@atom8n/n8n 2.2.0

package/dist/modules/dynamic-credentials.ee/services/dynamic-credential-storage.service.js

@@ -0,0 +1,94 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DynamicCredentialStorageService = void 0;
+const n8n_workflow_1 = require("n8n-workflow");
+const credential_resolver_registry_service_1 = require("./credential-resolver-registry.service");
+const credential_resolver_repository_1 = require("../database/repositories/credential-resolver.repository");
+const n8n_core_1 = require("n8n-core");
+const credential_storage_error_1 = require("../errors/credential-storage.error");
+const load_nodes_and_credentials_1 = require("../../../load-nodes-and-credentials");
+const backend_common_1 = require("@n8n/backend-common");
+const di_1 = require("@n8n/di");
+const shared_fields_1 = require("./shared-fields");
+let DynamicCredentialStorageService = class DynamicCredentialStorageService {
+    constructor(resolverRegistry, resolverRepository, loadNodesAndCredentials, cipher, logger) {
+        this.resolverRegistry = resolverRegistry;
+        this.resolverRepository = resolverRepository;
+        this.loadNodesAndCredentials = loadNodesAndCredentials;
+        this.cipher = cipher;
+        this.logger = logger;
+    }
+    async storeIfNeeded(credentialStoreMetadata, dynamicData, credentialContext, staticData, workflowSettings) {
+        try {
+            if (!credentialStoreMetadata.isResolvable) {
+                return;
+            }
+            const resolverId = credentialStoreMetadata.resolverId ?? workflowSettings?.credentialResolverId;
+            if (!resolverId) {
+                return this.handleNoResolver(credentialStoreMetadata);
+            }
+            const resolverEntity = await this.resolverRepository.findOneBy({
+                id: resolverId,
+            });
+            if (!resolverEntity) {
+                return this.handleMissingResolver(credentialStoreMetadata, resolverId);
+            }
+            const resolver = this.resolverRegistry.getResolverByTypename(resolverEntity.type);
+            if (!resolver) {
+                return this.handleMissingResolver(credentialStoreMetadata, resolverId);
+            }
+            const decryptedConfig = this.cipher.decrypt(resolverEntity.config);
+            const resolverConfig = (0, n8n_workflow_1.jsonParse)(decryptedConfig);
+            const credentialType = this.loadNodesAndCredentials.getCredential(credentialStoreMetadata.type);
+            const sharedFields = (0, shared_fields_1.extractSharedFields)(credentialType.type);
+            const mergedDynamicData = {
+                ...(staticData ?? {}),
+                ...dynamicData,
+            };
+            for (const field of sharedFields) {
+                if (field in mergedDynamicData) {
+                    delete mergedDynamicData[field];
+                }
+            }
+            await resolver.setSecret(credentialStoreMetadata.id, credentialContext, mergedDynamicData, {
+                configuration: resolverConfig,
+                resolverName: resolverEntity.name,
+                resolverId: resolverEntity.id,
+            });
+            this.logger.debug('Successfully stored dynamic credentials', {
+                credentialId: credentialStoreMetadata.id,
+                resolverId,
+                resolverSource: credentialStoreMetadata.resolverId ? 'credential' : 'workflow',
+                identity: credentialContext.identity,
+            });
+        }
+        catch (error) {
+            throw new credential_storage_error_1.CredentialStorageError(`Failed to store dynamic credentials data for "${credentialStoreMetadata.name}"`, { cause: error });
+        }
+    }
+    handleNoResolver(credentialStoreMetadata) {
+        throw new credential_storage_error_1.CredentialStorageError(`No resolver found for credential "${credentialStoreMetadata.name}"`);
+    }
+    handleMissingResolver(credentialStoreMetadata, resolverId) {
+        throw new credential_storage_error_1.CredentialStorageError(`Resolver "${resolverId}" not found for credential "${credentialStoreMetadata.name}"`);
+    }
+};
+exports.DynamicCredentialStorageService = DynamicCredentialStorageService;
+exports.DynamicCredentialStorageService = DynamicCredentialStorageService = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [credential_resolver_registry_service_1.DynamicCredentialResolverRegistry,
+        credential_resolver_repository_1.DynamicCredentialResolverRepository,
+        load_nodes_and_credentials_1.LoadNodesAndCredentials,
+        n8n_core_1.Cipher,
+        backend_common_1.Logger])
+], DynamicCredentialStorageService);
+//# sourceMappingURL=dynamic-credential-storage.service.js.map

