, "f").renewable) {
+            return;
+        }
+        const expireDate = new Date(__classPrivateFieldGet(this, _VaultProvider_tokenInfo, "f").expire_time);
+        setTimeout(this.tokenRefresh, (expireDate.valueOf() - Date.now()) / 2);
+    }
+    async authUsernameAndPassword(username, password) {
+        try {
+            const resp = await __classPrivateFieldGet(this, _VaultProvider_http, "f").request({
+                method: 'POST',
+                url: `auth/userpass/login/${username}`,
+                responseType: 'json',
+                data: { password },
+            });
+            return resp.data.auth.client_token;
+        }
+        catch {
+            return null;
+        }
+    }
+    async authAppRole(roleId, secretId) {
+        try {
+            const resp = await __classPrivateFieldGet(this, _VaultProvider_http, "f").request({
+                method: 'POST',
+                url: 'auth/approle/login',
+                responseType: 'json',
+                data: { role_id: roleId, secret_id: secretId },
+            });
+            return resp.data.auth.client_token;
+        }
+        catch (e) {
+            return null;
+        }
+    }
+    async getTokenInfo() {
+        const resp = await __classPrivateFieldGet(this, _VaultProvider_http, "f").request({
+            method: 'GET',
+            url: 'auth/token/lookup-self',
+            responseType: 'json',
+            validateStatus: () => true,
+        });
+        if (resp.status !== 200 || !resp.data.data) {
+            return [null, resp];
+        }
+        return [resp.data.data, resp];
+    }
+    async getKVSecrets(mountPath, kvVersion, path) {
+        this.logger.debug(`Getting kv secrets from ${mountPath}${path} (version ${kvVersion})`);
+        let listPath = mountPath;
+        if (kvVersion === '2') {
+            listPath += 'metadata/';
+        }
+        listPath += path;
+        let listResp;
+        try {
+            const shouldPreferGet = di_1.Container.get(external_secrets_config_1.ExternalSecretsConfig).preferGet;
+            const url = `${listPath}${shouldPreferGet ? '?list=true' : ''}`;
+            const method = shouldPreferGet ? 'GET' : 'LIST';
+            listResp = await __classPrivateFieldGet(this, _VaultProvider_http, "f").request({
+                url,
+                method,
+            });
+        }
+        catch {
+            return null;
+        }
+        const data = Object.fromEntries((await Promise.allSettled(listResp.data.data.keys.map(async (key) => {
+            if (key.endsWith('/')) {
+                return await this.getKVSecrets(mountPath, kvVersion, path + key);
+            }
+            let secretPath = mountPath;
+            if (kvVersion === '2') {
+                secretPath += 'data/';
+            }
+            secretPath += path + key;
+            try {
+                const secretResp = await __classPrivateFieldGet(this, _VaultProvider_http, "f").get(secretPath);
+                this.logger.debug(`Vault provider retrieved secrets from ${secretPath}`);
+                return [
+                    key,
+                    kvVersion === '2'
+                        ? secretResp.data.data.data
+                        : secretResp.data.data,
+                ];
+            }
+            catch {
+                return null;
+            }
+        })))
+            .map((i) => (i.status === 'rejected' ? null : i.value))
+            .filter((v) => v !== null));
+        const name = path.substring(0, path.length - 1);
+        this.logger.debug(`Vault provider retrieved kv secrets from ${name}`);
+        return [name, data];
+    }
+    async update() {
+        const mounts = await __classPrivateFieldGet(this, _VaultProvider_http, "f").get('sys/mounts');
+        const kvs = Object.entries(mounts.data.data).filter(([, v]) => v.type === 'kv');
+        const secrets = Object.fromEntries((await Promise.all(kvs.map(async ([basePath, data]) => {
