@n8n/backend-network 1.0.0 → 1.1.1

package/dist/ssrf/ip-range-builder.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildIpRangeList = buildIpRangeList;
+const n8n_workflow_1 = require("n8n-workflow");
+const node_net_1 = require("node:net");
+const zod_1 = require("zod");
+function buildIpRangeList(cidrRanges) {
+    const list = new node_net_1.BlockList();
+    const issues = [];
+    for (const rawEntry of cidrRanges) {
+        const entry = rawEntry.trim();
+        if (entry.length === 0) {
+            continue;
+        }
+        try {
+            const cidr = parseCidr(entry);
+            if (!cidr) {
+                issues.push({ entry, error: 'Invalid CIDR notation' });
+                continue;
+            }
+            list.addSubnet(cidr.network, cidr.prefix, cidr.family);
+        }
+        catch (e) {
+            const error = (0, n8n_workflow_1.ensureError)(e);
+            issues.push({ entry, error: `Failed to add IP range: ${error.message}` });
+        }
+    }
+    return { list, issues };
+}
+function parseCidr(entry) {
+    const result = cidrSchema.safeParse(entry);
+    if (!result.success) {
+        return null;
+    }
+    const [network, prefixStr] = result.data.split('/');
+    const family = validateIp(network);
+    if (family === null) {
+        return null;
+    }
+    const prefix = Number.parseInt(prefixStr, 10);
+    return { network, prefix, family };
+}
+const cidrSchema = zod_1.z.string().cidr();
+function validateIp(ip) {
+    const version = (0, node_net_1.isIP)(ip);
+    if (version === 4)
+        return 'ipv4';
+    if (version === 6)
+        return 'ipv6';
+    return null;
+}
+//# sourceMappingURL=ip-range-builder.js.map

package/dist/ssrf/ip-range-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ip-range-builder.js","sourceRoot":"","sources":["../../src/ssrf/ip-range-builder.ts"],"names":[],"mappings":";;AAmBA,4CAyBC;AA5CD,+CAA2C;AAC3C,uCAA2C;AAC3C,6BAAwB;AAiBxB,SAAgB,gBAAgB,CAAC,UAA6B;IAC7D,MAAM,IAAI,GAAG,IAAI,oBAAS,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAmB,EAAE,CAAC;IAElC,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,SAAS;QACV,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;gBACvD,SAAS;YACV,CAAC;YAED,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,IAAA,0BAAW,EAAC,CAAC,CAAC,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC3E,CAAC;IACF,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACzB,CAAC;AAKD,SAAS,SAAS,CACjB,KAAa;IAEb,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;AAErC,SAAS,UAAU,CAAC,EAAU;IAC7B,MAAM,OAAO,GAAG,IAAA,eAAI,EAAC,EAAE,CAAC,CAAC;IACzB,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACjC,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACjC,OAAO,IAAI,CAAC;AACb,CAAC"}

package/dist/ssrf/ssrf-blocked-ip.error.d.ts

@@ -0,0 +1,6 @@
+import { UserError } from 'n8n-workflow';
+export declare class SsrfBlockedIpError extends UserError {
+    readonly ip: string;
+    readonly hostname?: string;
+    constructor(ip: string, hostname?: string);
+}

package/dist/ssrf/ssrf-blocked-ip.error.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SsrfBlockedIpError = void 0;
+const n8n_workflow_1 = require("n8n-workflow");
+class SsrfBlockedIpError extends n8n_workflow_1.UserError {
+    constructor(ip, hostname) {
+        const target = hostname ? `'${hostname}' (${ip})` : ip;
+        super('The request was blocked because it resolves to a restricted IP address', {
+            description: `The target ${target} is not allowed. ` +
+                'This is a security measure to prevent Server-Side Request Forgery (SSRF). ' +
+                'If you need to access internal resources, ask your n8n administrator to allowlist ' +
+                'the hostname or IP range in the environment configuration.',
+            extra: { ip, hostname },
+        });
+        this.name = 'SsrfBlockedIpError';
+        this.ip = ip;
+        this.hostname = hostname;
+    }
+}
+exports.SsrfBlockedIpError = SsrfBlockedIpError;
+//# sourceMappingURL=ssrf-blocked-ip.error.js.map

