@n8n/n8n-nodes-langchain 2.5.2 → 2.6.0

package/dist/nodes/Guardrails/actions/checks/urls.js

@@ -1,245 +1,226 @@
 "use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var urls_exports = {};
-__export(urls_exports, {
-  createUrlsCheckFn: () => createUrlsCheckFn,
-  urls: () => urls
-});
-module.exports = __toCommonJS(urls_exports);
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createUrlsCheckFn = exports.urls = void 0;
 function ipToInt(ip) {
-  const parts = ip.split(".").map(Number);
-  if (parts.length !== 4 || parts.some((part) => part < 0 || part > 255)) {
-    throw new Error(`Invalid IP address: ${ip}`);
-  }
-  return (parts[0] << 24) + (parts[1] << 16) + (parts[2] << 8) + parts[3];
+    const parts = ip.split('.').map(Number);
+    if (parts.length !== 4 || parts.some((part) => part < 0 || part > 255)) {
+        throw new Error(`Invalid IP address: ${ip}`);
+    }
+    return (parts[0] << 24) + (parts[1] << 16) + (parts[2] << 8) + parts[3];
 }
 function detectUrls(text) {
-  const PUNCTUATION_CLEANUP = /[.,;:!?)\\]]+$/;
-  const detectedUrls = [];
-  const schemePatterns = [
-    /https?:\/\/[^\s<>"{}|\\^`\[\]]+/gi,
-    /ftp:\/\/[^\s<>"{}|\\^`\[\]]+/gi,
-    /data:[^\s<>"{}|\\^`\[\]]+/gi,
-    /javascript:[^\s<>"{}|\\^`\[\]]+/gi,
-    /vbscript:[^\s<>"{}|\\^`\[\]]+/gi,
-    /mailto:[^\s<>"{}|\\^`\[\]]+/gi
-  ];
-  const schemeUrls = /* @__PURE__ */ new Set();
-  for (const pattern of schemePatterns) {
-    const matches = text.match(pattern) || [];
-    for (let match of matches) {
-      match = match.replace(PUNCTUATION_CLEANUP, "");
-      if (match) {
-        detectedUrls.push(match);
-        if (match.includes("://")) {
-          const domainPart = match.split("://", 2)[1].split("/")[0].split("?")[0].split("#")[0];
-          schemeUrls.add(domainPart.toLowerCase());
-        }
-      }
+    const PUNCTUATION_CLEANUP = /[.,;:!?)\\]]+$/;
+    const detectedUrls = [];
+    const schemePatterns = [
+        /https?:\/\/[^\s<>"{}|\\^`\[\]]+/gi,
+        /ftp:\/\/[^\s<>"{}|\\^`\[\]]+/gi,
+        /data:[^\s<>"{}|\\^`\[\]]+/gi,
+        /javascript:[^\s<>"{}|\\^`\[\]]+/gi,
+        /vbscript:[^\s<>"{}|\\^`\[\]]+/gi,
+        /mailto:[^\s<>"{}|\\^`\[\]]+/gi,
+    ];
+    const schemeUrls = new Set();
+    for (const pattern of schemePatterns) {
+        const matches = text.match(pattern) || [];
+        for (let match of matches) {
+            match = match.replace(PUNCTUATION_CLEANUP, '');
+            if (match) {
+                detectedUrls.push(match);
+                if (match.includes('://')) {
+                    const domainPart = match.split('://', 2)[1].split('/')[0].split('?')[0].split('#')[0];
+                    schemeUrls.add(domainPart.toLowerCase());
+                }
+            }
+        }
     }
-  }
-  const domainPattern = /\b(?:www\.)?[a-zA-Z0-9][a-zA-Z0-9.-]*\.[a-zA-Z]{2,}(?:\/[^\s]*)?/gi;
-  const domainMatches = text.match(domainPattern) || [];
-  for (let match of domainMatches) {
-    match = match.replace(PUNCTUATION_CLEANUP, "");
-    if (match) {
-      const domainPart = match.split("/")[0].split("?")[0].split("#")[0].toLowerCase();
-      if (!schemeUrls.has(domainPart)) {
-        detectedUrls.push(match);
-      }
+    const domainPattern = /\b(?:www\.)?[a-zA-Z0-9][a-zA-Z0-9.-]*\.[a-zA-Z]{2,}(?:\/[^\s]*)?/gi;
+    const domainMatches = text.match(domainPattern) || [];
+    for (let match of domainMatches) {
+        match = match.replace(PUNCTUATION_CLEANUP, '');
+        if (match) {
+            const domainPart = match.split('/')[0].split('?')[0].split('#')[0].toLowerCase();
+            if (!schemeUrls.has(domainPart)) {
+                detectedUrls.push(match);
+            }
+        }
     }
-  }
-  const ipPattern = /\b(?:[0-9]{1,3}\.){3}[0-9]{1,3}(?::[0-9]+)?(?:\/[^\s]*)?/g;
-  const ipMatches = text.match(ipPattern) || [];
-  for (let match of ipMatches) {
-    match = match.replace(PUNCTUATION_CLEANUP, "");
-    if (match) {
-      const ipPart = match.split("/")[0].split("?")[0].split("#")[0].toLowerCase();
-      if (!schemeUrls.has(ipPart)) {
-        detectedUrls.push(match);
-      }
+    const ipPattern = /\b(?:[0-9]{1,3}\.){3}[0-9]{1,3}(?::[0-9]+)?(?:\/[^\s]*)?/g;
+    const ipMatches = text.match(ipPattern) || [];
+    for (let match of ipMatches) {
+        match = match.replace(PUNCTUATION_CLEANUP, '');
+        if (match) {
+            const ipPart = match.split('/')[0].split('?')[0].split('#')[0].toLowerCase();
+            if (!schemeUrls.has(ipPart)) {
+                detectedUrls.push(match);
+            }
+        }
     }
-  }
-  const finalUrls = [];
-  const schemeUrlDomains = /* @__PURE__ */ new Set();
-  for (const url of detectedUrls) {
-    if (url.includes("://")) {
-      try {
-        const parsed = new URL(url);
-        if (parsed.hostname) {
-          schemeUrlDomains.add(parsed.hostname.toLowerCase());
-          const bareDomain = parsed.hostname.toLowerCase().replace(/^www\./, "");
-          schemeUrlDomains.add(bareDomain);
-        }
-      } catch (error) {
-      }
-      finalUrls.push(url);
+    const finalUrls = [];
+    const schemeUrlDomains = new Set();
+    for (const url of detectedUrls) {
+        if (url.includes('://')) {
+            try {
+                const parsed = new URL(url);
+                if (parsed.hostname) {
+                    schemeUrlDomains.add(parsed.hostname.toLowerCase());
+                    const bareDomain = parsed.hostname.toLowerCase().replace(/^www\./, '');
+                    schemeUrlDomains.add(bareDomain);
+                }
+            }
+            catch (error) {
+            }
