n8n-core 1.64.0 → 1.66.0

package/dist/InstanceSettings.d.ts

@@ -1,19 +1,25 @@
+import { InstanceSettingsConfig } from './InstanceSettingsConfig';
 interface WritableSettings {
     tunnelSubdomain?: string;
 }
 type InstanceRole = 'unset' | 'leader' | 'follower';
 export type InstanceType = 'main' | 'webhook' | 'worker';
 export declare class InstanceSettings {
+    private readonly config;
     private readonly userHome;
     readonly n8nFolder: string;
     readonly staticCacheDir: string;
     readonly customExtensionDir: string;
     readonly nodesDownloadDir: string;
     private readonly settingsFile;
+    readonly enforceSettingsFilePermissions: {
+        isSet: boolean;
+        enforce: boolean;
+    };
     private settings;
     readonly instanceId: string;
     readonly instanceType: InstanceType;
-    constructor();
+    constructor(config: InstanceSettingsConfig);
     instanceRole: InstanceRole;
     readonly hostId: string;
     get isLeader(): boolean;
@@ -27,5 +33,8 @@ export declare class InstanceSettings {
     private loadOrCreate;
     private generateInstanceId;
     private save;
+    private loadEnforceSettingsFilePermissionsFlag;
+    private ensureSettingsFilePermissions;
+    private isWindows;
 }
 export {};

package/dist/InstanceSettings.js

@@ -19,16 +19,19 @@ const n8n_workflow_1 = require("n8n-workflow");
 const nanoid_1 = require("nanoid");
 const path_1 = __importDefault(require("path"));
 const typedi_1 = require("typedi");
+const InstanceSettingsConfig_1 = require("./InstanceSettingsConfig");
 const nanoid = (0, nanoid_1.customAlphabet)(n8n_workflow_1.ALPHABET, 16);
 const inTest = process.env.NODE_ENV === 'test';
 let InstanceSettings = class InstanceSettings {
-    constructor() {
+    constructor(config) {
+        this.config = config;
         this.userHome = this.getUserHome();
         this.n8nFolder = path_1.default.join(this.userHome, '.n8n');
         this.staticCacheDir = path_1.default.join(this.userHome, '.cache/n8n/public');
         this.customExtensionDir = path_1.default.join(this.n8nFolder, 'custom');
         this.nodesDownloadDir = path_1.default.join(this.n8nFolder, 'nodes');
         this.settingsFile = path_1.default.join(this.n8nFolder, 'config');
+        this.enforceSettingsFilePermissions = this.loadEnforceSettingsFilePermissionsFlag();
         this.settings = this.loadOrCreate();
         this.instanceId = this.generateInstanceId();
         this.instanceRole = 'unset';
@@ -66,6 +69,7 @@ let InstanceSettings = class InstanceSettings {
     loadOrCreate() {
         if ((0, fs_1.existsSync)(this.settingsFile)) {
             const content = (0, fs_1.readFileSync)(this.settingsFile, 'utf8');
+            this.ensureSettingsFilePermissions();
             const settings = (0, n8n_workflow_1.jsonParse)(content, {
                 errorMessage: `Error parsing n8n-config file "${this.settingsFile}". It does not seem to be valid JSON.`,
             });
@@ -84,6 +88,7 @@ let InstanceSettings = class InstanceSettings {
         if (!inTest && !process.env.N8N_ENCRYPTION_KEY) {
             console.info(`No encryption key found - Auto-generated and saved to: ${this.settingsFile}`);
         }
+        this.ensureSettingsFilePermissions();
         return settings;
     }
     generateInstanceId() {
@@ -94,12 +99,66 @@ let InstanceSettings = class InstanceSettings {
     }
     save(settings) {
         this.settings = settings;
-        (0, fs_1.writeFileSync)(this.settingsFile, JSON.stringify(settings, null, '\t'), 'utf-8');
+        (0, fs_1.writeFileSync)(this.settingsFile, JSON.stringify(this.settings, null, '\t'), {
+            mode: this.enforceSettingsFilePermissions.enforce ? 0o600 : undefined,
+            encoding: 'utf-8',
+        });
+    }
+    loadEnforceSettingsFilePermissionsFlag() {
+        const { enforceSettingsFilePermissions } = this.config;
+        const isEnvVarSet = !!process.env.N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS;
+        if (this.isWindows()) {
+            if (isEnvVarSet) {
+                console.warn('Ignoring N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS as it is not supported on Windows.');
+            }
+            return {
+                isSet: isEnvVarSet,
+                enforce: false,
+            };
+        }
+        return {
+            isSet: isEnvVarSet,
+            enforce: enforceSettingsFilePermissions,
+        };
+    }
+    ensureSettingsFilePermissions() {
+        if (this.enforceSettingsFilePermissions.isSet && !this.enforceSettingsFilePermissions.enforce) {
+            return;
+        }
+        if (this.isWindows()) {
+            return;
+        }
+        const permissionsResult = (0, n8n_workflow_1.toResult)(() => {
+            const stats = (0, fs_1.statSync)(this.settingsFile);
+            return stats.mode & 0o777;
+        });
+        if (!permissionsResult.ok) {
+            console.warn(`Could not ensure settings file permissions: ${permissionsResult.error.message}. To skip this check, set N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS=false.`);
+            return;
+        }
+        const arePermissionsCorrect = permissionsResult.result === 0o600;
+        if (arePermissionsCorrect) {
+            return;
+        }
+        if (!this.enforceSettingsFilePermissions.isSet) {
+            console.warn(`Permissions 0${permissionsResult.result.toString(8)} for n8n settings file ${this.settingsFile} are too wide. This is ignored for now, but in the future n8n will attempt to change the permissions automatically. To automatically enforce correct permissions now set N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS=true (recommended), or turn this check off set N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS=false.`);
+            return;
+        }
+        if (this.enforceSettingsFilePermissions.enforce) {
+            console.warn(`Permissions 0${permissionsResult.result.toString(8)} for n8n settings file ${this.settingsFile} are too wide. Changing permissions to 0600..`);
+            const chmodResult = (0, n8n_workflow_1.toResult)(() => (0, fs_1.chmodSync)(this.settingsFile, 0o600));
+            if (!chmodResult.ok) {
+                console.warn(`Could not enforce settings file permissions: ${chmodResult.error.message}. To skip this check, set N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS=false.`);
+            }
+        }
+    }
+    isWindows() {
+        return process.platform === 'win32';
     }
 };
 exports.InstanceSettings = InstanceSettings;
 exports.InstanceSettings = InstanceSettings = __decorate([
     (0, typedi_1.Service)(),
-    __metadata("design:paramtypes", [])
+    __metadata("design:paramtypes", [InstanceSettingsConfig_1.InstanceSettingsConfig])
 ], InstanceSettings);
 //# sourceMappingURL=InstanceSettings.js.map