+            const value = await this.getKVSecrets(basePath, data.options.version, '');
+            if (value === null) {
+                return null;
+            }
+            return [basePath.substring(0, basePath.length - 1), value[1]];
+        }))).filter((v) => v !== null));
+        this.cachedSecrets = secrets;
+        this.logger.debug('Vault provider secrets updated');
+    }
+    async test() {
+        try {
+            const [token, tokenResp] = await this.getTokenInfo();
+            if (token === null) {
+                if (tokenResp.status === 404) {
+                    return [false, 'Could not find auth path. Try adding /v1/ to the end of your base URL.'];
+                }
+                return [false, 'Invalid credentials'];
+            }
+            const resp = await __classPrivateFieldGet(this, _VaultProvider_http, "f").request({
+                method: 'GET',
+                url: 'sys/mounts',
+                responseType: 'json',
+                validateStatus: () => true,
+            });
+            if (resp.status === 403) {
+                return [
+                    false,
+                    "Couldn't list mounts. Please give these credentials 'read' access to sys/mounts.",
+                ];
+            }
+            else if (resp.status !== 200) {
+                return [
+                    false,
+                    "Couldn't list mounts but wasn't a permissions issue. Please consult your Vault admin.",
+                ];
+            }
+            return [true];
+        }
+        catch (e) {
+            if (axios_1.default.isAxiosError(e)) {
+                if (e.code === 'ECONNREFUSED') {
+                    return [
+                        false,
+                        'Connection refused. Please check the host and port of the server are correct.',
+                    ];
+                }
+            }
+            return [false];
+        }
+    }
+    getSecret(name) {
+        return this.cachedSecrets[name];
+    }
+    hasSecret(name) {
+        return name in this.cachedSecrets;
+    }
+    getSecretNames() {
+        const getKeys = ([k, v]) => {
+            if (!constants_1.EXTERNAL_SECRETS_NAME_REGEX.test(k)) {
+                return [];
+            }
+            if (typeof v === 'object') {
+                const keys = [];
+                for (const key of Object.keys(v)) {
+                    if (!constants_1.EXTERNAL_SECRETS_NAME_REGEX.test(key)) {
+                        continue;
+                    }
+                    const value = v[key];
+                    if (typeof value === 'object' && value !== null) {
+                        keys.push(...getKeys([key, value]).map((ok) => `${k}.${ok}`));
+                    }
+                    else {
+                        keys.push(`${k}.${key}`);
+                    }
+                }
+                return keys;
+            }
+            return [k];
+        };
+        return Object.entries(this.cachedSecrets).flatMap(getKeys);
+    }
+}
+exports.VaultProvider = VaultProvider;
+_VaultProvider_currentToken = new WeakMap(), _VaultProvider_tokenInfo = new WeakMap(), _VaultProvider_http = new WeakMap();
+//# sourceMappingURL=vault.js.map

package/dist/modules/external-secrets.ee/providers/vault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.js","sourceRoot":"","sources":["../../../../src/modules/external-secrets.ee/providers/vault.