+            finalUrls.push(url);
+        }
     }
-  }
-  for (const url of detectedUrls) {
-    if (!url.includes("://")) {
-      const urlLower = url.toLowerCase().replace(/^www\./, "");
-      if (!schemeUrlDomains.has(urlLower)) {
-        finalUrls.push(url);
-      }
+    for (const url of detectedUrls) {
+        if (!url.includes('://')) {
+            const urlLower = url.toLowerCase().replace(/^www\./, '');
+            if (!schemeUrlDomains.has(urlLower)) {
+                finalUrls.push(url);
+            }
+        }
     }
-  }
-  return [...new Set(finalUrls.filter((url) => url))];
+    return [...new Set(finalUrls.filter((url) => url))];
 }
 function validateUrlSecurity(urlString, config) {
-  try {
-    let parsedUrl;
-    let originalScheme;
-    if (urlString.includes("://")) {
-      parsedUrl = new URL(urlString);
-      originalScheme = parsedUrl.protocol.replace(":", "");
-    } else if (urlString.includes(":") && urlString.split(":", 1)[0].match(/^(data|javascript|vbscript|mailto)$/)) {
-      parsedUrl = new URL(urlString);
-      originalScheme = parsedUrl.protocol.replace(":", "");
-    } else {
-      parsedUrl = new URL(`http://${urlString}`);
-      originalScheme = "http";
-    }
-    if (!parsedUrl.protocol) {
-      return { parsedUrl: null, reason: "Invalid URL format" };
-    }
-    const specialSchemes = /* @__PURE__ */ new Set(["data:", "javascript:", "vbscript:", "mailto:"]);
-    if (!specialSchemes.has(parsedUrl.protocol) && !parsedUrl.hostname) {
-      return { parsedUrl: null, reason: "Invalid URL format" };
-    }
-    if (!config.allowedSchemes.includes(originalScheme)) {
-      return { parsedUrl: null, reason: `Blocked scheme: ${originalScheme}` };
+    try {
+        let parsedUrl;
+        let originalScheme;
+        if (urlString.includes('://')) {
+            parsedUrl = new URL(urlString);
+            originalScheme = parsedUrl.protocol.replace(':', '');
+        }
+        else if (urlString.includes(':') &&
+            urlString.split(':', 1)[0].match(/^(data|javascript|vbscript|mailto)$/)) {
+            parsedUrl = new URL(urlString);
+            originalScheme = parsedUrl.protocol.replace(':', '');
+        }
+        else {
+            parsedUrl = new URL(`http://${urlString}`);
+            originalScheme = 'http';
+        }
+        if (!parsedUrl.protocol) {
+            return { parsedUrl: null, reason: 'Invalid URL format' };
+        }
+        const specialSchemes = new Set(['data:', 'javascript:', 'vbscript:', 'mailto:']);
+        if (!specialSchemes.has(parsedUrl.protocol) && !parsedUrl.hostname) {
+            return { parsedUrl: null, reason: 'Invalid URL format' };
+        }
+        if (!config.allowedSchemes.includes(originalScheme)) {
+            return { parsedUrl: null, reason: `Blocked scheme: ${originalScheme}` };
+        }
+        if (config.blockUserinfo && (parsedUrl.username || parsedUrl.password)) {
+            return { parsedUrl: null, reason: 'Contains userinfo (potential credential injection)' };
+        }
+        return { parsedUrl, reason: '' };
     }
-    if (config.blockUserinfo && (parsedUrl.username || parsedUrl.password)) {
-      return { parsedUrl: null, reason: "Contains userinfo (potential credential injection)" };
+    catch (error) {
+        const errorMessage = error instanceof Error ? error.message : String(error);
+        return { parsedUrl: null, reason: `Invalid URL format: ${errorMessage}` };
     }
-    return { parsedUrl, reason: "" };
-  } catch (error) {
-    const errorMessage = error instanceof Error ? error.message : String(error);
-    return { parsedUrl: null, reason: `Invalid URL format: ${errorMessage}` };
-  }
 }
 function isUrlAllowed(parsedUrl, allowList, allowSubdomains) {
-  if (allowList.length === 0) {
-    return false;
-  }
-  const urlHost = parsedUrl.hostname?.toLowerCase();
-  if (!urlHost) {
-    return false;
-  }
-  for (const allowedEntry of allowList) {
-    const entry = allowedEntry.toLowerCase().trim();
-    if (entry.includes("://")) {
-      try {
-        const allowedUrl = new URL(entry);
-        const allowedHost = allowedUrl.hostname?.toLowerCase();
-        const allowedPath = allowedUrl.pathname;
-        if (urlHost === allowedHost) {
-          if (!allowedPath || allowedPath === "/" || parsedUrl.pathname.startsWith(allowedPath)) {
-            return true;
-          }
-        }
-      } catch (error) {
-        throw new Error(
-          `Invalid URL in allow list: "${entry}" - ${error instanceof Error ? error.message : error}`
-        );
-      }
-      continue;
-    }
-    try {
-      if (/^\d+\.\d+\.\d+\.\d+/.test(entry.split("/")[0])) {
-        if (entry === urlHost) {
-          return true;
-        }
-        if (entry.includes("/") && urlHost.match(/^\d+\.\d+\.\d+\.\d+$/)) {
-          const [network, prefixStr] = entry.split("/");
-          const prefix = parseInt(prefixStr);
-          if (prefix >= 0 && prefix <= 32) {
-            const networkInt = ipToInt(network);
-            const hostInt = ipToInt(urlHost);
-            const mask = 4294967295 << 32 - prefix >>> 0;
-            if ((networkInt & mask) === (hostInt & mask)) {
-              return true;
+    if (allowList.length === 0) {
+        return false;
+    }
+    const urlHost = parsedUrl.hostname?.toLowerCase();
+    if (!urlHost) {
+        return false;
+    }
+    for (const allowedEntry of allowList) {
+        const entry = allowedEntry.toLowerCase().trim();
+        if (entry.includes('://')) {
+            try {
+                const allowedUrl = new URL(entry);