package/dist/InstanceSettings.js.map

@@ -1 +1 @@
-{"version":3,"file":"InstanceSettings.js","sourceRoot":"","sources":["../src/InstanceSettings.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,mCAAiD;AACjD,2BAAwE;AACxE,+CAAqE;AACrE,mCAAwC;AACxC,gDAAwB;AACxB,mCAAiC;AAEjC,MAAM,MAAM,GAAG,IAAA,uBAAc,EAAC,uBAAQ,EAAE,EAAE,CAAC,CAAC;AAgB5C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC;AAGxC,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IA6B5B;QA5BiB,aAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAGtC,cAAS,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAG7C,mBAAc,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;QAG/D,uBAAkB,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAGzD,qBAAgB,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAE9C,iBAAY,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAE5D,aAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAQ9B,eAAU,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAqBhD,iBAAY,GAAiB,OAAO,CAAC;QAhBpC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC1D,CAAC,CAAE,OAAwB;YAC3B,CAAC,CAAC,MAAM,CAAC;QAEV,IAAI,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,IAAI,MAAM,EAAE,EAAE,CAAC;IAClD,CAAC;IAsBD,IAAI,QAAQ;QACX,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC;IACvC,CAAC;IAED,YAAY;QACX,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC;IAC9B,CAAC;IAED,IAAI,UAAU;QACb,OAAO,IAAI,CAAC,YAAY,KAAK,UAAU,CAAC;IACzC,CAAC;IAED,cAAc;QACb,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC;IAChC,CAAC;IAED,IAAI,aAAa;QAChB,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;IACpC,CAAC;IAED,IAAI,eAAe;QAClB,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;IACtC,CAAC;IAED,MAAM,CAAC,WAA6B;QACnC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC;IACjD,CAAC;IAMO,WAAW;QAClB,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1E,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACjF,CAAC;IAMO,YAAY;QACnB,IAAI,IAAA,eAAU,EAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,IAAA,iBAAY,EAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YAExD,MAAM,QAAQ,GAAG,IAAA,wBAAS,EAAW,OAAO,EAAE;gBAC7C,YAAY,EAAE,kCAAkC,IAAI,CAAC,YAAY,uCAAuC;aACxG,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM;gBAAE,OAAO,CAAC,IAAI,CAAC,8BAA8B,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;YAE7E,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,GAAG,QAAQ,CAAC;YAEpD,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,aAAa,KAAK,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;gBACxF,MAAM,IAAI,+BAAgB,CACzB,wEAAwE,IAAI,CAAC,YAAY,6LAA6L,CACtR,CAAC;YACH,CAAC;YAED,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC;QAC3C,CAAC;QAED,IAAA,cAAS,EAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE/C,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAE3F,MAAM,QAAQ,GAAa,EAAE,aAAa,EAAE,CAAC;QAE7C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEpB,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;YAChD,OAAO,CAAC,IAAI,CAAC,0DAA0D,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAC7F,CAAC;QAED,OAAO,QAAQ,CAAC;IACjB,CAAC;IAEO,kBAAkB;QACzB,MAAM,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;QAC/B,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC;aACzB,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;aACjE,MAAM,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC;IAEO,IAAI,CAAC,QAAkB;QAC9B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAA,kBAAa,EAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IACjF,CAAC;CACD,CAAA;AAlJY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,gBAAO,GAAE;;GACG,gBAAgB,CAkJ5B"}
+{"version":3,"file":"InstanceSettings.js","sourceRoot":"","sources":["../src/InstanceSettings.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,mCAAiD;AACjD,2BAA6F;AAC7F,+CAA+E;AAC/E,mCAAwC;AACxC,gDAAwB;AACxB,mCAAiC;AAEjC,qEAAkE;AAElE,MAAM,MAAM,GAAG,IAAA,uBAAc,EAAC,uBAAQ,EAAE,EAAE,CAAC,CAAC;AAgB5C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC;AAGxC,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IA+B5B,YAA6B,MAA8B;QAA9B,WAAM,GAAN,MAAM,CAAwB;QA9B1C,aAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QAGtC,cAAS,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAG7C,mBAAc,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;QAG/D,uBAAkB,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAGzD,qBAAgB,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAE9C,iBAAY,GAAG,cAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAE3D,mCAA8B,GAAG,IAAI,CAAC,sCAAsC,EAAE,CAAC;QAEhF,aAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAQ9B,eAAU,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAqBhD,iBAAY,GAAiB,OAAO,CAAC;QAhBpC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