package/dist/ssrf/ssrf-blocked-ip.error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssrf-blocked-ip.error.js","sourceRoot":"","sources":["../../src/ssrf/ssrf-blocked-ip.error.ts"],"names":[],"mappings":";;;AAAA,+CAAyC;AAKzC,MAAa,kBAAmB,SAAQ,wBAAS;IAIhD,YAAY,EAAU,EAAE,QAAiB;QACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,KAAK,CAAC,wEAAwE,EAAE;YAC/E,WAAW,EACV,cAAc,MAAM,mBAAmB;gBACvC,4EAA4E;gBAC5E,oFAAoF;gBACpF,4DAA4D;YAC7D,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE;SACvB,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC1B,CAAC;CACD;AAnBD,gDAmBC"}

package/dist/ssrf/ssrf-protection.service.d.ts

@@ -0,0 +1,48 @@
+import { Logger, TypedEmitter } from '@n8n/backend-common';
+import { SsrfProtectionConfig } from '@n8n/config';
+import { Result } from 'n8n-workflow';
+import type { LookupFunction } from 'node:net';
+import { DnsResolver } from '../dns';
+export type SsrfCheckResult = Result<void, Error>;
+type SsrfBlockedPayload = {
+    phase: SsrfPhase;
+    reason: string;
+    durationMs: number;
+};
+type SsrfAllowedPayload = {
+    phase: SsrfPhase;
+    durationMs: number;
+};
+type SsrfPhase = 'pre_flight' | 'connect_time' | 'redirect';
+export type SsrfEventMap = {
+    'ssrf.blocked': SsrfBlockedPayload;
+    'ssrf.allowed': SsrfAllowedPayload;
+};
+export interface SsrfBridge {
+    validateIp(ip: string): SsrfCheckResult;
+    validateUrl(url: string | URL): Promise<SsrfCheckResult>;
+    validateRedirectSync(url: string): void;
+    createSecureLookup(): LookupFunction;
+}
+export declare class SsrfProtectionService implements SsrfBridge {
+    private readonly ssrfConfig;
+    private readonly dnsResolver;
+    readonly events: TypedEmitter<SsrfEventMap>;
+    private readonly logger;
+    private readonly blockedIps;
+    private readonly allowedIps;
+    private readonly allowedHostnameMatcher;
+    constructor(ssrfConfig: SsrfProtectionConfig, dnsResolver: DnsResolver, logger: Logger);
+    validateUrl(url: string | URL): Promise<SsrfCheckResult>;
+    validateIp(ip: string): SsrfCheckResult;
+    createSecureLookup(): LookupFunction;
+    validateRedirectSync(url: string): void;
+    private normalizeIpInHostname;
+    private secureLookupAsync;
+    private lookupAndValidate;
+    private withEvents;
+    private toReason;
+    private tryParseUrl;
+    private getIpFamily;
+}
+export {};