+                const allowedHost = allowedUrl.hostname?.toLowerCase();
+                const allowedPath = allowedUrl.pathname;
+                if (urlHost === allowedHost) {
+                    if (!allowedPath || allowedPath === '/' || parsedUrl.pathname.startsWith(allowedPath)) {
+                        return true;
+                    }
+                }
             }
-          }
-        }
-        continue;
-      }
-    } catch (error) {
-      if (/^\d+\.\d+/.test(entry)) {
-        console.warn(
-          `Warning: Malformed IP address in allow list: "${entry}" - ${error instanceof Error ? error.message : error}`
-        );
-      }
-    }
-    const allowedDomain = entry.replace(/^www\./, "");
-    const urlDomain = urlHost.replace(/^www\./, "");
-    if (urlDomain === allowedDomain) {
-      return true;
-    }
-    if (allowSubdomains && urlDomain.endsWith(`.${allowedDomain}`)) {
-      return true;
+            catch (error) {
+                throw new Error(`Invalid URL in allow list: "${entry}" - ${error instanceof Error ? error.message : error}`);
+            }
+            continue;
+        }
+        try {
+            if (/^\d+\.\d+\.\d+\.\d+/.test(entry.split('/')[0])) {
+                if (entry === urlHost) {
+                    return true;
+                }
+                if (entry.includes('/') && urlHost.match(/^\d+\.\d+\.\d+\.\d+$/)) {
+                    const [network, prefixStr] = entry.split('/');
+                    const prefix = parseInt(prefixStr);
+                    if (prefix >= 0 && prefix <= 32) {
+                        const networkInt = ipToInt(network);
+                        const hostInt = ipToInt(urlHost);
+                        const mask = (0xffffffff << (32 - prefix)) >>> 0;
+                        if ((networkInt & mask) === (hostInt & mask)) {
+                            return true;
+                        }
+                    }
+                }
+                continue;
+            }
+        }
+        catch (error) {
+            if (/^\d+\.\d+/.test(entry)) {
+                console.warn(`Warning: Malformed IP address in allow list: "${entry}" - ${error instanceof Error ? error.message : error}`);
+            }
+        }
+        const allowedDomain = entry.replace(/^www\./, '');
+        const urlDomain = urlHost.replace(/^www\./, '');
+        if (urlDomain === allowedDomain) {
+            return true;
+        }
+        if (allowSubdomains && urlDomain.endsWith(`.${allowedDomain}`)) {
+            return true;
+        }
     }
-  }
-  return false;
+    return false;
 }
 const urls = (data, config) => {
-  const detectedUrls = detectUrls(data);
-  const allowed = [];
-  const blocked = [];
-  const blockedReasons = [];
-  for (const urlString of detectedUrls) {
-    const { parsedUrl, reason } = validateUrlSecurity(urlString, config);
-    if (parsedUrl === null) {
-      blocked.push(urlString);
-      blockedReasons.push(`${urlString}: ${reason}`);
-      continue;
-    }
-    const hostlessSchemes = /* @__PURE__ */ new Set(["data:", "javascript:", "vbscript:", "mailto:"]);
-    if (hostlessSchemes.has(parsedUrl.protocol)) {
-      allowed.push(urlString);
-    } else if (isUrlAllowed(parsedUrl, config.allowedUrls, config.allowSubdomains)) {
-      allowed.push(urlString);
-    } else {
-      blocked.push(urlString);
-      blockedReasons.push(`${urlString}: Not in allow list`);
-    }
-  }
-  const tripwireTriggered = blocked.length > 0;
-  return {
-    guardrailName: "urls",
-    tripwireTriggered,
-    info: {
-      maskEntities: {
-        URL: blocked
-      },
-      detected: detectedUrls,
-      allowed,
-      blocked,
-      blockedReasons
+    const detectedUrls = detectUrls(data);
+    const allowed = [];
+    const blocked = [];
+    const blockedReasons = [];
+    for (const urlString of detectedUrls) {
+        const { parsedUrl, reason } = validateUrlSecurity(urlString, config);
+        if (parsedUrl === null) {
+            blocked.push(urlString);
+            blockedReasons.push(`${urlString}: ${reason}`);
+            continue;
+        }
+        const hostlessSchemes = new Set(['data:', 'javascript:', 'vbscript:', 'mailto:']);
+        if (hostlessSchemes.has(parsedUrl.protocol)) {
+            allowed.push(urlString);
+        }
+        else if (isUrlAllowed(parsedUrl, config.allowedUrls, config.allowSubdomains)) {
+            allowed.push(urlString);
+        }
+        else {
+            blocked.push(urlString);
+            blockedReasons.push(`${urlString}: Not in allow list`);
+        }
     }
-  };
+    const tripwireTriggered = blocked.length > 0;
+    return {
+        guardrailName: 'urls',
+        tripwireTriggered,
+        info: {
+            maskEntities: {
+                URL: blocked,
+            },
+            detected: detectedUrls,
+            allowed,
+            blocked,
+            blockedReasons,
+        },
+    };
 };
-const createUrlsCheckFn = (config) => (input) => urls(input, config);
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  createUrlsCheckFn,
-  urls
-});
+exports.urls = urls;
+const createUrlsCheckFn = (config) => (input) => (0, exports.urls)(input, config);
+exports.createUrlsCheckFn = createUrlsCheckFn;
 //# sourceMappingURL=urls.js.map