package/dist/modules/dynamic-credentials.ee/services/dynamic-credential-storage.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dynamic-credential-storage.service.js","sourceRoot":"","sources":["../../../../src/modules/dynamic-credentials.ee/services/dynamic-credential-storage.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAIA,+CAKsB;AACtB,iGAA2F;AAC3F,4GAA8G;AAC9G,uCAAkC;AAClC,iFAA4E;AAC5E,6EAAuE;AACvE,wDAA6C;AAC7C,gCAAkC;AAClC,mDAAsD;AAG/C,IAAM,+BAA+B,GAArC,MAAM,+BAA+B;IAC3C,YACkB,gBAAmD,EACnD,kBAAuD,EACvD,uBAAgD,EAChD,MAAc,EACd,MAAc;QAJd,qBAAgB,GAAhB,gBAAgB,CAAmC;QACnD,uBAAkB,GAAlB,kBAAkB,CAAqC;QACvD,4BAAuB,GAAvB,uBAAuB,CAAyB;QAChD,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAQ;IAC7B,CAAC;IAEJ,KAAK,CAAC,aAAa,CAClB,uBAAgD,EAChD,WAA2C,EAC3C,iBAAqC,EACrC,UAA2C,EAC3C,gBAAoC;QAEpC,IAAI,CAAC;YACJ,IAAI,CAAC,uBAAuB,CAAC,YAAY,EAAE,CAAC;gBAE3C,OAAO;YACR,CAAC;YAGD,MAAM,UAAU,GACf,uBAAuB,CAAC,UAAU,IAAI,gBAAgB,EAAE,oBAAoB,CAAC;YAG9E,IAAI,CAAC,UAAU,EAAE,CAAC;gBACjB,OAAO,IAAI,CAAC,gBAAgB,CAAC,uBAAuB,CAAC,CAAC;YACvD,CAAC;YAGD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC;gBAC9D,EAAE,EAAE,UAAU;aACd,CAAC,CAAC;YAEH,IAAI,CAAC,cAAc,EAAE,CAAC;gBACrB,OAAO,IAAI,CAAC,qBAAqB,CAAC,uBAAuB,EAAE,UAAU,CAAC,CAAC;YACxE,CAAC;YAGD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAElF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,qBAAqB,CAAC,uBAAuB,EAAE,UAAU,CAAC,CAAC;YACxE,CAAC;YAED,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YACnE,MAAM,cAAc,GAAG,IAAA,wBAAS,EAA0B,eAAe,CAAC,CAAC;YAE3E,MAAM,cAAc,GAAG,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAChE,uBAAuB,CAAC,IAAI,CAC5B,CAAC;YAGF,MAAM,YAAY,GAAG,IAAA,mCAAmB,EAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAE9D,MAAM,iBAAiB,GAAG;gBACzB,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;gBACrB,GAAG,WAAW;aACd,CAAC;YAEF,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;gBAClC,IAAI,KAAK,IAAI,iBAAiB,EAAE,CAAC;oBAChC,OAAO,iBAAiB,CAAC,KAAK,CAAC,CAAC;gBACjC,CAAC;YACF,CAAC;YAED,MAAM,QAAQ,CAAC,SAAS,CAAC,uBAAuB,CAAC,EAAE,EAAE,iBAAiB,EAAE,iBAAiB,EAAE;gBAC1F,aAAa,EAAE,cAAc;gBAC7B,YAAY,EAAE,cAAc,CAAC,IAAI;gBACjC,UAAU,EAAE,cAAc,CAAC,EAAE;aAC7B,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE;gBAC5D,YAAY,EAAE,uBAAuB,CAAC,EAAE;gBACxC,UAAU;gBACV,cAAc,EAAE,uBAAuB,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU;gBAC9E,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;aACpC,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,iDAAsB,CAC/B,iDAAiD,uBAAuB,CAAC,IAAI,GAAG,EAChF,EAAE,KAAK,EAAE,KAAK,EAAE,CAChB,CAAC;QACH,CAAC;IACF,CAAC;IAEO,gBAAgB,CAAC,uBAAgD;QACxE,MAAM,IAAI,iDAAsB,CAC/B,qCAAqC,uBAAuB,CAAC,IAAI,GAAG,CACpE,CAAC;IACH,CAAC;IAEO,qBAAqB,CAC5B,uBAAgD,EAChD,UAAkB;QAElB,MAAM,IAAI,iDAAsB,CAC/B,aAAa,UAAU,+BAA+B,uBAAuB,CAAC,IAAI,GAAG,CACrF,CAAC;IACH,CAAC;CACD,CAAA;AAtGY,0EAA+B;0CAA/B,+BAA+B;IAD3C,IAAA,YAAO,GAAE;qCAG2B,wEAAiC;QAC/B,oEAAmC;QAC9B,oDAAuB;QACxC,iBAAM;QACN,uBAAM;GANpB,+BAA+B,CAsG3C"}

package/dist/modules/dynamic-credentials.ee/services/dynamic-credential.service.d.ts

@@ -0,0 +1,20 @@
+import { Logger } from '@n8n/backend-common';
+import { Cipher } from 'n8n-core';
+import type { ICredentialDataDecryptedObject, IExecutionContext, IWorkflowSettings } from 'n8n-workflow';
+import { LoadNodesAndCredentials } from '../../../load-nodes-and-credentials';
+import { DynamicCredentialResolverRegistry } from './credential-resolver-registry.service';
+import type { CredentialResolveMetadata, ICredentialResolutionProvider } from '../../../credentials/credential-resolution-provider.interface';
+import { DynamicCredentialResolverRepository } from '../database/repositories/credential-resolver.repository';
+export declare class DynamicCredentialService implements ICredentialResolutionProvider {
+    private readonly resolverRegistry;
+    private readonly resolverRepository;
+    private readonly loadNodesAndCredentials;
+    private readonly cipher;
+    private readonly logger;
+    constructor(resolverRegistry: DynamicCredentialResolverRegistry, resolverRepository: DynamicCredentialResolverRepository, loadNodesAndCredentials: LoadNodesAndCredentials, cipher: Cipher, logger: Logger);
+    resolveIfNeeded(credentialsResolveMetadata: CredentialResolveMetadata, staticData: ICredentialDataDecryptedObject, executionContext?: IExecutionContext, workflowSettings?: IWorkflowSettings): Promise<ICredentialDataDecryptedObject>;
+    private buildCredentialContext;
+    private handleResolutionError;
+    private handleMissingResolver;
+    private handleMissingContext;
+}

package/dist/modules/dynamic-credentials.ee/services/dynamic-credential.service.js