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAAA,wDAA6C;AAC7C,gCAAoC;AAEpC,kDAA0B;AAG1B,4CAA6E;AAC7E,wEAAmE;AAEnE,oCAA2C;AA6E3C,MAAa,aAAc,SAAQ,uBAAe;IAoJjD,YAAqB,SAAS,cAAS,CAAC,GAAG,CAAC,uBAAM,CAAC;QAClD,KAAK,EAAE,CAAC;QADY,WAAM,GAAN,MAAM,CAAwB;QAnJnD,eAAU,GAAsB;YAC/B,4BAAgB;YAChB;gBACC,WAAW,EAAE,WAAW;gBACxB,IAAI,EAAE,KAAK;gBACX,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,IAAI;gBACd,gBAAgB,EAAE,IAAI;gBACtB,WAAW,EAAE,8BAA8B;gBAC3C,OAAO,EAAE,EAAE;aACX;YACD;gBACC,WAAW,EAAE,4BAA4B;gBACzC,IAAI,EAAE,WAAW;gBACjB,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,qCAAqC;gBAC3C,QAAQ,EAAE,KAAK;gBACf,gBAAgB,EAAE,IAAI;gBACtB,WAAW,EAAE,YAAY;gBACzB,OAAO,EAAE,EAAE;aACX;YACD;gBACC,WAAW,EAAE,uBAAuB;gBACpC,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,SAAS;gBACf,QAAQ,EAAE,IAAI;gBACd,gBAAgB,EAAE,IAAI;gBACtB,OAAO,EAAE;oBACR,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;oBACjC,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,qBAAqB,EAAE;oBAC/D,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE;iBACrC;gBACD,OAAO,EAAE,OAAO;aAChB;YAGD;gBACC,WAAW,EAAE,OAAO;gBACpB,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,EAAE;gBACX,QAAQ,EAAE,IAAI;gBACd,gBAAgB,EAAE,IAAI;gBACtB,WAAW,EAAE,mCAAmC;gBAChD,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC/B,cAAc,EAAE;oBACf,IAAI,EAAE;wBACL,UAAU,EAAE,CAAC,OAAO,CAAC;qBACrB;iBACD;aACD;YAiBD;gBACC,WAAW,EAAE,UAAU;gBACvB,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,EAAE;gBACX,QAAQ,EAAE,IAAI;gBACd,gBAAgB,EAAE,IAAI;gBACtB,WAAW,EAAE,UAAU;gBACvB,cAAc,EAAE;oBACf,IAAI,EAAE;wBACL,UAAU,EAAE,CAAC,qBAAqB,CAAC;qBACnC;iBACD;aACD;YACD;gBACC,WAAW,EAAE,UAAU;gBACvB,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,EAAE;gBACX,QAAQ,EAAE,IAAI;gBACd,gBAAgB,EAAE,IAAI;gBACtB,WAAW,EAAE,iBAAiB;gBAC9B,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC/B,cAAc,EAAE;oBACf,IAAI,EAAE;wBACL,UAAU,EAAE,CAAC,qBAAqB,CAAC;qBACnC;iBACD;aACD;YAGD;gBACC,WAAW,EAAE,SAAS;gBACtB,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,EAAE;gBACX,QAAQ,EAAE,IAAI;gBACd,gBAAgB,EAAE,IAAI;gBACtB,WAAW,EAAE,sCAAsC;gBACnD,cAAc,EAAE;oBACf,IAAI,EAAE;wBACL,UAAU,EAAE,CAAC,SAAS,CAAC;qBACvB;iBACD;aACD;YACD;gBACC,WAAW,EAAE,WAAW;gBACxB,IAAI,EAAE,UAAU;gBAChB,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,EAAE;gBACX,QAAQ,EAAE,IAAI;gBACd,gBAAgB,EAAE,IAAI;gBACtB,WAAW,EAAE,sCAAsC;gBACnD,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAC/B,cAAc,EAAE;oBACf,IAAI,EAAE;wBACL,UAAU,EAAE,CAAC,SAAS,CAAC;qBACvB;iBACD;aACD;SACD,CAAC;QAEF,gBAAW,GAAG,iBAAiB,CAAC;QAEhC,SAAI,GAAG,OAAO,CAAC;QAEP,kBAAa,GAAgC,EAAE,CAAC;QAIxD,sCAA+B,IAAI,EAAC;QAEpC,mCAAoC,IAAI,EAAC;QAEzC,sCAAqB;QAIb,iBAAY,GAAG,IAAI,eAAe,EAAE,CAAC;QAmFrC,iBAAY,GAAG,KAAK,IAAI,EAAE;;YACjC,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACtC,OAAO;YACR,CAAC;YACD,IAAI,CAAC;gBAGJ,MAAM,uBAAA,IAAI,2BAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;gBAE/C,KAAC,IAAI,EAAL,8FAAiB,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;gBAE9C,IAAI,CAAC,uBAAA,IAAI,gCAAW,EAAE,CAAC;oBACtB,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,4EAA4E,CAC5E,CAAC;oBACF,OAAO;gBACR,CAAC;gBAED,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBACtC,OAAO;gBACR,CAAC;gBAED,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACR,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;gBAC3E,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,CAAC;QACF,CAAC,CAAC;QA1GD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAiC;QAC3C,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAoC,CAAC;QAE9D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAE3C,uBAAA,IAAI,uBAAS,eAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,MAAA,CAAC;QAC3D,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;YAC7B,uBAAA,IAAI,2BAAM,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;gBAC9C,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAC9D,OAAO,MAAM,CAAC;YACf,CAAC,CAAC,CAAC;QACJ,CAAC;QACD,uBAAA,IAAI,2BAAM,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YAC9C,IAAI,uBAAA,IAAI,mCAAc,EAAE,CAAC;gBACxB,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,uBAAA,IAAI,mCAAc,CAAC;YACtD,CAAC;YACD,OAAO,MAAM,CAAC;QACf,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACjD,CAAC;IAES,KAAK,CAAC,SAAS;;QAExB,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;YAC1C,uBAAA,IAAI,+BAAiB,IAAI,CAAC,QAAQ,CAAC,KAAK,MAAA,CAAC;QAC1C,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,KAAK,qBAAqB,EAAE,CAAC;YAC/D,uBAAA,IAAI