package/dist/nodes/Guardrails/actions/checks/urls.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../nodes/Guardrails/actions/checks/urls.ts"],"sourcesContent":["// Source: https://github.com/openai/openai-guardrails-js/blob/b9b99b4fb454f02a362c2836aec6285176ec40a8/src/checks/urls.ts\n\nimport type { CreateCheckFn, GuardrailResult } from '../types';\n\nexport type UrlsConfig = {\n\tallowedUrls: string[];\n\tallowedSchemes: string[];\n\tblockUserinfo: boolean;\n\tallowSubdomains: boolean;\n};\n\n/**\n * Convert IPv4 address string to 32-bit integer for CIDR calculations.\n */\nfunction ipToInt(ip: string): number {\n\tconst parts = ip.split('.').map(Number);\n\tif (parts.length !== 4 || parts.some((part) => part < 0 || part > 255)) {\n\t\tthrow new Error(`Invalid IP address: ${ip}`);\n\t}\n\treturn (parts[0] << 24) + (parts[1] << 16) + (parts[2] << 8) + parts[3];\n}\n\n/**\n * Detect URLs in text using robust regex patterns.\n */\nfunction detectUrls(text: string): string[] {\n\t// Pattern for cleaning trailing punctuation (] must be escaped)\n\tconst PUNCTUATION_CLEANUP = /[.,;:!?)\\\\]]+$/;\n\n\tconst detectedUrls: string[] = [];\n\n\t// Pattern 1: URLs with schemes (highest priority)\n\tconst schemePatterns = [\n\t\t/https?:\\/\\/[^\\s<>\"{}|\\\\^`\\[\\]]+/gi,\n\t\t/ftp:\\/\\/[^\\s<>\"{}|\\\\^`\\[\\]]+/gi,\n\t\t/data:[^\\s<>\"{}|\\\\^`\\[\\]]+/gi,\n\t\t/javascript:[^\\s<>\"{}|\\\\^`\\[\\]]+/gi,\n\t\t/vbscript:[^\\s<>\"{}|\\\\^`\\[\\]]+/gi,\n\t\t/mailto:[^\\s<>\"{}|\\\\^`\\[\\]]+/gi,\n\t];\n\n\tconst schemeUrls = new Set<string>();\n\tfor (const pattern of schemePatterns) {\n\t\tconst matches = text.match(pattern) || [];\n\t\tfor (let match of matches) {\n\t\t\t// Clean trailing punctuation\n\t\t\tmatch = match.replace(PUNCTUATION_CLEANUP, '');\n\t\t\tif (match) {\n\t\t\t\tdetectedUrls.push(match);\n\t\t\t\t// Track the domain part to avoid duplicates\n\t\t\t\tif (match.includes('://')) {\n\t\t\t\t\tconst domainPart = match.split('://', 2)[1].split('/')[0].split('?')[0].split('#')[0];\n\t\t\t\t\tschemeUrls.add(domainPart.toLowerCase());\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\n\t// Pattern 2: Domain-like patterns without schemes (exclude already found)\n\tconst domainPattern = /\\b(?:www\\.)?[a-zA-Z0-9][a-zA-Z0-9.-]*\\.[a-zA-Z]{2,}(?:\\/[^\\s]*)?/gi;\n\tconst domainMatches = text.match(domainPattern) || [];\n\n\tfor (let match of domainMatches) {\n\t\t// Clean trailing punctuation\n\t\tmatch = match.replace(PUNCTUATION_CLEANUP, '');\n\t\tif (match) {\n\t\t\t// Extract just the domain part for comparison\n\t\t\tconst domainPart = match.split('/')[0].split('?')[0].split('#')[0].toLowerCase();\n\t\t\t// Only add if we haven't already found this domain with a scheme\n\t\t\tif (!schemeUrls.has(domainPart)) {\n\t\t\t\tdetectedUrls.push(match);\n\t\t\t}\n\t\t}\n\t}\n\n\t// Pattern 3: IP addresses (exclude already found)\n\tconst ipPattern = /\\b(?:[0-9]{1,3}\\.){3}[0-9]{1,3}(?::[0-9]+)?(?:\\/[^\\s]*)?/g;\n\tconst ipMatches = text.match(ipPattern) || [];\n\n\tfor (let match of ipMatches) {\n\t\t// Clean trailing punctuation\n\t\tmatch = match.replace(PUNCTUATION_CLEANUP, '');\n\t\tif (match) {\n\t\t\t// Extract IP part for comparison\n\t\t\tconst ipPart = match.split('/')[0].split('?')[0].split('#')[0].toLowerCase();\n\t\t\tif (!schemeUrls.has(ipPart)) {\n\t\t\t\tdetectedUrls.push(match);\n\t\t\t}\n\t\t}\n\t}\n\n\t// Advanced deduplication: Remove domains that are already part of full URLs\n\tconst finalUrls: string[] = [];\n\tconst schemeUrlDomains = new Set<string>();\n\n\t// First pass: collect all domains from scheme-ful URLs\n\tfor (const url of detectedUrls) {\n\t\tif (url.includes('://')) {\n\t\t\ttry {\n\t\t\t\tconst parsed = new URL(url);\n\t\t\t\tif (parsed.hostname) {\n\t\t\t\t\tschemeUrlDomains.add(parsed.hostname.toLowerCase());\n\t\t\t\t\t// Also add www-stripped version\n\t\t\t\t\tconst bareDomain = parsed.hostname.toLowerCase().replace(/^www\\./, '');\n\t\t\t\t\tschemeUrlDomains.add(bareDomain);\n\t\t\t\t}\n\t\t\t} catch (error) {\n\t\t\t\t// Skip URLs with parsing errors (malformed URLs, encoding issues)\n\t\t\t\t// This is expected for edge cases and doesn't require logging\n\t\t\t}\n\t\t\tfinalUrls.push(url);\n\t\t}\n\t}\n\n\t// Second pass: only add scheme-less URLs if their domain isn't already covered\n\tfor (const url of detectedUrls) {\n\t\tif (!url.includes('://')) {\n\t\t\t// Check if this domain is already covered by a full URL\n\t\t\tconst urlLower = url.toLowerCase().replace(/^www\\./, '');\n\t\t\tif (!schemeUrlDomains.has(urlLower)) {\n\t\t\t\tfinalUrls.push(url);\n\t\t\t}\n\t\t}\n\t}\n\n\t// Remove empty URLs and return unique list\n\treturn [...new Set(finalUrls.filter((url) => url))];\n}\n\n/**\n * Validate URL against security configuration.\n */\nfunction validateUrlSecurity(\n\turlString: string,\n\tconfig: UrlsConfig,\n): { parsedUrl: URL | null; reason: string } {\n\ttry {\n\t\tlet parsedUrl: URL;\n\t\tlet originalScheme: string;\n\n\t\t// Parse URL - preserve original scheme for validation\n\t\tif (urlString.includes('://')) {\n\t\t\t// Standard URL with double-slash scheme (http://, https://, ftp://, etc.)