@@ -0,0 +1,146 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DynamicCredentialService = void 0;
+const backend_common_1 = require("@n8n/backend-common");
+const decorators_1 = require("@n8n/decorators");
+const di_1 = require("@n8n/di");
+const n8n_core_1 = require("n8n-core");
+const n8n_workflow_1 = require("n8n-workflow");
+const load_nodes_and_credentials_1 = require("../../../load-nodes-and-credentials");
+const credential_resolver_registry_service_1 = require("./credential-resolver-registry.service");
+const shared_fields_1 = require("./shared-fields");
+const credential_resolver_repository_1 = require("../database/repositories/credential-resolver.repository");
+const credential_resolution_error_1 = require("../errors/credential-resolution.error");
+let DynamicCredentialService = class DynamicCredentialService {
+    constructor(resolverRegistry, resolverRepository, loadNodesAndCredentials, cipher, logger) {
+        this.resolverRegistry = resolverRegistry;
+        this.resolverRepository = resolverRepository;
+        this.loadNodesAndCredentials = loadNodesAndCredentials;
+        this.cipher = cipher;
+        this.logger = logger;
+    }
+    async resolveIfNeeded(credentialsResolveMetadata, staticData, executionContext, workflowSettings) {
+        const resolverId = credentialsResolveMetadata.resolverId ?? workflowSettings?.credentialResolverId;
+        if (!credentialsResolveMetadata.isResolvable || !resolverId) {
+            return staticData;
+        }
+        const resolverEntity = await this.resolverRepository.findOneBy({
+            id: resolverId,
+        });
+        if (!resolverEntity) {
+            return this.handleMissingResolver(credentialsResolveMetadata, staticData, resolverId);
+        }
+        const resolver = this.resolverRegistry.getResolverByTypename(resolverEntity.type);
+        if (!resolver) {
+            return this.handleMissingResolver(credentialsResolveMetadata, staticData, resolverId);
+        }
+        const credentialContext = this.buildCredentialContext(executionContext);
+        if (!credentialContext) {
+            return this.handleMissingContext(credentialsResolveMetadata, staticData);
+        }
+        try {
+            const credentialType = this.loadNodesAndCredentials.getCredential(credentialsResolveMetadata.type);
+            const sharedFields = (0, shared_fields_1.extractSharedFields)(credentialType.type);
+            const decryptedConfig = this.cipher.decrypt(resolverEntity.config);
+            const resolverConfig = (0, n8n_workflow_1.jsonParse)(decryptedConfig);
+            const dynamicData = await resolver.getSecret(credentialsResolveMetadata.id, credentialContext, {
+                resolverId: resolverEntity.id,
+                resolverName: resolverEntity.type,
+                configuration: resolverConfig,
+            });
+            this.logger.debug('Successfully resolved dynamic credentials', {
+                credentialId: credentialsResolveMetadata.id,
+                resolverId,
+                resolverSource: credentialsResolveMetadata.resolverId ? 'credential' : 'workflow',
+                identity: credentialContext.identity,
+            });
+            for (const field of sharedFields) {
+                if (field in dynamicData) {
+                    delete dynamicData[field];
+                }
+            }
+            return { ...staticData, ...dynamicData };
+        }
+        catch (error) {
+            return this.handleResolutionError(credentialsResolveMetadata, staticData, error, resolverId);
+        }
+    }
+    buildCredentialContext(executionContext) {
+        if (!executionContext?.credentials) {
+            return undefined;
+        }
+        try {
+            const decrypted = this.cipher.decrypt(executionContext.credentials);
+            return (0, n8n_workflow_1.toCredentialContext)(decrypted);
+        }
+        catch (error) {
+            this.logger.error('Failed to decrypt credential context from execution context', {
+                error: error instanceof Error ? error.message : String(error),
+            });
+            return undefined;
+        }
+    }
+    handleResolutionError(credentialsResolveMetadata, staticData, error, resolverId) {
+        const isDataNotFound = error instanceof decorators_1.CredentialResolverDataNotFoundError;
+        if (credentialsResolveMetadata.resolvableAllowFallback) {
+            this.logger.debug('Dynamic credential resolution failed, falling back to static', {
+                credentialId: credentialsResolveMetadata.id,
+                credentialName: credentialsResolveMetadata.name,
+                resolverId,
+                resolverSource: credentialsResolveMetadata.resolverId ? 'credential' : 'workflow',
+                error: error instanceof Error ? error.message : String(error),
+                isDataNotFound,
+            });
+            return staticData;
+        }
+        this.logger.debug('Dynamic credential resolution failed without fallback', {
+            credentialId: credentialsResolveMetadata.id,
+            credentialName: credentialsResolveMetadata.name,
+            resolverId,
+            resolverSource: credentialsResolveMetadata.resolverId ? 'credential' : 'workflow',
+            error,
+        });
+        throw new credential_resolution_error_1.CredentialResolutionError(`Failed to resolve dynamic credentials for "${credentialsResolveMetadata.name}"`, { cause: error });
+    }
+    handleMissingResolver(credentialsResolveMetadata, staticData, resolverId) {
+        if (credentialsResolveMetadata.resolvableAllowFallback) {
+            this.logger.debug('Resolver not found, falling back to static credentials', {
+                credentialId: credentialsResolveMetadata.id,
+                credentialName: credentialsResolveMetadata.name,
+                resolverId,
+                resolverSource: credentialsResolveMetadata.resolverId ? 'credential' : 'workflow',
+            });
+            return staticData;
+        }
+        throw new credential_resolution_error_1.CredentialResolutionError(`Resolver "${resolverId}" not found for credential "${credentialsResolveMetadata.name}"`);
+    }
+    handleMissingContext(credentialsResolveMetadata, staticData) {
+        if (credentialsResolveMetadata.resolvableAllowFallback) {
+            this.logger.debug('No execution context available, falling back to static credentials', {
+                credentialId: credentialsResolveMetadata.id,
+                credentialName: credentialsResolveMetadata.name,
+            });
+            return staticData;
+        }
+        throw new credential_resolution_error_1.CredentialResolutionError(`Cannot resolve dynamic credentials without execution context for "${credentialsResolveMetadata.name}"`);
+    }
+};
+exports.DynamicCredentialService = DynamicCredentialService;
+exports.DynamicCredentialService = DynamicCredentialService = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [credential_resolver_registry_service_1.DynamicCredentialResolverRegistry,
+        credential_resolver_repository_1.DynamicCredentialResolverRepository,
+        load_nodes_and_credentials_1.LoadNodesAndCredentials,
+        n8n_core_1.Cipher,
+        backend_common_1.Logger])
+], DynamicCredentialService);
+//# sourceMappingURL=dynamic-credential.service.js.map