,+BAAiB,MAAM,IAAI,CAAC,uBAAuB,CACtD,IAAI,CAAC,QAAQ,CAAC,QAAQ,EACtB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CACtB,MAAA,CAAC;YACF,IAAI,CAAC,uBAAA,IAAI,mCAAc,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACtE,CAAC;QACF,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACnD,uBAAA,IAAI,+BAAiB,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAA,CAAC;YAC1F,IAAI,CAAC,uBAAA,IAAI,mCAAc,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACxD,CAAC;QACF,CAAC;QAGD,MAAM,CAAC,WAAW,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,WAAW,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC3C,CAAC;QAGD,KAAC,IAAI,EAAL,8FAAiB,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC9C,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,UAAU;QACf,IAAI,IAAI,CAAC,cAAc,KAAK,IAAI,EAAE,CAAC;YAClC,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAEO,iBAAiB;QACxB,IAAI,CAAC,uBAAA,IAAI,gCAAW,EAAE,CAAC;YACtB,OAAO;QACR,CAAC;QAED,IAAI,uBAAA,IAAI,gCAAW,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;YAC1C,OAAO;QACR,CAAC;QAED,IAAI,CAAC,uBAAA,IAAI,gCAAW,CAAC,SAAS,EAAE,CAAC;YAChC,OAAO;QACR,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,uBAAA,IAAI,gCAAW,CAAC,WAAW,CAAC,CAAC;QACzD,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxE,CAAC;IA+BO,KAAK,CAAC,uBAAuB,CACpC,QAAgB,EAChB,QAAgB;QAEhB,IAAI,CAAC;YACJ,MAAM,IAAI,GAAG,MAAM,uBAAA,IAAI,2BAAM,CAAC,OAAO,CAAyB;gBAC7D,MAAM,EAAE,MAAM;gBACd,GAAG,EAAE,uBAAuB,QAAQ,EAAE;gBACtC,YAAY,EAAE,MAAM;gBACpB,IAAI,EAAE,EAAE,QAAQ,EAAE;aAClB,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;QACpC,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,MAAc,EAAE,QAAgB;QACzD,IAAI,CAAC;YACJ,MAAM,IAAI,GAAG,MAAM,uBAAA,IAAI,2BAAM,CAAC,OAAO,CAAmB;gBACvD,MAAM,EAAE,MAAM;gBACd,GAAG,EAAE,oBAAoB;gBACzB,YAAY,EAAE,MAAM;gBACpB,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE;aAC9C,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;QACpC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,YAAY;QACzB,MAAM,IAAI,GAAG,MAAM,uBAAA,IAAI,2BAAM,CAAC,OAAO,CAAgC;YACpE,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,wBAAwB;YAC7B,YAAY,EAAE,MAAM;YACpB,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;SAC1B,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5C,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC;IAEO,KAAK,CAAC,YAAY,CACzB,SAAiB,EACjB,SAAiB,EACjB,IAAY;QAEZ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,SAAS,GAAG,IAAI,aAAa,SAAS,GAAG,CAAC,CAAC;QACxF,IAAI,QAAQ,GAAG,SAAS,CAAC;QACzB,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;YACvB,QAAQ,IAAI,WAAW,CAAC;QACzB,CAAC;QACD,QAAQ,IAAI,IAAI,CAAC;QACjB,IAAI,QAAuD,CAAC;QAC5D,IAAI,CAAC;YACJ,MAAM,eAAe,GAAG,cAAS,CAAC,GAAG,CAAC,+CAAqB,CAAC,CAAC,SAAS,CAAC;YACvE,MAAM,GAAG,GAAG,GAAG,QAAQ,GAAG,eAAe,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAEhE,MAAM,MAAM,GAAG,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,MAAc,CAAC;YACzD,QAAQ,GAAG,MAAM,uBAAA,IAAI,2BAAM,CAAC,OAAO,CAAiC;gBACnE,GAAG;gBAEH,MAAM;aACN,CAAC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,IAAI,CAAC;QACb,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAC9B,CACC,MAAM,OAAO,CAAC,UAAU,CACvB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAyC,EAAE;YAChF,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvB,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,GAAG,GAAG,CAAC,CAAC;YAClE,CAAC;YACD,IAAI,UAAU,GAAG,SAAS,CAAC;YAC3B,IAAI,SAAS,KAAK,GAAG,EAAE,CAAC;gBACvB,UAAU,IAAI,OAAO,CAAC;YACvB,CAAC;YACD,UAAU,IAAI,IAAI,GAAG,GAAG,CAAC;YACzB,IAAI,CAAC;gBACJ,MAAM,UAAU,GAAG,MAAM,uBAAA,IAAI,2BAAM,CAAC,GAAG,CAA6B,UAAU,CAAC,CAAC;gBAChF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,UAAU,EAAE,CAAC,CAAC;gBACzE,OAAO;oBACN,GAAG;oBACH,SAAS,KAAK,GAAG;wBAChB,CAAC,CAAE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAoB;wBAC5C,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI;iBACvB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC,CAAC,CACF,CACD;aACC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;aACtD,MAAM,CAAC