,YAAY,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC1D,CAAC,CAAE,OAAwB;YAC3B,CAAC,CAAC,MAAM,CAAC;QAEV,IAAI,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,IAAI,MAAM,EAAE,EAAE,CAAC;IAClD,CAAC;IAsBD,IAAI,QAAQ;QACX,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC;IACvC,CAAC;IAED,YAAY;QACX,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC;IAC9B,CAAC;IAED,IAAI,UAAU;QACb,OAAO,IAAI,CAAC,YAAY,KAAK,UAAU,CAAC;IACzC,CAAC;IAED,cAAc;QACb,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC;IAChC,CAAC;IAED,IAAI,aAAa;QAChB,OAAO,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;IACpC,CAAC;IAED,IAAI,eAAe;QAClB,OAAO,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;IACtC,CAAC;IAED,MAAM,CAAC,WAA6B;QACnC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,WAAW,EAAE,CAAC,CAAC;IACjD,CAAC;IAMO,WAAW;QAClB,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1E,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACjF,CAAC;IAMO,YAAY;QACnB,IAAI,IAAA,eAAU,EAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,IAAA,iBAAY,EAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YACxD,IAAI,CAAC,6BAA6B,EAAE,CAAC;YAErC,MAAM,QAAQ,GAAG,IAAA,wBAAS,EAAW,OAAO,EAAE;gBAC7C,YAAY,EAAE,kCAAkC,IAAI,CAAC,YAAY,uCAAuC;aACxG,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM;gBAAE,OAAO,CAAC,IAAI,CAAC,8BAA8B,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;YAE7E,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,GAAG,QAAQ,CAAC;YAEpD,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,aAAa,KAAK,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;gBACxF,MAAM,IAAI,+BAAgB,CACzB,wEAAwE,IAAI,CAAC,YAAY,6LAA6L,CACtR,CAAC;YACH,CAAC;YAED,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC;QAC3C,CAAC;QAED,IAAA,cAAS,EAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAE/C,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAE3F,MAAM,QAAQ,GAAa,EAAE,aAAa,EAAE,CAAC;QAE7C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEpB,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;YAChD,OAAO,CAAC,IAAI,CAAC,0DAA0D,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,IAAI,CAAC,6BAA6B,EAAE,CAAC;QAErC,OAAO,QAAQ,CAAC;IACjB,CAAC;IAEO,kBAAkB;QACzB,MAAM,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;QAC/B,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC;aACzB,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;aACjE,MAAM,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC;IAEO,IAAI,CAAC,QAAkB;QAC9B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAA,kBAAa,EAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;YAC3E,IAAI,EAAE,IAAI,CAAC,8BAA8B,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;YACrE,QAAQ,EAAE,OAAO;SACjB,CAAC,CAAC;IACJ,CAAC;IAEO,sCAAsC;QAI7C,MAAM,EAAE,8BAA8B,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QACvD,MAAM,WAAW,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC;QACxE,IAAI,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACtB,IAAI,WAAW,EAAE,CAAC;gBACjB,OAAO,CAAC,IAAI,CACX,mFAAmF,CACnF,CAAC;YACH,CAAC;YAED,OAAO;gBACN,KAAK,EAAE,WAAW;gBAClB,OAAO,EAAE,KAAK;aACd,CAAC;QACH,CAAC;QAED,OAAO;YACN,KAAK,EAAE,WAAW;YAClB,OAAO,EAAE,8BAA8B;SACvC,CAAC;IACH,CAAC;IAKO,6BAA6B;QAEpC,IAAI,IAAI,CAAC,8BAA8B,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,8BAA8B,CAAC,OAAO,EAAE,CAAC;YAC/F,OAAO;QACR,CAAC;QACD,IAAI,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YAEtB,OAAO;QACR,CAAC;QAED,MAAM,iBAAiB,GAAG,IAAA,uBAAQ,EAAC,GAAG,EAAE;YACvC,MAAM,KAAK,GAAG,IAAA,aAAQ,EAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC1C,OAAO,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC;QAC3B,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CACX,+CAA+C,iBAAiB,CAAC,KAAK,CAAC,OAAO,wEAAwE,CACtJ,CAAC;YACF,OAAO;QACR,CAAC;QAED,MAAM,qBAAqB,GAAG,iBAAiB,CAAC,MAAM,KAAK,KAAK,CAAC;QACjE,IAAI,qBAAqB,EAAE,CAAC;YAC3B,OAAO;QACR,CAAC;QAGD,IAAI,CAAC,IAAI,CAAC,8BAA8B,CAAC,KAAK,EAAE,CAAC;YAChD,OAAO,CAAC,IAAI,CACX,gBAAgB,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,0BAA0B,IAAI,CAAC,YAAY,4SAA4S,CAC3Y,CAAC;YAEF,OAAO;QACR,CAAC;QAED,IAAI,IAAI,CAAC,8BAA8B,CAAC,OAAO,EAAE,CAAC;YACjD,OAAO,CAAC,IAAI,CACX,gBAAgB,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,0BAA0B,IAAI,CAAC,YAAY,+CAA+C,CAC9I,CAAC;YACF,MAAM,WAAW,GAAG,IAAA,uBAAQ,EAAC,GAAG,EAAE,CAAC,IAAA,cAAS,EAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC;YACxE,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;gBAIrB,OAAO,CAAC,IAAI,CACX,gDAAgD,WAAW,CAAC,KAAK,CAAC,OAAO,wEAAwE,CACjJ,CAAC;YACH,CAAC;QACF,CAAC;IACF,CAAC;IAEO,SAAS;QAChB,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;IACrC,CAAC;CACD,CAAA;AA7OY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,gBAAO,GAAE;qCAgC4B,+CAAsB;GA/B/C,gBAAgB,CA6O5B"}