package/dist/ssrf/ssrf-protection.service.js

@@ -0,0 +1,192 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SsrfProtectionService = void 0;
+const backend_common_1 = require("@n8n/backend-common");
+const config_1 = require("@n8n/config");
+const di_1 = require("@n8n/di");
+const n8n_workflow_1 = require("n8n-workflow");
+const node_assert_1 = __importDefault(require("node:assert"));
+const node_net_1 = require("node:net");
+const dns_1 = require("../dns");
+const hostname_matcher_1 = require("./hostname-matcher");
+const ip_range_builder_1 = require("./ip-range-builder");
+const ssrf_blocked_ip_error_1 = require("./ssrf-blocked-ip.error");
+let SsrfProtectionService = class SsrfProtectionService {
+    constructor(ssrfConfig, dnsResolver, logger) {
+        this.ssrfConfig = ssrfConfig;
+        this.dnsResolver = dnsResolver;
+        this.events = new backend_common_1.TypedEmitter();
+        this.logger = logger.scoped('ssrf-protection');
+        const blocked = (0, ip_range_builder_1.buildIpRangeList)(this.ssrfConfig.blockedIpRanges);
+        for (const issue of blocked.issues) {
+            this.logger.warn(`Invalid value '${issue.entry}' in N8N_SSRF_BLOCKED_IP_RANGES: ${issue.error}`);
+        }
+        this.blockedIps = blocked.list;
+        const allowed = (0, ip_range_builder_1.buildIpRangeList)(this.ssrfConfig.allowedIpRanges);
+        for (const issue of allowed.issues) {
+            this.logger.warn(`Invalid value '${issue.entry}' in N8N_SSRF_ALLOWED_IP_RANGES: ${issue.error}`);
+        }
+        this.allowedIps = allowed.list;
+        this.allowedHostnameMatcher = new hostname_matcher_1.HostnameMatcher(this.ssrfConfig.allowedHostnames);
+    }
+    async validateUrl(url) {
+        const parsed = this.tryParseUrl(url);
+        if (!parsed) {
+            this.events.emit('ssrf.blocked', {
+                phase: 'pre_flight',
+                reason: 'invalid_url',
+                durationMs: 0,
+            });
+            return (0, n8n_workflow_1.createResultError)(new Error(`Invalid URL: ${String(url)}`));
+        }
+        const result = await this.withEvents('pre_flight', async () => await this.lookupAndValidate(parsed.hostname, { all: true }));
+        return result.ok ? (0, n8n_workflow_1.createResultOk)(undefined) : result;
+    }
+    validateIp(ip) {
+        const family = this.getIpFamily(ip);
+        (0, node_assert_1.default)(family !== null, `Invalid IP address: ${ip}`);
+        if (this.allowedIps.check(ip, family)) {
+            return (0, n8n_workflow_1.createResultOk)(undefined);
+        }
+        if (this.blockedIps.check(ip, family)) {
+            return (0, n8n_workflow_1.createResultError)(new ssrf_blocked_ip_error_1.SsrfBlockedIpError(ip));
+        }
+        return (0, n8n_workflow_1.createResultOk)(undefined);
+    }
+    createSecureLookup() {
+        return async (hostname, options, onResult) => {
+            try {
+                const resolved = await this.secureLookupAsync(hostname, options);
+                if (options.all) {
+                    onResult(null, resolved);
+                    return;
+                }
+                const first = resolved[0];
+                onResult(null, first.address, first.family);
+            }
+            catch (error) {
+                onResult((0, n8n_workflow_1.ensureError)(error), options.all ? [] : '', undefined);
+            }
+        };
+    }
+    validateRedirectSync(url) {
+        const parsed = this.tryParseUrl(url);
+        if (!parsed)
+            return;
+        const { hostname } = parsed;
+        if (this.allowedHostnameMatcher.matches(hostname))
+            return;