,CAAC,CAAC,EAA8B,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CACvD,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4CAA4C,IAAI,EAAE,CAAC,CAAC;QACtE,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,MAAM;QACX,MAAM,MAAM,GAAG,MAAM,uBAAA,IAAI,2BAAM,CAAC,GAAG,CAAiC,YAAY,CAAC,CAAC;QAElF,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QAEhF,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CACjC,CACC,MAAM,OAAO,CAAC,GAAG,CAChB,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAyC,EAAE;YACzE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,OAAiB,EAAE,EAAE,CAAC,CAAC;YACpF,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACpB,OAAO,IAAI,CAAC;YACb,CAAC;YACD,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/D,CAAC,CAAC,CACF,CACD,CAAC,MAAM,CAAC,CAAC,CAAC,EAA8B,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CACvD,CAAC;QACF,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,IAAI;QACT,IAAI,CAAC;YACJ,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YAErD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACpB,IAAI,SAAS,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC9B,OAAO,CAAC,KAAK,EAAE,wEAAwE,CAAC,CAAC;gBAC1F,CAAC;gBACD,OAAO,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;YACvC,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,uBAAA,IAAI,2BAAM,CAAC,OAAO,CAAgC;gBACpE,MAAM,EAAE,KAAK;gBACb,GAAG,EAAE,YAAY;gBACjB,YAAY,EAAE,MAAM;gBACpB,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;aAC1B,CAAC,CAAC;YAEH,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACzB,OAAO;oBACN,KAAK;oBACL,kFAAkF;iBAClF,CAAC;YACH,CAAC;iBAAM,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAChC,OAAO;oBACN,KAAK;oBACL,uFAAuF;iBACvF,CAAC;YACH,CAAC;YAED,OAAO,CAAC,IAAI,CAAC,CAAC;QACf,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACZ,IAAI,eAAK,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3B,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;oBAC/B,OAAO;wBACN,KAAK;wBACL,+EAA+E;qBAC/E,CAAC;gBACH,CAAC;YACF,CAAC;YAED,OAAO,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC;IACF,CAAC;IAED,SAAS,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,SAAS,CAAC,IAAY;QACrB,OAAO,IAAI,IAAI,IAAI,CAAC,aAAa,CAAC;IACnC,CAAC;IAED,cAAc;QACb,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAwB,EAAY,EAAE;YAC3D,IAAI,CAAC,uCAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1C,OAAO,EAAE,CAAC;YACX,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAa,EAAE,CAAC;gBAC1B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;oBAClC,IAAI,CAAC,uCAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC5C,SAAS;oBACV,CAAC;oBACD,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;oBACrB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;wBACjD,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,GAAG,EAAE,KAAoB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;oBAC9E,CAAC;yBAAM,CAAC;wBACP,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;oBAC1B,CAAC;gBACF,CAAC;gBACD,OAAO,IAAI,CAAC;YACb,CAAC;YACD,OAAO,CAAC,CAAC,CAAC,CAAC;QACZ,CAAC,CAAC;QACF,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5D,CAAC;CACD;AAhdD,sCAgdC"}

package/dist/modules/external-secrets.ee/retry-manager.service.d.ts

@@ -0,0 +1,23 @@
+import { Logger } from '@n8n/backend-common';
+type RetryOperation = () => Promise<{
+    success: boolean;
+    error?: Error;
+}>;
+export declare class ExternalSecretsRetryManager {
+    private readonly logger;
+    private retries;
+    constructor(logger: Logger);
+    runWithRetry(key: string, operation: RetryOperation): Promise<{
+        success: boolean;
+        error?: Error;
+    }>;
+    private scheduleRetry;
+    cancelRetry(key: string): boolean;
+    cancelAll(): void;
+    isRetrying(key: string): boolean;
+    getRetryInfo(key: string): {
+        attempt: number;
+        nextBackoff: number;
+    } | undefined;
+}
+export {};

package/dist/modules/external-secrets.ee/retry-manager.service.js