package/dist/InstanceSettingsConfig.d.ts

@@ -0,0 +1,3 @@
+export declare class InstanceSettingsConfig {
+    enforceSettingsFilePermissions: boolean;
+}

package/dist/InstanceSettingsConfig.js

@@ -0,0 +1,27 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InstanceSettingsConfig = void 0;
+const config_1 = require("@n8n/config");
+let InstanceSettingsConfig = class InstanceSettingsConfig {
+    constructor() {
+        this.enforceSettingsFilePermissions = false;
+    }
+};
+exports.InstanceSettingsConfig = InstanceSettingsConfig;
+__decorate([
+    (0, config_1.Env)('N8N_ENFORCE_SETTINGS_FILE_PERMISSIONS'),
+    __metadata("design:type", Boolean)
+], InstanceSettingsConfig.prototype, "enforceSettingsFilePermissions", void 0);
+exports.InstanceSettingsConfig = InstanceSettingsConfig = __decorate([
+    config_1.Config
+], InstanceSettingsConfig);
+//# sourceMappingURL=InstanceSettingsConfig.js.map

package/dist/InstanceSettingsConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"InstanceSettingsConfig.js","sourceRoot":"","sources":["../src/InstanceSettingsConfig.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAA0C;AAGnC,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;IAA5B;QAON,mCAA8B,GAAY,KAAK,CAAC;IACjD,CAAC;CAAA,CAAA;AARY,wDAAsB;AAOlC;IADC,IAAA,YAAG,EAAC,uCAAuC,CAAC;;8EACG;iCAPpC,sBAAsB;IADlC,eAAM;GACM,sBAAsB,CAQlC"}