package/dist/modules/dynamic-credentials.ee/services/dynamic-credential.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dynamic-credential.service.js","sourceRoot":"","sources":["../../../../src/modules/dynamic-credentials.ee/services/dynamic-credential.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wDAA6C;AAC7C,gDAAsE;AACtE,gCAAkC;AAClC,uCAAkC;AAMlC,+CAA8D;AAE9D,6EAAuE;AAEvE,iGAA2F;AAC3F,mDAAsD;AAKtD,4GAA8G;AAC9G,uFAAkF;AAO3E,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IACpC,YACkB,gBAAmD,EACnD,kBAAuD,EACvD,uBAAgD,EAChD,MAAc,EACd,MAAc;QAJd,qBAAgB,GAAhB,gBAAgB,CAAmC;QACnD,uBAAkB,GAAlB,kBAAkB,CAAqC;QACvD,4BAAuB,GAAvB,uBAAuB,CAAyB;QAChD,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAQ;IAC7B,CAAC;IAaJ,KAAK,CAAC,eAAe,CACpB,0BAAqD,EACrD,UAA0C,EAC1C,gBAAoC,EACpC,gBAAoC;QAGpC,MAAM,UAAU,GACf,0BAA0B,CAAC,UAAU,IAAI,gBAAgB,EAAE,oBAAoB,CAAC;QAGjF,IAAI,CAAC,0BAA0B,CAAC,YAAY,IAAI,CAAC,UAAU,EAAE,CAAC;YAC7D,OAAO,UAAU,CAAC;QACnB,CAAC;QAGD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC;YAC9D,EAAE,EAAE,UAAU;SACd,CAAC,CAAC;QAEH,IAAI,CAAC,cAAc,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,qBAAqB,CAAC,0BAA0B,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QACvF,CAAC;QAGD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,qBAAqB,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAElF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,qBAAqB,CAAC,0BAA0B,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QACvF,CAAC;QAGD,MAAM,iBAAiB,GAAG,IAAI,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;QAExE,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,oBAAoB,CAAC,0BAA0B,EAAE,UAAU,CAAC,CAAC;QAC1E,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,cAAc,GAAG,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAChE,0BAA0B,CAAC,IAAI,CAC/B,CAAC;YAEF,MAAM,YAAY,GAAG,IAAA,mCAAmB,EAAC,cAAc,CAAC,IAAI,CAAC,CAAC;YAG9D,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YACnE,MAAM,cAAc,GAAG,IAAA,wBAAS,EAA0B,eAAe,CAAC,CAAC;YAG3E,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,SAAS,CAC3C,0BAA0B,CAAC,EAAE,EAC7B,iBAAiB,EACjB;gBACC,UAAU,EAAE,cAAc,CAAC,EAAE;gBAC7B,YAAY,EAAE,cAAc,CAAC,IAAI;gBACjC,aAAa,EAAE,cAAc;aAC7B,CACD,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE;gBAC9D,YAAY,EAAE,0BAA0B,CAAC,EAAE;gBAC3C,UAAU;gBACV,cAAc,EAAE,0BAA0B,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU;gBACjF,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;aACpC,CAAC,CAAC;YAGH,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;gBAClC,IAAI,KAAK,IAAI,WAAW,EAAE,CAAC;oBAC1B,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;gBAC3B,CAAC;YACF,CAAC;YAGD,OAAO,EAAE,GAAG,UAAU,EAAE,GAAG,WAAW,EAAE,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,qBAAqB,CAAC,0BAA0B,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QAC9F,CAAC;IACF,CAAC;IAKO,sBAAsB,CAAC,gBAA+C;QAC7E,IAAI,CAAC,gBAAgB,EAAE,WAAW,EAAE,CAAC;YACpC,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,IAAI,CAAC;YAEJ,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACpE,OAAO,IAAA,kCAAmB,EAAC,SAAS,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6DAA6D,EAAE;gBAChF,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC7D,CAAC,CAAC;YACH,OAAO,SAAS,CAAC;QAClB,CAAC;IACF,CAAC;IAKO,qBAAqB,CAC5B,0BAAqD,EACrD,UAA0C,EAC1C,KAAc,EACd,UAAkB;QAElB,MAAM,cAAc,GAAG,KAAK,YAAY,gDAAmC,CAAC;QAE5E,IAAI,0BAA0B,CAAC,uBAAuB,EAAE,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8DAA8D,EAAE;gBACjF,YAAY,EAAE,0BAA0B,CAAC,EAAE;gBAC3C,cAAc,EAAE,0BAA0B,CAAC,IAAI;gBAC/C,UAAU;gBACV,cAAc,EAAE,0BAA0B,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU;gBACjF,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC7D,cAAc;aACd,CAAC,CAAC;YACH,OAAO,UAAU,CAAC;QACnB,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uDAAuD,EAAE;YAC1E,YAAY,EAAE,0BAA0B,CAAC,EAAE;YAC3C,cAAc,EAAE,0BAA0B,CAAC,IAAI;YAC/C,UAAU;YACV,cAAc,EAAE,0BAA0B,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU;YACjF,KAAK;SACL,CAAC,CAAC;QAEH,MAAM,IAAI,uDAAyB,CAClC,8CAA8C,0BAA0B,CAAC,IAAI,GAAG,EAChF,EAAE,KAAK,EAAE,KAAK,EAAE,CAChB,CAAC;IACH,CAAC;IAKO,qBAAqB,CAC5B,0BAAqD,EACrD,UAA0C,EAC1C,UAAkB;QAElB,IAAI,0BAA0B,CAAC,uBAAuB,EAAE,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wDAAwD,EAAE;gBAC3E,YAAY,EAAE,0BAA0B,CAAC,EAAE;gBAC3C,cAAc,EAAE,0BAA0B,CAAC,IAAI;gBAC/C,UAAU;gBACV,cAAc,EAAE,0BAA0B,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU;aACjF,CAAC,CAAC;YACH,OAAO,UAAU,CAAC;QACnB,CAAC;QAED,MAAM,IAAI,uDAAyB,CAClC,aAAa,UAAU,+BAA+B,0BAA0B,CAAC,IAAI,GAAG,CACxF,CAAC;IACH,CAAC;IAKO,oBAAoB,CAC3B,0BAAqD,EACrD,UAA0C;QAE1C,IAAI,0BAA0B,CAAC,uBAAuB,EAAE,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oEAAoE,EAAE;gBACvF,YAAY,EAAE,0BAA0B,CAAC,EAAE;gBAC3C,cAAc,EAAE,0BAA0B,CAAC,IAAI;aAC/C,CAAC,CAAC;YACH,OAAO,UAAU,CAAC;QACnB,CAAC;QAED,MAAM,IAAI,uDAAyB,CAClC,qEAAqE,0BAA0B,CAAC,IAAI,GAAG,CACvG,CAAC;IACH,CAAC;CACD,CAAA;AAxMY,4DAAwB;mCAAxB,wBAAwB;IADpC,IAAA,YAAO,GAAE;qCAG2B,wEAAiC;QAC/B,oEAAmC;QAC9B,oDAAuB;QACxC,iBAAM;QACN,uBAAM;GANpB,wBAAwB,CAwMpC"}