\n\t\t\tparsedUrl = new URL(urlString);\n\t\t\toriginalScheme = parsedUrl.protocol.replace(':', '');\n\t\t} else if (\n\t\t\turlString.includes(':') &&\n\t\t\turlString.split(':', 1)[0].match(/^(data|javascript|vbscript|mailto)$/)\n\t\t) {\n\t\t\t// Special single-colon schemes\n\t\t\tparsedUrl = new URL(urlString);\n\t\t\toriginalScheme = parsedUrl.protocol.replace(':', '');\n\t\t} else {\n\t\t\t// Add http scheme for parsing, but remember this is a default\n\t\t\tparsedUrl = new URL(`http://${urlString}`);\n\t\t\toriginalScheme = 'http'; // Default scheme for scheme-less URLs\n\t\t}\n\n\t\t// Basic validation: must have scheme and hostname (except for special schemes)\n\t\tif (!parsedUrl.protocol) {\n\t\t\treturn { parsedUrl: null, reason: 'Invalid URL format' };\n\t\t}\n\n\t\t// Special schemes like data: and javascript: don't need hostname\n\t\tconst specialSchemes = new Set(['data:', 'javascript:', 'vbscript:', 'mailto:']);\n\t\tif (!specialSchemes.has(parsedUrl.protocol) && !parsedUrl.hostname) {\n\t\t\treturn { parsedUrl: null, reason: 'Invalid URL format' };\n\t\t}\n\n\t\t// Security validations - use original scheme\n\t\tif (!config.allowedSchemes.includes(originalScheme)) {\n\t\t\treturn { parsedUrl: null, reason: `Blocked scheme: ${originalScheme}` };\n\t\t}\n\n\t\tif (config.blockUserinfo && (parsedUrl.username || parsedUrl.password)) {\n\t\t\treturn { parsedUrl: null, reason: 'Contains userinfo (potential credential injection)' };\n\t\t}\n\n\t\t// Everything else (IPs, localhost, private IPs) goes through allow list logic\n\t\treturn { parsedUrl, reason: '' };\n\t} catch (error) {\n\t\t// Provide specific error information for debugging\n\t\tconst errorMessage = error instanceof Error ? error.message : String(error);\n\t\treturn { parsedUrl: null, reason: `Invalid URL format: ${errorMessage}` };\n\t}\n}\n\n/**\n * Check if URL is allowed based on the allow list configuration.\n */\nfunction isUrlAllowed(parsedUrl: URL, allowList: string[], allowSubdomains: boolean): boolean {\n\tif (allowList.length === 0) {\n\t\treturn false;\n\t}\n\n\tconst urlHost = parsedUrl.hostname?.toLowerCase();\n\tif (!urlHost) {\n\t\treturn false;\n\t}\n\n\tfor (const allowedEntry of allowList) {\n\t\tconst entry = allowedEntry.toLowerCase().trim();\n\n\t\t// Handle full URLs with specific paths\n\t\tif (entry.includes('://')) {\n\t\t\ttry {\n\t\t\t\tconst allowedUrl = new URL(entry);\n\t\t\t\tconst allowedHost = allowedUrl.hostname?.toLowerCase();\n\t\t\t\tconst allowedPath = allowedUrl.pathname;\n\n\t\t\t\tif (urlHost === allowedHost) {\n\t\t\t\t\t// Check if the URL path starts with the allowed path\n\t\t\t\t\tif (!allowedPath || allowedPath === '/' || parsedUrl.pathname.startsWith(allowedPath)) {\n\t\t\t\t\t\treturn true;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t} catch (error) {\n\t\t\t\tthrow new Error(\n\t\t\t\t\t`Invalid URL in allow list: \"${entry}\" - ${error instanceof Error ? error.message : error}`,\n\t\t\t\t);\n\t\t\t}\n\t\t\tcontinue;\n\t\t}\n\n\t\t// Handle IP addresses and CIDR blocks\n\t\ttry {\n\t\t\t// Basic IP pattern check\n\t\t\tif (/^\\d+\\.\\d+\\.\\d+\\.\\d+/.test(entry.split('/')[0])) {\n\t\t\t\tif (entry === urlHost) {\n\t\t\t\t\treturn true;\n\t\t\t\t}\n\t\t\t\t// Proper CIDR validation\n\t\t\t\tif (entry.includes('/') && urlHost.match(/^\\d+\\.\\d+\\.\\d+\\.\\d+$/)) {\n\t\t\t\t\tconst [network, prefixStr] = entry.split('/');\n\t\t\t\t\tconst prefix = parseInt(prefixStr);\n\n\t\t\t\t\tif (prefix >= 0 && prefix <= 32) {\n\t\t\t\t\t\t// Convert IPs to 32-bit integers for bitwise comparison\n\t\t\t\t\t\tconst networkInt = ipToInt(network);\n\t\t\t\t\t\tconst hostInt = ipToInt(urlHost);\n\n\t\t\t\t\t\t// Create subnet mask\n\t\t\t\t\t\tconst mask = (0xffffffff << (32 - prefix)) >>> 0;\n\n\t\t\t\t\t\t// Check if host is in the network\n\t\t\t\t\t\tif ((networkInt & mask) === (hostInt & mask)) {\n\t\t\t\t\t\t\treturn true;\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t} catch (error) {\n\t\t\t// Expected: entry is not an IP address/CIDR, continue to domain matching\n\t\t\t// Only log if it looks like it was intended to be an IP but failed parsing\n\t\t\tif (/^\\d+\\.\\d+/.test(entry)) {\n\t\t\t\tconsole.warn(\n\t\t\t\t\t`Warning: Malformed IP address in allow list: \"${entry}\" - ${error instanceof Error ? error.message : error}`,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\n\t\t// Handle domain matching\n\t\tconst allowedDomain = entry.replace(/^www\\./, '');\n\t\tconst urlDomain = urlHost.replace(/^www\\./, '');\n\n\t\t// Exact match always allowed\n\t\tif (urlDomain === allowedDomain) {\n\t\t\treturn true;\n\t\t}\n\n\t\t// Subdomain matching if enabled\n\t\tif (allowSubdomains && urlDomain.endsWith(`.${allowedDomain}`)) {\n\t\t\treturn true;\n\t\t}\n\t}\n\n\treturn false;\n}\n\n/**\n * Main URL filtering function.\n */\nexport const urls = (data: string, config: UrlsConfig): GuardrailResult => {\n\t// Detect URLs in the text\n\tconst detectedUrls = detectUrls(data);\n\n\tconst allowed: string[] = [];\n\tconst blocked: string[] = [];\n\tconst blockedReasons: string[] = [];\n\n\tfor (const urlString of detectedUrls) {\n\t\t// Validate URL with security checks\n\t\tconst { parsedUrl, reason } = validateUrlSecurity(urlString, config);\n\n\t\tif (parsedUrl === null) {\n\t\t\tblocked.push(urlString);\n\t\t\tblockedReasons.push(`${urlString}: ${reason}`);\n\t\t\tcontinue;\n\t\t}\n\n\t\t// Check against allow list\n\t\t// Special schemes (data:, javascript:, mailto:) don't have meaningful hosts\n\t\t// so they only need scheme validation, not host-based allow list checking\n\t\tconst hostlessSchemes = new Set(['data:', 'javascript:', 'vbscript:', 'mailto:']);\n\t\tif (hostlessSchemes.has(parsedUrl.protocol)) {\n\t\t\t// For hostless schemes, only scheme permission matters (no allow list needed)\n\t\t\t// They were already validated for scheme permission in validateUrlSecurity\n\t\t\tallowed.push(urlString);\n\t\t} else if (isUrlAllowed(parsedUrl, config.allowedUrls, config.allowSubdomains)) {\n\t\t\tallowed.push(urlString);\n\t\t} else {\n\t\t\tblocked.push(urlString);\n\t\t\tblockedReasons.push(`${urlString}: Not in allow list`);\n\t\t}\n\t}\n\n\tconst tripwireTriggered = blocked.length > 0;\n\n\treturn {\n\t\tguardrailName: 'urls',\n\t\ttripwireTriggered,\n\t\tinfo: {\n\t\t\tmaskEntities: {\n\t\t\t\tURL: blocked,\n\t\t\t},\n\t\t\tdetected: detectedUrls,\n\t\t\tallowed,\n\t\t\tblocked,\n\t\t\tblockedReasons,\n\t\t},\n\t};\n};\n\nexport const