package/dist/NodeExecuteFunctions.d.ts

@@ -1,6 +1,6 @@
 import type { AxiosRequestConfig } from 'axios';
 import { IncomingMessage } from 'http';
-import type { CloseFunction, IAdditionalCredentialOptions, IAllExecuteFunctions, IBinaryData, ICredentialDataDecryptedObject, ICredentialTestFunctions, IDataObject, IExecuteData, IExecuteFunctions, IExecuteSingleFunctions, IGetNodeParameterOptions, IHookFunctions, IHttpRequestOptions, ILoadOptionsFunctions, INode, INodeExecutionData, INodeType, IOAuth2Options, IPairedItemData, IPollFunctions, IRequestOptions, IRunExecutionData, ITaskDataConnections, ITriggerFunctions, IWebhookData, IWebhookDescription, IWebhookFunctions, IWorkflowDataProxyAdditionalKeys, IWorkflowExecuteAdditionalData, NodeExecutionWithMetadata, NodeParameterValueType, Workflow, WorkflowActivateMode, WorkflowExecuteMode, EnsureTypeOptions, IDeduplicationOutput, IDeduplicationOutputItems, ICheckProcessedOptions, DeduplicationScope, DeduplicationItemTypes, ICheckProcessedContextData } from 'n8n-workflow';
+import type { CloseFunction, IAdditionalCredentialOptions, IAllExecuteFunctions, IBinaryData, ICredentialDataDecryptedObject, ICredentialTestFunctions, IDataObject, IExecuteData, IExecuteFunctions, IExecuteSingleFunctions, IGetNodeParameterOptions, IHookFunctions, IHttpRequestOptions, ILoadOptionsFunctions, INode, INodeExecutionData, INodeType, IOAuth2Options, IPairedItemData, IPollFunctions, IRequestOptions, IRunExecutionData, ITaskDataConnections, ITriggerFunctions, IWebhookData, IWebhookDescription, IWebhookFunctions, IWorkflowDataProxyAdditionalKeys, IWorkflowExecuteAdditionalData, NodeExecutionWithMetadata, NodeParameterValueType, Workflow, WorkflowActivateMode, WorkflowExecuteMode, EnsureTypeOptions, IDeduplicationOutput, IDeduplicationOutputItems, ICheckProcessedOptions, DeduplicationScope, DeduplicationItemTypes, ICheckProcessedContextData, ISupplyDataFunctions } from 'n8n-workflow';
 import { Readable } from 'stream';
 import type { BinaryData } from './BinaryData/types';
 export declare function parseRequestObject(requestObject: IRequestOptions): Promise<AxiosRequestConfig<any>>;
@@ -48,6 +48,7 @@ export declare function copyInputItems(items: INodeExecutionData[], properties:
 export declare function getExecutePollFunctions(workflow: Workflow, node: INode, additionalData: IWorkflowExecuteAdditionalData, mode: WorkflowExecuteMode, activation: WorkflowActivateMode): IPollFunctions;
 export declare function getExecuteTriggerFunctions(workflow: Workflow, node: INode, additionalData: IWorkflowExecuteAdditionalData, mode: WorkflowExecuteMode, activation: WorkflowActivateMode): ITriggerFunctions;
 export declare function getExecuteFunctions(workflow: Workflow, runExecutionData: IRunExecutionData, runIndex: number, connectionInputData: INodeExecutionData[], inputData: ITaskDataConnections, node: INode, additionalData: IWorkflowExecuteAdditionalData, executeData: IExecuteData, mode: WorkflowExecuteMode, closeFunctions: CloseFunction[], abortSignal?: AbortSignal): IExecuteFunctions;
+export declare function getSupplyDataFunctions(workflow: Workflow, runExecutionData: IRunExecutionData, runIndex: number, connectionInputData: INodeExecutionData[], inputData: ITaskDataConnections, node: INode, additionalData: IWorkflowExecuteAdditionalData, executeData: IExecuteData, mode: WorkflowExecuteMode, closeFunctions: CloseFunction[], abortSignal?: AbortSignal): ISupplyDataFunctions;
 export declare function getExecuteSingleFunctions(workflow: Workflow, runExecutionData: IRunExecutionData, runIndex: number, connectionInputData: INodeExecutionData[], inputData: ITaskDataConnections, node: INode, itemIndex: number, additionalData: IWorkflowExecuteAdditionalData, executeData: IExecuteData, mode: WorkflowExecuteMode, abortSignal?: AbortSignal): IExecuteSingleFunctions;
 export declare function getCredentialTestFunctions(): ICredentialTestFunctions;
 export declare function getLoadOptionsFunctions(workflow: Workflow, node: INode, path: string, additionalData: IWorkflowExecuteAdditionalData): ILoadOptionsFunctions;