package/dist/modules/dynamic-credentials.ee/services/index.d.ts

@@ -0,0 +1,5 @@
+export * from './credential-resolver-registry.service';
+export * from './credential-resolver.service';
+export * from './dynamic-credential.service';
+export * from './dynamic-credential-storage.service';
+export * from './credential-resolver-workflow.service';

package/dist/modules/dynamic-credentials.ee/services/index.js

@@ -0,0 +1,22 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./credential-resolver-registry.service"), exports);
+__exportStar(require("./credential-resolver.service"), exports);
+__exportStar(require("./dynamic-credential.service"), exports);
+__exportStar(require("./dynamic-credential-storage.service"), exports);
+__exportStar(require("./credential-resolver-workflow.service"), exports);
+//# sourceMappingURL=index.js.map

package/dist/modules/dynamic-credentials.ee/services/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/modules/dynamic-credentials.ee/services/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,yEAAuD;AACvD,gEAA8C;AAC9C,+DAA6C;AAC7C,uEAAqD;AACrD,yEAAuD"}

package/dist/modules/dynamic-credentials.ee/services/shared-fields.d.ts

@@ -0,0 +1,2 @@
+import { type ICredentialType } from 'n8n-workflow';
+export declare function extractSharedFields(credentialType: ICredentialType): string[];

package/dist/modules/dynamic-credentials.ee/services/shared-fields.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.extractSharedFields = extractSharedFields;
+const di_1 = require("@n8n/di");
+const n8n_workflow_1 = require("n8n-workflow");
+const credential_types_1 = require("../../../credential-types");
+function getExtendedProps(type, credentialTypes) {
+    const props = [];
+    for (const parentTypeName of type.extends ?? []) {
+        const parentType = credentialTypes.getByName(parentTypeName);
+        const parentProps = getExtendedProps(parentType, credentialTypes);
+        n8n_workflow_1.NodeHelpers.mergeNodeProperties(props, parentProps);
+    }
+    n8n_workflow_1.NodeHelpers.mergeNodeProperties(props, type.properties);
+    return props;
+}
+function extractSharedFields(credentialType) {
+    const credentialTypes = di_1.Container.get(credential_types_1.CredentialTypes);
+    const mergedProperties = getExtendedProps(credentialType, credentialTypes);
+    const sharedFields = [];
+    for (const property of mergedProperties) {
+        if (property.resolvableField !== true) {
+            sharedFields.push(property.name);
+        }
+    }
+    return sharedFields;
+}
+//# sourceMappingURL=shared-fields.js.map