+        const cleanIp = this.normalizeIpInHostname(hostname);
+        if ((0, node_net_1.isIP)(cleanIp)) {
+            const result = this.withEvents('redirect', () => this.validateIp(cleanIp));
+            if (!result.ok) {
+                throw result.error;
+            }
+        }
+    }
+    normalizeIpInHostname(hostname) {
+        return hostname.startsWith('[') && hostname.endsWith(']') ? hostname.slice(1, -1) : hostname;
+    }
+    async secureLookupAsync(hostname, options) {
+        const result = await this.withEvents('connect_time', async () => await this.lookupAndValidate(hostname, options));
+        if (!result.ok) {
+            throw result.error;
+        }
+        return result.result;
+    }
+    async lookupAndValidate(hostname, options) {
+        const cleanIp = this.normalizeIpInHostname(hostname);
+        const ipFamily = (0, node_net_1.isIP)(cleanIp);
+        if (ipFamily) {
+            const result = this.validateIp(cleanIp);
+            if (!result.ok) {
+                return result;
+            }
+            return (0, n8n_workflow_1.createResultOk)([
+                {
+                    address: cleanIp,
+                    family: ipFamily,
+                },
+            ]);
+        }
+        const resolved = await this.dnsResolver.lookup(hostname, options);
+        (0, node_assert_1.default)(resolved.length > 0, `DNS lookup for ${hostname} returned no results`);
+        if (this.allowedHostnameMatcher.matches(hostname)) {
+            return (0, n8n_workflow_1.createResultOk)(resolved);
+        }
+        for (const ip of resolved) {
+            const result = this.validateIp(ip.address);
+            if (!result.ok) {
+                return result;
+            }
+        }
+        return (0, n8n_workflow_1.createResultOk)(resolved);
+    }
+    withEvents(phase, fn) {
+        const start = performance.now();
+        const result = fn();
+        const emitAndReturn = (result) => {
+            const durationMs = performance.now() - start;
+            if (result.ok) {
+                this.events.emit('ssrf.allowed', { phase, durationMs });
+            }
+            else {
+                this.events.emit('ssrf.blocked', {
+                    phase,
+                    reason: this.toReason(result.error),
+                    durationMs,
+                });
+            }
+            return result;
+        };
+        const emitAndRethrow = (error) => {
+            emitAndReturn((0, n8n_workflow_1.createResultError)((0, n8n_workflow_1.ensureError)(error)));
+            throw error;
+        };
+        return result instanceof Promise
+            ? result.then(emitAndReturn, emitAndRethrow)
+            : emitAndReturn(result);
+    }
+    toReason(error) {
+        if (error instanceof ssrf_blocked_ip_error_1.SsrfBlockedIpError) {
+            return 'blocked_ip';
+        }
+        return 'dns_error';
+    }
+    tryParseUrl(url) {
+        try {
+            return url instanceof URL ? url : new URL(url);
+        }
+        catch {
+            return null;
+        }
+    }
+    getIpFamily(ip) {
+        const version = (0, node_net_1.isIP)(ip);
+        if (version === 4)
+            return 'ipv4';
+        if (version === 6)
+            return 'ipv6';
+        return null;
+    }
+};
+exports.SsrfProtectionService = SsrfProtectionService;
+exports.SsrfProtectionService = SsrfProtectionService = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [config_1.SsrfProtectionConfig,
+        dns_1.DnsResolver,
+        backend_common_1.Logger])
+], SsrfProtectionService);
+//# sourceMappingURL=ssrf-protection.service.js.map