package/dist/NodeExecuteFunctions.js

@@ -62,6 +62,7 @@ exports.copyInputItems = copyInputItems;
 exports.getExecutePollFunctions = getExecutePollFunctions;
 exports.getExecuteTriggerFunctions = getExecuteTriggerFunctions;
 exports.getExecuteFunctions = getExecuteFunctions;
+exports.getSupplyDataFunctions = getSupplyDataFunctions;
 exports.getExecuteSingleFunctions = getExecuteSingleFunctions;
 exports.getCredentialTestFunctions = getCredentialTestFunctions;
 exports.getLoadOptionsFunctions = getLoadOptionsFunctions;
@@ -1782,7 +1783,7 @@ const addExecutionDataFunctions = async (type, nodeName, data, runExecutionData,
         });
     }
 };
-async function getInputConnectionData(workflow, runExecutionData, runIndex, connectionInputData, additionalData, executeData, mode, closeFunctions, inputName, itemIndex) {
+async function getInputConnectionData(workflow, runExecutionData, runIndex, connectionInputData, inputData, additionalData, executeData, mode, closeFunctions, inputName, itemIndex, abortSignal) {
     const node = this.getNode();
     const nodeType = workflow.nodeTypes.getByNameAndVersion(node.type, node.typeVersion);
     const inputs = n8n_workflow_1.NodeHelpers.getNodeInputs(workflow, node, nodeType.description);
@@ -1816,26 +1817,7 @@ async function getInputConnectionData(workflow, runExecutionData, runIndex, conn
         .filter((connectedNode) => connectedNode.disabled !== true)
         .map(async (connectedNode) => {
         const nodeType = workflow.nodeTypes.getByNameAndVersion(connectedNode.type, connectedNode.typeVersion);
-        const context = Object.assign({}, this);
-        context.getNodeParameter = (parameterName, itemIndex, fallbackValue, options) => {
-            return getNodeParameter(workflow, runExecutionData, runIndex, connectionInputData, connectedNode, parameterName, itemIndex, mode, getAdditionalKeys(additionalData, mode, runExecutionData), executeData, fallbackValue, { ...(options || {}), contextNode: node });
-        };
-        context.getNode = () => {
-            return (0, n8n_workflow_1.deepCopy)(connectedNode);
-        };
-        context.getCredentials = async (key) => {
-            try {
-                return await getCredentials(workflow, connectedNode, key, additionalData, mode, executeData, runExecutionData, runIndex, connectionInputData, itemIndex);
-            }
-            catch (error) {
-                let currentNodeRunIndex = 0;
-                if (runExecutionData.resultData.runData.hasOwnProperty(node.name)) {
-                    currentNodeRunIndex = runExecutionData.resultData.runData[node.name].length;
-                }
-                await addExecutionDataFunctions('input', connectedNode.name, error, runExecutionData, inputName, additionalData, node.name, runIndex, currentNodeRunIndex);
-                throw error;
-            }
-        };
+        const context = getSupplyDataFunctions(workflow, runExecutionData, runIndex, connectionInputData, inputData, connectedNode, additionalData, executeData, mode, closeFunctions, abortSignal);
         if (!nodeType.supplyData) {
             if (nodeType.description.outputs.includes("ai_tool")) {
                 nodeType.supplyData = async function () {
@@ -2313,7 +2295,7 @@ function getExecuteFunctions(workflow, runExecutionData, runIndex, connectionInp
             continueOnFail: () => {
                 return continueOnFail(node);
             },
-            evaluateExpression: (expression, itemIndex) => {
+            evaluateExpression(expression, itemIndex) {
                 return workflow.expression.resolveSimpleParameterValue(`=${expression}`, {}, runExecutionData, runIndex, itemIndex, node.name, connectionInputData, mode, getAdditionalKeys(additionalData, mode, runExecutionData), executeData);
             },
             async executeWorkflow(workflowInfo, inputData, parentCallbackManager) {
@@ -2331,7 +2313,7 @@ function getExecuteFunctions(workflow, runExecutionData, runIndex, connectionInp
                 return n8n_workflow_1.NodeHelpers.getContext(runExecutionData, type, node);
             },
             async getInputConnectionData(inputName, itemIndex) {
-                return await getInputConnectionData.call(this, workflow, runExecutionData, runIndex, connectionInputData, additionalData, executeData, mode, closeFunctions, inputName, itemIndex);
+                return await getInputConnectionData.call(this, workflow, runExecutionData, runIndex, connectionInputData, inputData, additionalData, executeData, mode, closeFunctions, inputName, itemIndex, abortSignal);
             },
             getNodeInputs() {
                 const nodeType = workflow.nodeTypes.getByNameAndVersion(node.type, node.typeVersion);
@@ -2458,7 +2440,7 @@ function getExecuteFunctions(workflow, runExecutionData, runIndex, connectionInp
                 constructExecutionMetaData,
             },