createUrlsCheckFn: CreateCheckFn<UrlsConfig> = (config) => (input: string) =>\n\turls(input, config);\n"],"mappings":";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAcA,SAAS,QAAQ,IAAoB;AACpC,QAAM,QAAQ,GAAG,MAAM,GAAG,EAAE,IAAI,MAAM;AACtC,MAAI,MAAM,WAAW,KAAK,MAAM,KAAK,CAAC,SAAS,OAAO,KAAK,OAAO,GAAG,GAAG;AACvE,UAAM,IAAI,MAAM,uBAAuB,EAAE,EAAE;AAAA,EAC5C;AACA,UAAQ,MAAM,CAAC,KAAK,OAAO,MAAM,CAAC,KAAK,OAAO,MAAM,CAAC,KAAK,KAAK,MAAM,CAAC;AACvE;AAKA,SAAS,WAAW,MAAwB;AAE3C,QAAM,sBAAsB;AAE5B,QAAM,eAAyB,CAAC;AAGhC,QAAM,iBAAiB;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACD;AAEA,QAAM,aAAa,oBAAI,IAAY;AACnC,aAAW,WAAW,gBAAgB;AACrC,UAAM,UAAU,KAAK,MAAM,OAAO,KAAK,CAAC;AACxC,aAAS,SAAS,SAAS;AAE1B,cAAQ,MAAM,QAAQ,qBAAqB,EAAE;AAC7C,UAAI,OAAO;AACV,qBAAa,KAAK,KAAK;AAEvB,YAAI,MAAM,SAAS,KAAK,GAAG;AAC1B,gBAAM,aAAa,MAAM,MAAM,OAAO,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,EAAE,CAAC,EAAE,MAAM,GAAG,EAAE,CAAC,EAAE,MAAM,GAAG,EAAE,CAAC;AACpF,qBAAW,IAAI,WAAW,YAAY,CAAC;AAAA,QACxC;AAAA,MACD;AAAA,IACD;AAAA,EACD;AAGA,QAAM,gBAAgB;AACtB,QAAM,gBAAgB,KAAK,MAAM,aAAa,KAAK,CAAC;AAEpD,WAAS,SAAS,eAAe;AAEhC,YAAQ,MAAM,QAAQ,qBAAqB,EAAE;AAC7C,QAAI,OAAO;AAEV,YAAM,aAAa,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,MAAM,GAAG,EAAE,CAAC,EAAE,MAAM,GAAG,EAAE,CAAC,EAAE,YAAY;AAE/E,UAAI,CAAC,WAAW,IAAI,UAAU,GAAG;AAChC,qBAAa,KAAK,KAAK;AAAA,MACxB;AAAA,IACD;AAAA,EACD;AAGA,QAAM,YAAY;AAClB,QAAM,YAAY,KAAK,MAAM,SAAS,KAAK,CAAC;AAE5C,WAAS,SAAS,WAAW;AAE5B,YAAQ,MAAM,QAAQ,qBAAqB,EAAE;AAC7C,QAAI,OAAO;AAEV,YAAM,SAAS,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,MAAM,GAAG,EAAE,CAAC,EAAE,MAAM,GAAG,EAAE,CAAC,EAAE,YAAY;AAC3E,UAAI,CAAC,WAAW,IAAI,MAAM,GAAG;AAC5B,qBAAa,KAAK,KAAK;AAAA,MACxB;AAAA,IACD;AAAA,EACD;AAGA,QAAM,YAAsB,CAAC;AAC7B,QAAM,mBAAmB,oBAAI,IAAY;AAGzC,aAAW,OAAO,cAAc;AAC/B,QAAI,IAAI,SAAS,KAAK,GAAG;AACxB,UAAI;AACH,cAAM,SAAS,IAAI,IAAI,GAAG;AAC1B,YAAI,OAAO,UAAU;AACpB,2BAAiB,IAAI,OAAO,SAAS,YAAY,CAAC;AAElD,gBAAM,aAAa,OAAO,SAAS,YAAY,EAAE,QAAQ,UAAU,EAAE;AACrE,2BAAiB,IAAI,UAAU;AAAA,QAChC;AAAA,MACD,SAAS,OAAO;AAAA,MAGhB;AACA,gBAAU,KAAK,GAAG;AAAA,IACnB;AAAA,EACD;AAGA,aAAW,OAAO,cAAc;AAC/B,QAAI,CAAC,IAAI,SAAS,KAAK,GAAG;AAEzB,YAAM,WAAW,IAAI,YAAY,EAAE,QAAQ,UAAU,EAAE;AACvD,UAAI,CAAC,iBAAiB,IAAI,QAAQ,GAAG;AACpC,kBAAU,KAAK,GAAG;AAAA,MACnB;AAAA,IACD;AAAA,EACD;AAGA,SAAO,CAAC,GAAG,IAAI,IAAI,UAAU,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACnD;AAKA,SAAS,oBACR,WACA,QAC4C;AAC5C,MAAI;AACH,QAAI;AACJ,QAAI;AAGJ,QAAI,UAAU,SAAS,KAAK,GAAG;AAE9B,kBAAY,IAAI,IAAI,SAAS;AAC7B,uBAAiB,UAAU,SAAS,QAAQ,KAAK,EAAE;AAAA,IACpD,WACC,UAAU,SAAS,GAAG,KACtB,UAAU,MAAM,KAAK,CAAC,EAAE,CAAC,EAAE,MAAM,qCAAqC,GACrE;AAED,kBAAY,IAAI,IAAI,SAAS;AAC7B,uBAAiB,UAAU,SAAS,QAAQ,KAAK,EAAE;AAAA,IACpD,OAAO;AAEN,kBAAY,IAAI,IAAI,UAAU,SAAS,EAAE;AACzC,uBAAiB;AAAA,IAClB;AAGA,QAAI,CAAC,UAAU,UAAU;AACxB,aAAO,EAAE,WAAW,MAAM,QAAQ,qBAAqB;AAAA,IACxD;AAGA,UAAM,iBAAiB,oBAAI,IAAI,CAAC,SAAS,eAAe,aAAa,SAAS,CAAC;AAC/E,QAAI,CAAC,eAAe,IAAI,UAAU,QAAQ,KAAK,CAAC,UAAU,UAAU;AACnE,aAAO,EAAE,WAAW,MAAM,QAAQ,qBAAqB;AAAA,IACxD;AAGA,QAAI,CAAC,OAAO,eAAe,SAAS,cAAc,GAAG;AACpD,aAAO,EAAE,WAAW,MAAM,QAAQ,mBAAmB,cAAc,GAAG;AAAA,IACvE;AAEA,QAAI,OAAO,kBAAkB,UAAU,YAAY,UAAU,WAAW;AACvE,aAAO,EAAE,WAAW,MAAM,QAAQ,qDAAqD;AAAA,IACxF;AAGA,WAAO,EAAE,WAAW,QAAQ,GAAG;AAAA,EAChC,SAAS,OAAO;AAEf,UAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC1E,WAAO,EAAE,WAAW,MAAM,QAAQ,uBAAuB,YAAY,GAAG;AAAA,EACzE;AACD;AAKA,SAAS,aAAa,WAAgB,WAAqB,iBAAmC;AAC7F,MAAI,UAAU,WAAW,GAAG;AAC3B,WAAO;AAAA,EACR;AAEA,QAAM,UAAU,UAAU,UAAU,YAAY;AAChD,MAAI,CAAC,SAAS;AACb,WAAO;AAAA,EACR;AAEA,aAAW,gBAAgB,WAAW;AACrC,UAAM,QAAQ,aAAa,YAAY,EAAE,KAAK;AAG9C,QAAI,MAAM,SAAS,KAAK,GAAG;AAC1B,UAAI;AACH,cAAM,aAAa,IAAI,IAAI,KAAK;AAChC,cAAM,cAAc,WAAW,UAAU,YAAY;AACrD,cAAM,cAAc,WAAW;AAE/B,YAAI,YAAY,aAAa;AAE5B,cAAI,CAAC,eAAe,gBAAgB,OAAO,UAAU,SAAS,WAAW,WAAW,GAAG;AACtF,mBAAO;AAAA,UACR;AAAA,QACD;AAAA,MACD,SAAS,OAAO;AACf,cAAM,IAAI;AAAA,UACT,+BAA+B,KAAK,OAAO,iBAAiB,QAAQ,MAAM,UAAU,KAAK;AAAA,QAC1F;AAAA,MACD;AACA;AAAA,IACD;AAGA,QAAI;AAEH,UAAI,sBAAsB,KAAK,MAAM,MAAM,GAAG,EAAE,CAAC,CAAC,GAAG;AACpD,YAAI,UAAU,SAAS;AACtB,iBAAO;AAAA,QACR;AAEA,YAAI,MAAM,SAAS,GAAG,KAAK,QAAQ,MAAM,sBAAsB,GAAG;AACjE,gBAAM,CAAC,SAAS,SAAS,IAAI,MAAM,MAAM,GAAG;AAC5C,gBAAM,SAAS,SAAS,SAAS;AAEjC,cAAI,UAAU,KAAK,UAAU,IAAI;AAEhC,kBAAM,aAAa,QAAQ,OAAO;AAClC,kBAAM,UAAU,QAAQ,OAAO;AAG/B,kBAAM,OAAQ,cAAe,KAAK,WAAa;AAG/C,iBAAK,aAAa,WAAW,UAAU,OAAO;AAC7C,qBAAO;AAAA,YACR;AAAA,UACD;AAAA,QACD;AACA;AAAA,MACD;AAAA,IACD,SAAS,OAAO;AAGf,UAAI,YAAY,KAAK,KAAK,GAAG;AAC5B,gBAAQ;AAAA,UACP,iDAAiD,KAAK,OAAO,iBAAiB,QAAQ,MAAM,UAAU,KAAK;AAAA,QAC5G;AAAA,MACD;AAAA,IACD;AAGA,UAAM,gBAAgB,MAAM,QAAQ,UAAU,EAAE;AAChD,UAAM,YAAY,QAAQ,QAAQ,UAAU,EAAE;AAG9C,QAAI,cAAc,eAAe;AAChC,aAAO;AAAA,IACR;AAGA,QAAI,mBAAmB,UAAU,SAAS,IAAI,aAAa,EAAE,GAAG;AAC/D,aAAO;AAAA,IACR;AAAA,EACD;AAEA,SAAO;AACR;AAKO,MAAM,OAAO,CAAC,MAAc,WAAwC;AAE1E,QAAM,eAAe,WAAW,IAAI;AAEpC,QAAM,UAAoB,CAAC;AAC3B,QAAM,UAAoB,CAAC;AAC3B,QAAM,iBAA2B,CAAC;AAElC,aAAW,aAAa,cAAc;AAErC,UAAM,EAAE,WAAW,OAAO,IAAI,oBAAoB,WAAW,MAAM;AAEnE,QAAI,cAAc,MAAM;AACvB,cAAQ,KAAK,SAAS;AACtB,qBAAe,KAAK,GAAG,SAAS,KAAK,MAAM,EAAE;AAC7C;AAAA,IACD;AAKA,UAAM,kBAAkB,oBAAI,IAAI,CAAC,SAAS,eAAe,aAAa,SAAS,CAAC;AAChF,QAAI,gBAAgB,IAAI,UAAU,QAAQ,GAAG;AAG5C,cAAQ,KAAK,SAAS;AAAA,IACvB,WAAW,aAAa,WAAW,OAAO,aAAa,OAAO,eAAe,GAAG;AAC/E,cAAQ,KAAK,SAAS;AAAA,IACvB,OAAO;AACN,cAAQ,KAAK,SAAS;AACtB,qBAAe,KAAK,GAAG,SAAS,qBAAqB;AAAA,IACtD;AAAA,EACD;AAEA,QAAM,oBAAoB,QAAQ,SAAS;AAE3C,SAAO;AAAA,IACN,eAAe;AAAA,IACf;AAAA,IACA,MAAM;AAAA,MACL,cAAc;AAAA,QACb,KAAK;AAAA,MACN;AAAA,MACA,UAAU;AAAA,MACV;AAAA,MACA;AAAA,MACA;AAAA,IACD;AAAA,EACD;AACD;AAEO,MAAM,oBAA+C,CAAC,WAAW,CAAC,UACxE,KAAK,OAAO,MAAM;","names":[]}