package/dist/modules/dynamic-credentials.ee/services/shared-fields.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared-fields.js","sourceRoot":"","sources":["../../../../src/modules/dynamic-credentials.ee/services/shared-fields.ts"],"names":[],"mappings":";;AA8BA,kDAeC;AAxCD,gCAAoC;AACpC,+CAAuF;AAEvF,yDAAqD;AAGrD,SAAS,gBAAgB,CACxB,IAAqB,EACrB,eAAgC;IAEhC,MAAM,KAAK,GAAsB,EAAE,CAAC;IAGpC,KAAK,MAAM,cAAc,IAAI,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QACjD,MAAM,UAAU,GAAG,eAAe,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAC7D,MAAM,WAAW,GAAG,gBAAgB,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;QAClE,0BAAW,CAAC,mBAAmB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACrD,CAAC;IAGD,0BAAW,CAAC,mBAAmB,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAExD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAgB,mBAAmB,CAAC,cAA+B;IAClE,MAAM,eAAe,GAAG,cAAS,CAAC,GAAG,CAAC,kCAAe,CAAC,CAAC;IAEvD,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;IAE3E,MAAM,YAAY,GAAa,EAAE,CAAC;IAElC,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;QAEzC,IAAI,QAAQ,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;YACvC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;IACF,CAAC;IAED,OAAO,YAAY,CAAC;AACrB,CAAC"}

package/dist/modules/dynamic-credentials.ee/utils.d.ts

@@ -0,0 +1,2 @@
+import type { Request } from 'express';
+export declare function getBearerToken(req: Request): string;

package/dist/modules/dynamic-credentials.ee/utils.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getBearerToken = getBearerToken;
+const bad_request_error_1 = require("../../errors/response-errors/bad-request.error");
+const unauthenticated_error_1 = require("../../errors/response-errors/unauthenticated.error");
+const BEARER_TOKEN_REGEX = /^[Bb][Ee][Aa][Rr][Ee][Rr]\s+(.+)$/;
+function getBearerToken(req) {
+    const headerValue = req.headers['authorization']?.toString();
+    if (!headerValue) {
+        throw new unauthenticated_error_1.UnauthenticatedError();
+    }
+    const result = BEARER_TOKEN_REGEX.exec(headerValue);
+    const token = result ? result[1] : null;
+    if (!token) {
+        throw new bad_request_error_1.BadRequestError('Authorization header is malformed');
+    }
+    return token;
+}
+//# sourceMappingURL=utils.js.map

package/dist/modules/dynamic-credentials.ee/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../src/modules/dynamic-credentials.ee/utils.ts"],"names":[],"mappings":";;AAMA,wCAeC;AArBD,kFAA6E;AAC7E,0FAAsF;AAGtF,MAAM,kBAAkB,GAAG,mCAAmC,CAAC;AAE/D,SAAgB,cAAc,CAAC,GAAY;IAC1C,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,CAAC;IAE7D,IAAI,CAAC,WAAW,EAAE,CAAC;QAClB,MAAM,IAAI,4CAAoB,EAAE,CAAC;IAClC,CAAC;IAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAExC,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,IAAI,mCAAe,CAAC,mCAAmC,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,KAAK,CAAC;AACd,CAAC"}

package/dist/modules/dynamic-credentials.ee/workflow-status.controller.d.ts

@@ -0,0 +1,12 @@
+import { Request, Response } from 'express';
+import { CredentialResolverWorkflowService } from './services/credential-resolver-workflow.service';
+import { WorkflowExecutionStatus } from '@n8n/api-types';
+import { UrlService } from '../../services/url.service';
+import { GlobalConfig } from '@n8n/config';
+export declare class WorkflowStatusController {
+    private readonly credentialResolverWorkflowService;
+    private readonly urlService;
+    private readonly globalConfig;
+    constructor(credentialResolverWorkflowService: CredentialResolverWorkflowService, urlService: UrlService, globalConfig: GlobalConfig);
+    checkWorkflowForExecution(req: Request, _res: Response): Promise<WorkflowExecutionStatus>;
+}