             nodeHelpers: getNodeHelperFunctions(additionalData, workflow.id),
-            logAiEvent: async (eventName, msg) => {
+            logAiEvent: (eventName, msg) => {
                 return additionalData.logAiEvent(eventName, {
                     executionId: additionalData.executionId ?? 'unsaved-execution',
                     nodeName: node.name,
@@ -2473,6 +2455,120 @@ function getExecuteFunctions(workflow, runExecutionData, runIndex, connectionInp
         };
     })(workflow, runExecutionData, connectionInputData, inputData, node);
 }
+function getSupplyDataFunctions(workflow, runExecutionData, runIndex, connectionInputData, inputData, node, additionalData, executeData, mode, closeFunctions, abortSignal) {
+    return {
+        ...getCommonWorkflowFunctions(workflow, node, additionalData),
+        ...executionCancellationFunctions(abortSignal),
+        getMode: () => mode,
+        getCredentials: async (type, itemIndex) => await getCredentials(workflow, node, type, additionalData, mode, executeData, runExecutionData, runIndex, connectionInputData, itemIndex),
+        continueOnFail: () => continueOnFail(node),
+        evaluateExpression: (expression, itemIndex) => workflow.expression.resolveSimpleParameterValue(`=${expression}`, {}, runExecutionData, runIndex, itemIndex, node.name, connectionInputData, mode, getAdditionalKeys(additionalData, mode, runExecutionData), executeData),
+        executeWorkflow: async (workflowInfo, inputData, parentCallbackManager) => await additionalData
+            .executeWorkflow(workflowInfo, additionalData, {
+            parentWorkflowId: workflow.id?.toString(),
+            inputData,
+            parentWorkflowSettings: workflow.settings,
+            node,
+            parentCallbackManager,
+        })
+            .then(async (result) => await typedi_1.default.get(BinaryData_service_1.BinaryDataService).duplicateBinaryData(workflow.id, additionalData.executionId, result)),
+        getNodeOutputs() {
+            const nodeType = workflow.nodeTypes.getByNameAndVersion(node.type, node.typeVersion);
+            return n8n_workflow_1.NodeHelpers.getNodeOutputs(workflow, node, nodeType.description).map((output) => {
+                if (typeof output === 'string') {
+                    return {
+                        type: output,
+                    };
+                }
+                return output;
+            });
+        },
+        async getInputConnectionData(inputName, itemIndex) {
+            return await getInputConnectionData.call(this, workflow, runExecutionData, runIndex, connectionInputData, inputData, additionalData, executeData, mode, closeFunctions, inputName, itemIndex, abortSignal);
+        },
+        getInputData: (inputIndex = 0, inputName = 'main') => {
+            if (!inputData.hasOwnProperty(inputName)) {
+                return [];
+            }
+            if (inputData[inputName].length < inputIndex) {
+                throw new n8n_workflow_1.ApplicationError('Could not get input with given index', {
+                    extra: { inputIndex, inputName },
+                });
+            }
+            if (inputData[inputName][inputIndex] === null) {
+                throw new n8n_workflow_1.ApplicationError('Value of input was not set', {
+                    extra: { inputIndex, inputName },
+                });
+            }
+            return inputData[inputName][inputIndex];
+        },
+        getNodeParameter: ((parameterName, itemIndex, fallbackValue, options) => getNodeParameter(workflow, runExecutionData, runIndex, connectionInputData, node, parameterName, itemIndex, mode, getAdditionalKeys(additionalData, mode, runExecutionData), executeData, fallbackValue, options)),
+        getWorkflowDataProxy: (itemIndex) => new n8n_workflow_1.WorkflowDataProxy(workflow, runExecutionData, runIndex, itemIndex, node.name, connectionInputData, {}, mode, getAdditionalKeys(additionalData, mode, runExecutionData), executeData).getDataProxy(),
+        sendMessageToUI(...args) {
+            if (mode !== 'manual') {
+                return;
+            }
+            try {
+                if (additionalData.sendDataToUI) {
+                    args = args.map((arg) => {
+                        if (arg.isLuxonDateTime && arg.invalidReason)
+                            return { ...arg };
+                        if (arg.isLuxonDateTime)
+                            return new Date(arg.ts).toString();
+                        if (arg instanceof Date)
+                            return arg.toString();
+                        return arg;
+                    });
+                    additionalData.sendDataToUI('sendConsoleMessage', {
+                        source: `[Node: "${node.name}"]`,
+                        messages: args,
+                    });
+                }
+            }
+            catch (error) {