+{"version":3,"file":"urls.js","sourceRoot":"","sources":["../../../../../nodes/Guardrails/actions/checks/urls.ts"],"names":[],"mappings":";;;AAcA,SAAS,OAAO,CAAC,EAAU;IAC1B,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC;AAKD,SAAS,UAAU,CAAC,IAAY;IAE/B,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;IAE7C,MAAM,YAAY,GAAa,EAAE,CAAC;IAGlC,MAAM,cAAc,GAAG;QACtB,mCAAmC;QACnC,gCAAgC;QAChC,6BAA6B;QAC7B,mCAAmC;QACnC,iCAAiC;QACjC,+BAA+B;KAC/B,CAAC;IAEF,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QAC1C,KAAK,IAAI,KAAK,IAAI,OAAO,EAAE,CAAC;YAE3B,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;YAC/C,IAAI,KAAK,EAAE,CAAC;gBACX,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAEzB,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC3B,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;oBACtF,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;gBAC1C,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC;IAGD,MAAM,aAAa,GAAG,oEAAoE,CAAC;IAC3F,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;IAEtD,KAAK,IAAI,KAAK,IAAI,aAAa,EAAE,CAAC;QAEjC,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI,KAAK,EAAE,CAAC;YAEX,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAEjF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBACjC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC;QACF,CAAC;IACF,CAAC;IAGD,MAAM,SAAS,GAAG,2DAA2D,CAAC;IAC9E,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAE9C,KAAK,IAAI,KAAK,IAAI,SAAS,EAAE,CAAC;QAE7B,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;QAC/C,IAAI,KAAK,EAAE,CAAC;YAEX,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAC7E,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC7B,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC;QACF,CAAC;IACF,CAAC;IAGD,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAG3C,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAChC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC5B,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;oBACrB,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;oBAEpD,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;oBACvE,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBAClC,CAAC;YACF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;YAGjB,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;IACF,CAAC;IAGD,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAChC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAE1B,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACzD,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACrC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrB,CAAC;QACF,CAAC;IACF,CAAC;IAGD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC;AAKD,SAAS,mBAAmB,CAC3B,SAAiB,EACjB,MAAkB;IAElB,IAAI,CAAC;QACJ,IAAI,SAAc,CAAC;QACnB,IAAI,cAAsB,CAAC;QAG3B,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAE/B,SAAS,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;YAC/B,cAAc,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACtD,CAAC;aAAM,IACN,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC;YACvB,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,qCAAqC,CAAC,EACtE,CAAC;YAEF,SAAS,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;YAC/B,cAAc,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YAEP,SAAS,GAAG,IAAI,GAAG,CAAC,UAAU,SAAS,EAAE,CAAC,CAAC;YAC3C,cAAc,GAAG,MAAM,CAAC;QACzB,CAAC;QAGD,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;YACzB,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;QAC1D,CAAC;QAGD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;QACjF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;YACpE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;QAC1D,CAAC;QAGD,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACrD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,cAAc,EAAE,EAAE,CAAC;QACzE,CAAC;QAED,IAAI,MAAM,CAAC,aAAa,IAAI,CAAC,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,oDAAoD,EAAE,CAAC;QAC1F,CAAC;QAGD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAEhB,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5E,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,uBAAuB,YAAY,EAAE,EAAE,CAAC;IAC3E,CAAC;AACF,CAAC;AAKD,SAAS,YAAY,CAAC,SAAc,EAAE,SAAmB,EAAE,eAAwB;IAClF,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC;IAClD,IAAI,CAAC,OAAO,EAAE,CAAC;QACd,OAAO,KAAK,CAAC;IACd,CAAC;IAED,KAAK,MAAM,YAAY,IAAI,SAAS,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,YAAY,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QAGhD,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACJ,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;gBAClC,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,EAAE,WAAW,EAAE,CAAC;gBACvD,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC;gBAExC,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;oBAE7B,IAAI,CAAC,WAAW,IAAI,WAAW,KAAK,GAAG,IAAI,SAAS,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;wBACvF,OAAO,IAAI,CAAC;oBACb,CAAC;gBACF,CAAC;YACF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CACd,+BAA+B,KAAK,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CAC3F,CAAC;YACH,CAAC;YACD,SAAS;QACV,CAAC;QAGD,IAAI,CAAC;YAEJ,IAAI,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrD,IAAI,KAAK,KAAK,OAAO,EAAE,CAAC;oBACvB,OAAO,IAAI,CAAC;gBACb,CAAC;gBAED,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC;oBAClE,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;oBAEnC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,EAAE,EAAE,CAAC;wBAEjC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;wBACpC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;wBAGjC,MAAM,IAAI,GAAG,CAAC,UAAU,IAAI,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;wBAGjD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,EAAE,CAAC;4BAC9C,OAAO,IAAI,CAAC;wBACb,CAAC;oBACF,CAAC;gBACF,CAAC;gBACD,SAAS;