@@ -0,0 +1,89 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExternalSecretsRetryManager = void 0;
+const backend_common_1 = require("@n8n/backend-common");
+const di_1 = require("@n8n/di");
+const constants_1 = require("./constants");
+let ExternalSecretsRetryManager = class ExternalSecretsRetryManager {
+    constructor(logger) {
+        this.logger = logger;
+        this.retries = new Map();
+        this.logger = this.logger.scoped('external-secrets');
+    }
+    async runWithRetry(key, operation) {
+        this.cancelRetry(key);
+        const result = await operation();
+        if (result.success) {
+            return result;
+        }
+        this.logger.error(`Operation failed for ${key}`, { error: result.error });
+        this.scheduleRetry(key, operation);
+        return { success: false, error: result.error };
+    }
+    scheduleRetry(key, operation, currentBackoff = constants_1.EXTERNAL_SECRETS_INITIAL_BACKOFF, attempt = 0) {
+        const nextBackoff = Math.min(currentBackoff * 2, constants_1.EXTERNAL_SECRETS_MAX_BACKOFF);
+        const timeout = setTimeout(async () => {
+            this.logger.debug(`Retrying operation for ${key} (attempt ${attempt + 1})`);
+            this.retries.delete(key);
+            const result = await operation();
+            if (result.success) {
+                this.logger.debug(`Operation for ${key} succeeded on retry attempt ${attempt + 1}`);
+                return;
+            }
+            this.logger.error(`Retry failed for ${key}`, { error: result.error });
+            this.scheduleRetry(key, operation, nextBackoff, attempt + 1);
+        }, currentBackoff);
+        this.retries.set(key, {
+            timeout,
+            operation,
+            attempt: attempt + 1,
+            nextBackoff,
+        });
+        this.logger.debug(`Scheduled retry for ${key} in ${currentBackoff}ms (attempt ${attempt + 1})`);
+    }
+    cancelRetry(key) {
+        const retryInfo = this.retries.get(key);
+        if (!retryInfo) {
+            return false;
+        }
+        clearTimeout(retryInfo.timeout);
+        this.retries.delete(key);
+        this.logger.debug(`Cancelled retry for ${key}`);
+        return true;
+    }
+    cancelAll() {
+        for (const [key, retryInfo] of this.retries.entries()) {
+            clearTimeout(retryInfo.timeout);
+            this.logger.debug(`Cancelled retry for ${key}`);
+        }
+        this.retries.clear();
+    }
+    isRetrying(key) {
+        return this.retries.has(key);
+    }
+    getRetryInfo(key) {
+        const retryInfo = this.retries.get(key);
+        if (!retryInfo) {
+            return undefined;
+        }
+        return {
+            attempt: retryInfo.attempt,
+            nextBackoff: retryInfo.nextBackoff,
+        };
+    }
+};
+exports.ExternalSecretsRetryManager = ExternalSecretsRetryManager;
+exports.ExternalSecretsRetryManager = ExternalSecretsRetryManager = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [backend_common_1.Logger])
+], ExternalSecretsRetryManager);
+//# sourceMappingURL=retry-manager.service.js.map

package/dist/modules/external-secrets.ee/retry-manager.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry-manager.service.js","sourceRoot":"","sources":["../../../src/modules/external-secrets.ee/retry-manager.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wDAA6C;AAC7C,gCAAkC;AAElC,2CAA6F;AAgBtF,IAAM,2BAA2B,GAAjC,MAAM,2BAA2B;IAGvC,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;QAFnC,YAAO,GAAG,IAAI,GAAG,EAAqB,CAAC;QAG9C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,YAAY,CACjB,GAAW,EACX,SAAyB;QAGzB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAEtB,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;QACjC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,MAAM,CAAC;QACf,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACnC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAChD,CAAC;IAKO,aAAa,CACpB,GAAW,EACX,SAAyB,EACzB,cAAc,GAAG,4CAAgC,EACjD,OAAO,GAAG,CAAC;QAEX,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,GAAG,CAAC,EAAE,wCAA4B,CAAC,CAAC;QAE/E,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,IAAI,EAAE;YACrC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,GAAG,aAAa,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;YAC5E,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAEzB,MAAM,MAAM,GAAG,MAAM,SAAS,EAAE,CAAC;YACjC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,GAAG,+BAA+B,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC;gBACpF,OAAO;YACR,CAAC;YAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YACtE,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;QAC9D,CAAC,EAAE,cAAc,CAAC,CAAC;QAEnB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE;YACrB,OAAO;YACP,SAAS;YACT,OAAO,EAAE,OAAO,GAAG,CAAC;YACpB,WAAW;SACX,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,GAAG,OAAO,cAAc,eAAe,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IACjG,CAAC;IAKD,WAAW,CAAC,GAAW;QACtB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC;QACd,CAAC;QAED,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC;IACb,CAAC;IAKD,SAAS;QACR,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACvD,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAChC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAKD,UAAU,CAAC,GAAW;QACrB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IAKD,YAAY,CAAC,GAAW;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,OAAO;YACN,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,WAAW,EAAE,SAAS,CAAC,WAAW;SAClC,CAAC;IACH,CAAC;CACD,CAAA;AAzGY,kEAA2B;sCAA3B,2BAA2B;IADvC,IAAA,YAAO,GAAE;qCAI4B,uBAAM;GAH/B,2BAA2B,CAyGvC"}

package/dist/modules/external-secrets.ee/secrets-cache.service.d.ts

@@ -0,0 +1,13 @@
+import { Logger } from '@n8n/backend-common';
+import { ExternalSecretsProviderRegistry } from './provider-registry.service';
+export declare class ExternalSecretsSecretsCache {
+    private readonly logger;
+    private readonly registry;
+    constructor(logger: Logger, registry: ExternalSecretsProviderRegistry);
+    refreshAll(): Promise<void>;
+    private refreshProvider;
+    getSecret(providerName: string, secretName: string): unknown;
+    hasSecret(providerName: string, secretName: string): boolean;
+    getSecretNames(providerName: string): string[];
+    getAllSecretNames(): Record<string, string[]>;
+}

package/dist/modules/external-secrets.ee/secrets-cache.service.js

@@ -0,0 +1,69 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExternalSecretsSecretsCache = void 0;
+const backend_common_1 = require("@n8n/backend-common");
+const di_1 = require("@n8n/di");
+const n8n_workflow_1 = require("n8n-workflow");
+const provider_registry_service_1 = require("./provider-registry.service");
+let ExternalSecretsSecretsCache = class ExternalSecretsSecretsCache {
+    constructor(logger, registry) {
+        this.logger = logger;
+        this.registry = registry;
+        this.logger = this.logger.scoped('external-secrets');
+    }
+    async refreshAll() {
+        const providers = this.registry.getAll();
+        await Promise.allSettled(Array.from(providers.entries()).map(async ([name, provider]) => await this.refreshProvider(name, provider)));
+        this.logger.debug('Refreshed secrets from all providers');
+    }
+    async refreshProvider(name, provider) {
+        if (provider.state !== 'connected') {
+            return;
+        }
+        try {
+            await provider.update();
+            this.logger.debug(`Refreshed secrets from provider ${name}`);
+        }
+        catch (error) {
+            this.logger.error(`Error refreshing secrets from provider ${name}`, {
+                error: (0, n8n_workflow_1.ensureError)(error),
+            });
+        }
+    }
+    getSecret(providerName, secretName) {
+        const provider = this.registry.get(providerName);
+        return provider?.getSecret(secretName);
+    }
+    hasSecret(providerName, secretName) {