package/dist/modules/dynamic-credentials.ee/workflow-status.controller.js

@@ -0,0 +1,62 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkflowStatusController = void 0;
+const decorators_1 = require("@n8n/decorators");
+const bad_request_error_1 = require("../../errors/response-errors/bad-request.error");
+const credential_resolver_workflow_service_1 = require("./services/credential-resolver-workflow.service");
+const utils_1 = require("./utils");
+const url_service_1 = require("../../services/url.service");
+const config_1 = require("@n8n/config");
+let WorkflowStatusController = class WorkflowStatusController {
+    constructor(credentialResolverWorkflowService, urlService, globalConfig) {
+        this.credentialResolverWorkflowService = credentialResolverWorkflowService;
+        this.urlService = urlService;
+        this.globalConfig = globalConfig;
+    }
+    async checkWorkflowForExecution(req, _res) {
+        const workflowId = req.params['workflowId'];
+        const token = (0, utils_1.getBearerToken)(req);
+        if (!workflowId) {
+            throw new bad_request_error_1.BadRequestError('Workflow ID is missing');
+        }
+        const status = await this.credentialResolverWorkflowService.getWorkflowStatus(workflowId, token);
+        const isReady = status.every((s) => s.status === 'configured');
+        const basePath = this.urlService.getInstanceBaseUrl();
+        const restPath = this.globalConfig.endpoints.rest;
+        const executionStatus = {
+            workflowId,
+            readyToExecute: isReady,
+            credentials: status.map((s) => ({
+                credentialId: s.credentialId,
+                credentialName: s.credentialName,
+                credentialStatus: s.status,
+                credentialType: s.credentialType,
+                authorizationUrl: `${basePath}/${restPath}/credentials/${s.credentialId}/authorize?resolverId=${encodeURIComponent(s.resolverId)}`,
+            })),
+        };
+        return executionStatus;
+    }
+};
+exports.WorkflowStatusController = WorkflowStatusController;
+__decorate([
+    (0, decorators_1.Get)('/:workflowId/execution-status', { skipAuth: true }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object]),
+    __metadata("design:returntype", Promise)
+], WorkflowStatusController.prototype, "checkWorkflowForExecution", null);
+exports.WorkflowStatusController = WorkflowStatusController = __decorate([
+    (0, decorators_1.RestController)('/workflows'),
+    __metadata("design:paramtypes", [credential_resolver_workflow_service_1.CredentialResolverWorkflowService,
+        url_service_1.UrlService,
+        config_1.GlobalConfig])
+], WorkflowStatusController);
+//# sourceMappingURL=workflow-status.controller.js.map

package/dist/modules/dynamic-credentials.ee/workflow-status.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-status.controller.js","sourceRoot":"","sources":["../../../src/modules/dynamic-credentials.ee/workflow-status.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gDAAsD;AAGtD,kFAA6E;AAC7E,0GAAoG;AAEpG,mCAAyC;AACzC,wDAAoD;AACpD,wCAA2C;AAGpC,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IACpC,YACkB,iCAAoE,EACpE,UAAsB,EACtB,YAA0B;QAF1B,sCAAiC,GAAjC,iCAAiC,CAAmC;QACpE,eAAU,GAAV,UAAU,CAAY;QACtB,iBAAY,GAAZ,YAAY,CAAc;IACzC,CAAC;IAYE,AAAN,KAAK,CAAC,yBAAyB,CAAC,GAAY,EAAE,IAAc;QAC3D,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAA,sBAAc,EAAC,GAAG,CAAC,CAAC;QAElC,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,MAAM,IAAI,mCAAe,CAAC,wBAAwB,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iCAAiC,CAAC,iBAAiB,CAC5E,UAAU,EACV,KAAK,CACL,CAAC;QAEF,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC;QAE/D,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,CAAC;QACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC;QAElD,MAAM,eAAe,GAA4B;YAChD,UAAU;YACV,cAAc,EAAE,OAAO;YACvB,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC/B,YAAY,EAAE,CAAC,CAAC,YAAY;gBAC5B,cAAc,EAAE,CAAC,CAAC,cAAc;gBAChC,gBAAgB,EAAE,CAAC,CAAC,MAAM;gBAC1B,cAAc,EAAE,CAAC,CAAC,cAAc;gBAChC,gBAAgB,EAAE,GAAG,QAAQ,IAAI,QAAQ,gBAAgB,CAAC,CAAC,YAAY,yBAAyB,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE;aAClI,CAAC,CAAC;SACH,CAAC;QACF,OAAO,eAAe,CAAC;IACxB,CAAC;CACD,CAAA;AAhDY,4DAAwB;AAiB9B;IADL,IAAA,gBAAG,EAAC,+BAA+B,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;;;;yEA+BxD;mCA/CW,wBAAwB;IADpC,IAAA,2BAAc,EAAC,YAAY,CAAC;qCAGyB,wEAAiC;QACxD,wBAAU;QACR,qBAAY;GAJhC,wBAAwB,CAgDpC"}

package/dist/modules/external-secrets.ee/constants.d.ts

@@ -0,0 +1,6 @@
+import type { INodeProperties } from 'n8n-workflow';
+export declare const EXTERNAL_SECRETS_DB_KEY = "feature.externalSecrets";
+export declare const EXTERNAL_SECRETS_INITIAL_BACKOFF: number;
+export declare const EXTERNAL_SECRETS_MAX_BACKOFF: number;
+export declare const EXTERNAL_SECRETS_NAME_REGEX: RegExp;
+export declare const DOCS_HELP_NOTICE: INodeProperties;

package/dist/modules/external-secrets.ee/constants.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DOCS_HELP_NOTICE = exports.EXTERNAL_SECRETS_NAME_REGEX = exports.EXTERNAL_SECRETS_MAX_BACKOFF = exports.EXTERNAL_SECRETS_INITIAL_BACKOFF = exports.EXTERNAL_SECRETS_DB_KEY = void 0;
+exports.EXTERNAL_SECRETS_DB_KEY = 'feature.externalSecrets';
+exports.EXTERNAL_SECRETS_INITIAL_BACKOFF = 10 * 1000;
+exports.EXTERNAL_SECRETS_MAX_BACKOFF = 5 * 60 * 1000;
+exports.EXTERNAL_SECRETS_NAME_REGEX = /^[a-zA-Z0-9\-\_\/]+$/;
+exports.DOCS_HELP_NOTICE = {
+    displayName: 'Need help filling out these fields? <a href="https://docs.n8n.io/external-secrets/#connect-n8n-to-your-secrets-store" target="_blank">Open docs</a>',
+    name: 'notice',
+    type: 'notice',
+    default: '',
+    noDataExpression: true,
+};
+//# sourceMappingURL=constants.js.map