package/dist/ssrf/ssrf-protection.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ssrf-protection.service.js","sourceRoot":"","sources":["../../src/ssrf/ssrf-protection.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,wDAA2D;AAC3D,wCAAmD;AACnD,gCAAkC;AAClC,+CAAsF;AACtF,8DAAiC;AAGjC,uCAAgC;AAEhC,gCAAqC;AACrC,yDAAqD;AACrD,yDAAsD;AACtD,mEAA6D;AA0CtD,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAWjC,YACkB,UAAgC,EAChC,WAAwB,EACzC,MAAc;QAFG,eAAU,GAAV,UAAU,CAAsB;QAChC,gBAAW,GAAX,WAAW,CAAa;QAZjC,WAAM,GAAG,IAAI,6BAAY,EAAgB,CAAC;QAelD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAE/C,MAAM,OAAO,GAAG,IAAA,mCAAgB,EAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;QAClE,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,IAAI,CACf,kBAAkB,KAAK,CAAC,KAAK,oCAAoC,KAAK,CAAC,KAAK,EAAE,CAC9E,CAAC;QACH,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;QAE/B,MAAM,OAAO,GAAG,IAAA,mCAAgB,EAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;QAClE,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,IAAI,CACf,kBAAkB,KAAK,CAAC,KAAK,oCAAoC,KAAK,CAAC,KAAK,EAAE,CAC9E,CAAC;QACH,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;QAE/B,IAAI,CAAC,sBAAsB,GAAG,IAAI,kCAAe,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;IACrF,CAAC;IAMD,KAAK,CAAC,WAAW,CAAC,GAAiB;QAClC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE;gBAChC,KAAK,EAAE,YAAY;gBACnB,MAAM,EAAE,aAAa;gBACrB,UAAU,EAAE,CAAC;aACb,CAAC,CAAC;YACH,OAAO,IAAA,gCAAiB,EAAC,IAAI,KAAK,CAAC,gBAAgB,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CACnC,YAAY,EACZ,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CACxE,CAAC;QACF,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAA,6BAAc,EAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACvD,CAAC;IAKD,UAAU,CAAC,EAAU;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACpC,IAAA,qBAAM,EAAC,MAAM,KAAK,IAAI,EAAE,uBAAuB,EAAE,EAAE,CAAC,CAAC;QAErD,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC;YACvC,OAAO,IAAA,6BAAc,EAAC,SAAS,CAAC,CAAC;QAClC,CAAC;QAED,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC;YACvC,OAAO,IAAA,gCAAiB,EAAC,IAAI,0CAAkB,CAAC,EAAE,CAAC,CAAC,CAAC;QACtD,CAAC;QAED,OAAO,IAAA,6BAAc,EAAC,SAAS,CAAC,CAAC;IAClC,CAAC;IAaD,kBAAkB;QACjB,OAAO,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;YAC5C,IAAI,CAAC;gBACJ,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;gBAEjE,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;oBACjB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;oBACzB,OAAO;gBACR,CAAC;gBAED,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;gBAC1B,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,QAAQ,CAAC,IAAA,0BAAW,EAAC,KAAK,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;YAChE,CAAC;QACF,CAAC,CAAC;IACH,CAAC;IAQD,oBAAoB,CAAC,GAAW;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM;YAAE,OAAO;QAEpB,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;QAE5B,IAAI,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,QAAQ,CAAC;YAAE,OAAO;QAE1D,MAAM,OAAO,GAAG,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,IAAA,eAAI,EAAC,OAAO,CAAC,EAAE,CAAC;YACnB,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3E,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBAChB,MAAM,MAAM,CAAC,KAAK,CAAC;YACpB,CAAC;QACF,CAAC;IACF,CAAC;IAMO,qBAAqB,CAAC,QAAgB;QAC7C,OAAO,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9F,CAAC;IAKO,KAAK,CAAC,iBAAiB,CAC9B,QAAgB,EAChB,OAAsB;QAEtB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CACnC,cAAc,EACd,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAC3D,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,MAAM,CAAC,KAAK,CAAC;QACpB,CAAC;QAED,OAAO,MAAM,CAAC,MAAM,CAAC;IACtB,CAAC;IAMO,KAAK,CAAC,iBAAiB,CAC9B,QAAgB,EAChB,OAAsB;QAEtB,MAAM,OAAO,GAAG,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,IAAA,eAAI,EAAC,OAAO,CAAC,CAAC;QAE/B,IAAI,QAAQ,EAAE,CAAC;YAGd,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YACxC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBAChB,OAAO,MAAM,CAAC;YACf,CAAC;YAED,OAAO,IAAA,6BAAc,EAAC;gBACrB;oBACC,OAAO,EAAE,OAAO;oBAChB,MAAM,EAAE,QAAQ;iBAChB;aACD,CAAC,CAAC;QACJ,CAAC;QAGD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAElE,IAAA,qBAAM,EAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,kBAAkB,QAAQ,sBAAsB,CAAC,CAAC;QAE9E,IAAI,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnD,OAAO,IAAA,6BAAc,EAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QAED,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;gBAChB,OAAO,MAAM,CAAC;YACf,CAAC;QACF,CAAC;QAED,OAAO,IAAA,6BAAc,EAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;IAQO,UAAU,CACjB,KAAgB,EAChB,EAAsD;QAEtD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,EAAE,EAAE,CAAC;QAEpB,MAAM,aAAa,GAAG,CAAC,MAAwB,EAAoB,EAAE;YACpE,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;YAC7C,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;gBACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YACzD,CAAC;iBAAM,CAAC;gBACP,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE;oBAChC,KAAK;oBACL,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;oBACnC,UAAU;iBACV,CAAC,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC;QACf,CAAC,CAAC;QAEF,MAAM,cAAc,GAAG,CAAC,KAAc,EAAS,EAAE;YAChD,aAAa,CAAC,IAAA,gCAAiB,EAAC,IAAA,0BAAW,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACrD,MAAM,KAAK,CAAC;QACb,CAAC,CAAC;QAEF,OAAO,MAAM,YAAY,OAAO;YAC/B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC;YAC5C,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAEO,QAAQ,CAAC,KAAY;QAC5B,IAAI,KAAK,YAAY,0CAAkB,EAAE,CAAC;YACzC,OAAO,YAAY,CAAC;QACrB,CAAC;QACD,OAAO,WAAW,CAAC;IACpB,CAAC;IAEO,WAAW,CAAC,GAAiB;QACpC,IAAI,CAAC;YACJ,OAAO,GAAG,YAAY,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC;IAEO,WAAW,CAAC,EAAU;QAC7B,MAAM,OAAO,GAAG,IAAA,eAAI,EAAC,EAAE,CAAC,CAAC;QACzB,IAAI,OAAO,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC;QACjC,IAAI,OAAO,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC;QACjC,OAAO,IAAI,CAAC;IACb,CAAC;CACD,CAAA;AAnQY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,YAAO,GAAE;qCAaqB,6BAAoB;QACnB,iBAAW;QACjC,uBAAM;GAdH,qBAAqB,CAmQjC"}