+        const provider = this.registry.get(providerName);
+        return provider?.hasSecret(secretName) ?? false;
+    }
+    getSecretNames(providerName) {
+        const provider = this.registry.get(providerName);
+        return provider?.getSecretNames() ?? [];
+    }
+    getAllSecretNames() {
+        const providers = this.registry.getAll();
+        const result = {};
+        for (const [name, provider] of providers.entries()) {
+            result[name] = provider.getSecretNames();
+        }
+        return result;
+    }
+};
+exports.ExternalSecretsSecretsCache = ExternalSecretsSecretsCache;
+exports.ExternalSecretsSecretsCache = ExternalSecretsSecretsCache = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [backend_common_1.Logger,
+        provider_registry_service_1.ExternalSecretsProviderRegistry])
+], ExternalSecretsSecretsCache);
+//# sourceMappingURL=secrets-cache.service.js.map

package/dist/modules/external-secrets.ee/secrets-cache.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-cache.service.js","sourceRoot":"","sources":["../../../src/modules/external-secrets.ee/secrets-cache.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wDAA6C;AAC7C,gCAAkC;AAClC,+CAA2C;AAE3C,2EAA8E;AAQvE,IAAM,2BAA2B,GAAjC,MAAM,2BAA2B;IACvC,YACkB,MAAc,EACd,QAAyC;QADzC,WAAM,GAAN,MAAM,CAAQ;QACd,aAAQ,GAAR,QAAQ,CAAiC;QAE1D,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACtD,CAAC;IAKD,KAAK,CAAC,UAAU;QACf,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACzC,MAAM,OAAO,CAAC,UAAU,CACvB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAClC,KAAK,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CACtE,CACD,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC3D,CAAC;IAKO,KAAK,CAAC,eAAe,CAAC,IAAY,EAAE,QAAyB;QAEpE,IAAI,QAAQ,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YACpC,OAAO;QACR,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,IAAI,EAAE,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,IAAI,EAAE,EAAE;gBACnE,KAAK,EAAE,IAAA,0BAAW,EAAC,KAAK,CAAC;aACzB,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAKD,SAAS,CAAC,YAAoB,EAAE,UAAkB;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACjD,OAAO,QAAQ,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;IAKD,SAAS,CAAC,YAAoB,EAAE,UAAkB;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACjD,OAAO,QAAQ,EAAE,SAAS,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC;IACjD,CAAC;IAKD,cAAc,CAAC,YAAoB;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACjD,OAAO,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IAKD,iBAAiB;QAChB,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACzC,MAAM,MAAM,GAA6B,EAAE,CAAC;QAE5C,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;YACpD,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,cAAc,EAAE,CAAC;QAC1C,CAAC;QAED,OAAO,MAAM,CAAC;IACf,CAAC;CACD,CAAA;AA7EY,kEAA2B;sCAA3B,2BAA2B;IADvC,IAAA,YAAO,GAAE;qCAGiB,uBAAM;QACJ,2DAA+B;GAH/C,2BAA2B,CA6EvC"}

package/dist/modules/external-secrets.ee/settings-store.service.d.ts

@@ -0,0 +1,21 @@
+import { SettingsRepository } from '@n8n/db';
+import { Cipher } from 'n8n-core';
+import type { ExternalSecretsSettings, SecretsProviderSettings } from './types';
+export declare class ExternalSecretsSettingsStore {
+    private readonly settingsRepo;
+    private readonly cipher;
+    private cache;
+    constructor(settingsRepo: SettingsRepository, cipher: Cipher);
+    load(): Promise<ExternalSecretsSettings>;
+    reload(): Promise<ExternalSecretsSettings>;
+    getCached(): ExternalSecretsSettings;
+    save(settings: ExternalSecretsSettings): Promise<void>;
+    updateProvider(providerName: string, partialSettings: Partial<SecretsProviderSettings>): Promise<{
+        settings: ExternalSecretsSettings;
+        isNewProvider: boolean;
+    }>;
+    getProvider(providerName: string): Promise<SecretsProviderSettings | undefined>;
+    removeProvider(providerName: string): Promise<void>;
+    private decrypt;
+    private encrypt;
+}