YACV,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAGhB,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7B,OAAO,CAAC,IAAI,CACX,iDAAiD,KAAK,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CAC7G,CAAC;YACH,CAAC;QACF,CAAC;QAGD,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAGhD,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC;QACb,CAAC;QAGD,IAAI,eAAe,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,aAAa,EAAE,CAAC,EAAE,CAAC;YAChE,OAAO,IAAI,CAAC;QACb,CAAC;IACF,CAAC;IAED,OAAO,KAAK,CAAC;AACd,CAAC;AAKM,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,MAAkB,EAAmB,EAAE;IAEzE,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAEtC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,cAAc,GAAa,EAAE,CAAC;IAEpC,KAAK,MAAM,SAAS,IAAI,YAAY,EAAE,CAAC;QAEtC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,mBAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAErE,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,cAAc,CAAC,IAAI,CAAC,GAAG,SAAS,KAAK,MAAM,EAAE,CAAC,CAAC;YAC/C,SAAS;QACV,CAAC;QAKD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;QAClF,IAAI,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YAG7C,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzB,CAAC;aAAM,IAAI,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;YAChF,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzB,CAAC;aAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,cAAc,CAAC,IAAI,CAAC,GAAG,SAAS,qBAAqB,CAAC,CAAC;QACxD,CAAC;IACF,CAAC;IAED,MAAM,iBAAiB,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAE7C,OAAO;QACN,aAAa,EAAE,MAAM;QACrB,iBAAiB;QACjB,IAAI,EAAE;YACL,YAAY,EAAE;gBACb,GAAG,EAAE,OAAO;aACZ;YACD,QAAQ,EAAE,YAAY;YACtB,OAAO;YACP,OAAO;YACP,cAAc;SACd;KACD,CAAC;AACH,CAAC,CAAC;AAjDW,QAAA,IAAI,QAiDf;AAEK,MAAM,iBAAiB,GAA8B,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAa,EAAE,EAAE,CACzF,IAAA,YAAI,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AADR,QAAA,iBAAiB,qBACT"}

package/dist/nodes/Guardrails/actions/execute.d.ts

@@ -0,0 +1,2 @@
+import type { IExecuteFunctions, INodeExecutionData } from 'n8n-workflow';
+export declare function execute(this: IExecuteFunctions): Promise<INodeExecutionData[][]>;

package/dist/nodes/Guardrails/actions/execute.js

@@ -1,68 +1,48 @@
 "use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var execute_exports = {};
-__export(execute_exports, {
-  execute: () => execute
-});
-module.exports = __toCommonJS(execute_exports);
-var import_process = require("./process");
-var import_configureNodeInputs = require("../helpers/configureNodeInputs");
-var import_model = require("../helpers/model");
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.execute = execute;
+const process_1 = require("./process");
+const configureNodeInputs_1 = require("../helpers/configureNodeInputs");
+const model_1 = require("../helpers/model");
 async function execute() {
-  const items = this.getInputData();
-  const operation = this.getNodeParameter("operation", 0);
-  const model = (0, import_configureNodeInputs.hasLLMGuardrails)(this.getNodeParameter("guardrails", 0)) ? await import_model.getChatModel.call(this) : null;
-  const failedItems = [];
-  const passedItems = [];
-  for (let i = 0; i < items.length; i++) {
-    try {
-      const responseData = await import_process.process.call(this, i, model);
-      if (responseData.passed) {
-        passedItems.push({
-          json: { guardrailsInput: responseData.guardrailsInput, ...responseData.passed },
-          pairedItem: { item: i }
-        });
-      }
-      if (responseData.failed) {
-        failedItems.push({
-          json: { guardrailsInput: responseData.guardrailsInput, ...responseData.failed },
-          pairedItem: { item: i }
-        });
-      }
-    } catch (error) {
-      if (this.continueOnFail()) {
-        failedItems.push({
-          json: { error: error.message, guardrailsInput: "" },
-          pairedItem: { item: i }
-        });
-      } else {
-        throw error;
-      }
+    const items = this.getInputData();
+    const operation = this.getNodeParameter('operation', 0);
+    const model = (0, configureNodeInputs_1.hasLLMGuardrails)(this.getNodeParameter('guardrails', 0))
+        ? await model_1.getChatModel.call(this)
+        : null;
+    const failedItems = [];
+    const passedItems = [];
+    for (let i = 0; i < items.length; i++) {
+        try {
+            const responseData = await process_1.process.call(this, i, model);
+            if (responseData.passed) {
+                passedItems.push({
+                    json: { guardrailsInput: responseData.guardrailsInput, ...responseData.passed },
+                    pairedItem: { item: i },
+                });
+            }
+            if (responseData.failed) {
+                failedItems.push({
+                    json: { guardrailsInput: responseData.guardrailsInput, ...responseData.failed },
+                    pairedItem: { item: i },
+                });
+            }
+        }
+        catch (error) {
+            if (this.continueOnFail()) {
+                failedItems.push({
+                    json: { error: error.message, guardrailsInput: '' },
+                    pairedItem: { item: i },
+                });
+            }
+            else {
+                throw error;
+            }
+        }
     }
-  }
-  if (operation === "classify") {
-    return [passedItems, failedItems];
-  }
-  return [passedItems];
+    if (operation === 'classify') {
+        return [passedItems, failedItems];
+    }
+    return [passedItems];
 }
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  execute
-});
 //# sourceMappingURL=execute.js.map