package/package.json

@@ -1,22 +1,50 @@
 {
   "name": "@n8n/backend-network",
-  "version": "1.0.0",
+  "version": "1.1.1",
   "main": "dist/index.js",
   "module": "src/index.ts",
   "types": "dist/index.d.ts",
   "files": [
-    "dist/**/*"
+    "dist/**/*",
+    "LICENSE_EE.md",
+    "LICENSE.md"
   ],
   "dependencies": {
-    "@n8n/backend-common": "1.26.0"
+    "axios": "1.16.1",
+    "cache-manager": "5.2.3",
+    "form-data": "4.0.4",
+    "http-proxy-agent": "7.0.2",
+    "https-proxy-agent": "7.0.6",
+    "iconv-lite": "0.6.3",
+    "proxy-from-env": "^1.1.0",
+    "qs": "6.15.2",
+    "reflect-metadata": "0.2.2",
+    "zod": "3.25.67",
+    "@n8n/backend-common": "1.27.1",
+    "@n8n/di": "0.14.0",
+    "@n8n/config": "2.25.1",
+    "@n8n/constants": "0.27.0",
+    "n8n-workflow": "2.27.0"
   },
   "devDependencies": {
+    "@types/proxy-from-env": "^1.0.4",
     "@vitest/coverage-v8": "4.1.1",
+    "nock": "^14.0.14",
     "vitest": "^4.1.1",
-    "@n8n/typescript-config": "1.5.0",
-    "@n8n/vitest-config": "1.14.0"
+    "vitest-mock-extended": "^3.1.0",
+    "@n8n/vitest-config": "1.15.0",
+    "@n8n/typescript-config": "1.6.0"
+  },
+  "license": "SEE LICENSE IN LICENSE.md",
+  "homepage": "https://n8n.io",
+  "author": {
+    "name": "Jan Oberhauser",
+    "email": "jan@n8n.io"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/n8n-io/n8n.git"
   },
-  "license": "LicenseRef-n8n-sustainable-use",
   "scripts": {
     "clean": "rimraf dist .turbo",
     "dev": "pnpm watch",
@@ -28,8 +56,8 @@
     "lint": "eslint . --quiet",
     "lint:fix": "eslint . --fix",
     "watch": "tsc -p tsconfig.build.json --watch",
-    "test": "vitest run --passWithNoTests",
-    "test:unit": "vitest run --passWithNoTests",
+    "test": "vitest run",
+    "test:unit": "vitest run",
     "test:dev": "vitest --silent=false"
   }
 }