package/dist/modules/external-secrets.ee/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/modules/external-secrets.ee/constants.ts"],"names":[],"mappings":";;;AAEa,QAAA,uBAAuB,GAAG,yBAAyB,CAAC;AACpD,QAAA,gCAAgC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC7C,QAAA,4BAA4B,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAE7C,QAAA,2BAA2B,GAAG,sBAAsB,CAAC;AAErD,QAAA,gBAAgB,GAAoB;IAChD,WAAW,EACV,qJAAqJ;IACtJ,IAAI,EAAE,QAAQ;IACd,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,EAAE;IACX,gBAAgB,EAAE,IAAI;CACtB,CAAC"}

package/dist/modules/external-secrets.ee/errors/unknown-auth-type.error.d.ts

@@ -0,0 +1,4 @@
+import { UnexpectedError } from 'n8n-workflow';
+export declare class UnknownAuthTypeError extends UnexpectedError {
+    constructor(authType: string);
+}

package/dist/modules/external-secrets.ee/errors/unknown-auth-type.error.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UnknownAuthTypeError = void 0;
+const n8n_workflow_1 = require("n8n-workflow");
+class UnknownAuthTypeError extends n8n_workflow_1.UnexpectedError {
+    constructor(authType) {
+        super('Unknown auth type', { extra: { authType } });
+    }
+}
+exports.UnknownAuthTypeError = UnknownAuthTypeError;
+//# sourceMappingURL=unknown-auth-type.error.js.map

package/dist/modules/external-secrets.ee/errors/unknown-auth-type.error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unknown-auth-type.error.js","sourceRoot":"","sources":["../../../../src/modules/external-secrets.ee/errors/unknown-auth-type.error.ts"],"names":[],"mappings":";;;AAAA,+CAA+C;AAE/C,MAAa,oBAAqB,SAAQ,8BAAe;IACxD,YAAY,QAAgB;QAC3B,KAAK,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IACrD,CAAC;CACD;AAJD,oDAIC"}

package/dist/modules/external-secrets.ee/external-secrets-manager.ee.d.ts

@@ -0,0 +1,68 @@
+import { Logger } from '@n8n/backend-common';
+import { type IExternalSecretsManager } from 'n8n-core';
+import { type IDataObject } from 'n8n-workflow';
+import { EventService } from '../../events/event.service';
+import { Publisher } from '../../scaling/pubsub/publisher.service';
+import { ExternalSecretsProviders } from './external-secrets-providers.ee';
+import { ExternalSecretsConfig } from './external-secrets.config';
+import { ExternalSecretsProviderLifecycle } from './provider-lifecycle.service';
+import { ExternalSecretsProviderRegistry } from './provider-registry.service';
+import { ExternalSecretsRetryManager } from './retry-manager.service';
+import { ExternalSecretsSecretsCache } from './secrets-cache.service';
+import { ExternalSecretsSettingsStore } from './settings-store.service';
+import type { SecretsProvider, SecretsProviderSettings } from './types';
+export declare class ExternalSecretsManager implements IExternalSecretsManager {
+    private readonly logger;
+    private readonly config;
+    private readonly providersFactory;
+    private readonly eventService;
+    private readonly publisher;
+    private readonly settingsStore;
+    private readonly providerRegistry;
+    private readonly providerLifecycle;
+    private readonly retryManager;
+    private readonly secretsCache;
+    initialized: boolean;
+    private refreshInterval?;
+    private initializingPromise?;
+    constructor(logger: Logger, config: ExternalSecretsConfig, providersFactory: ExternalSecretsProviders, eventService: EventService, publisher: Publisher, settingsStore: ExternalSecretsSettingsStore, providerRegistry: ExternalSecretsProviderRegistry, providerLifecycle: ExternalSecretsProviderLifecycle, retryManager: ExternalSecretsRetryManager, secretsCache: ExternalSecretsSecretsCache);
+    init(): Promise<void>;
+    shutdown(): void;
+    getProvider(provider: string): SecretsProvider | undefined;
+    hasProvider(provider: string): boolean;
+    getProviderNames(): string[];
+    getProvidersWithSettings(): Array<{
+        provider: SecretsProvider;
+        settings: SecretsProviderSettings;
+    }>;
+    getProviderWithSettings(provider: string): {
+        provider: SecretsProvider;
+        settings: SecretsProviderSettings;
+    };
+    updateProvider(provider: string): Promise<void>;
+    getSecret(provider: string, name: string): unknown;
+    hasSecret(provider: string, name: string): boolean;
+    getSecretNames(provider: string): string[];
+    getAllSecretNames(): Record<string, string[]>;
+    setProviderSettings(provider: string, settings: IDataObject, userId?: string): Promise<void>;
+    setProviderConnected(provider: string, connected: boolean): Promise<void>;
+    testProviderSettings(provider: string, data: IDataObject): Promise<{
+        success: boolean;
+        testState: string;
+    } | {
+        success: boolean;
+        testState: "error" | "connected" | "tested";
+        error: string | undefined;
+    }>;
+    reloadAllProviders(): Promise<void>;
+    private addProvider;
+    private connectProvider;
+    private reloadProvider;
+    updateSecrets(): Promise<void>;
+    private startSecretsRefresh;
+    private stopSecretsRefresh;
+    private broadcastReload;
+    private trackProviderSave;
+    private determineTestState;
+    private getCachedSettings;
+}