+                n8n_workflow_1.LoggerProxy.warn(`There was a problem sending message to UI: ${error.message}`);
+            }
+        },
+        logAiEvent: (eventName, msg) => additionalData.logAiEvent(eventName, {
+            executionId: additionalData.executionId ?? 'unsaved-execution',
+            nodeName: node.name,
+            workflowName: workflow.name ?? 'Unnamed workflow',
+            nodeType: node.type,
+            workflowId: workflow.id ?? 'unsaved-workflow',
+            msg,
+        }),
+        addInputData(connectionType, data) {
+            const nodeName = this.getNode().name;
+            let currentNodeRunIndex = 0;
+            if (runExecutionData.resultData.runData.hasOwnProperty(nodeName)) {
+                currentNodeRunIndex = runExecutionData.resultData.runData[nodeName].length;
+            }
+            addExecutionDataFunctions('input', this.getNode().name, data, runExecutionData, connectionType, additionalData, node.name, runIndex, currentNodeRunIndex).catch((error) => {
+                n8n_workflow_1.LoggerProxy.warn(`There was a problem logging input data of node "${this.getNode().name}": ${error.message}`);
+            });
+            return { index: currentNodeRunIndex };
+        },
+        addOutputData(connectionType, currentNodeRunIndex, data) {
+            addExecutionDataFunctions('output', this.getNode().name, data, runExecutionData, connectionType, additionalData, node.name, runIndex, currentNodeRunIndex).catch((error) => {
+                n8n_workflow_1.LoggerProxy.warn(`There was a problem logging output data of node "${this.getNode().name}": ${error.message}`);
+            });
+        },
+        helpers: {
+            createDeferredPromise: n8n_workflow_1.createDeferredPromise,
+            copyInputItems,
+            ...getRequestHelperFunctions(workflow, node, additionalData, runExecutionData, connectionInputData),
+            ...getSSHTunnelFunctions(),
+            ...getFileSystemHelperFunctions(node),
+            ...getBinaryHelperFunctions(additionalData, workflow.id),
+            ...getCheckProcessedHelperFunctions(workflow, node),
+            assertBinaryData: (itemIndex, propertyName) => assertBinaryData(inputData, node, itemIndex, propertyName, 0),
+            getBinaryDataBuffer: async (itemIndex, propertyName) => await getBinaryDataBuffer(inputData, itemIndex, propertyName, 0),
+            returnJsonArray,
+            normalizeItems,
+            constructExecutionMetaData,
+        },
+    };
+}
 function getExecuteSingleFunctions(workflow, runExecutionData, runIndex, connectionInputData, inputData, node, itemIndex, additionalData, executeData, mode, abortSignal) {
     return ((workflow, runExecutionData, connectionInputData, inputData, node, itemIndex) => {
         return {
@@ -2532,7 +2628,7 @@ function getExecuteSingleFunctions(workflow, runExecutionData, runIndex, connect
                 assertBinaryData: (propertyName, inputIndex = 0) => assertBinaryData(inputData, node, itemIndex, propertyName, inputIndex),
                 getBinaryDataBuffer: async (propertyName, inputIndex = 0) => await getBinaryDataBuffer(inputData, itemIndex, propertyName, inputIndex),
             },
-            logAiEvent: async (eventName, msg) => {
+            logAiEvent: (eventName, msg) => {
                 return additionalData.logAiEvent(eventName, {
                     executionId: additionalData.executionId ?? 'unsaved-execution',
                     nodeName: node.name,
@@ -2655,9 +2751,23 @@ function getExecuteWebhookFunctions(workflow, node, additionalData, mode, webhoo
                     source: null,
                 };
                 const runIndex = 0;
-                return await getInputConnectionData.call(this, workflow, runExecutionData, runIndex, connectionInputData, additionalData, executeData, mode, closeFunctions, inputName, itemIndex);
+                return await getInputConnectionData.call(this, workflow, runExecutionData, runIndex, connectionInputData, {}, additionalData, executeData, mode, closeFunctions, inputName, itemIndex);
             },
             getMode: () => mode,
+            evaluateExpression: (expression, evaluateItemIndex) => {
+                const itemIndex = evaluateItemIndex === undefined ? 0 : evaluateItemIndex;
+                const runIndex = 0;
+                let connectionInputData = [];
+                let executionData;
+                if (runExecutionData?.executionData !== undefined) {
+                    executionData = runExecutionData.executionData.nodeExecutionStack[0];
+                    if (executionData !== undefined) {
+                        connectionInputData = executionData.data.main[0];
+                    }
+                }
+                const additionalKeys = getAdditionalKeys(additionalData, mode, runExecutionData);
+                return workflow.expression.resolveSimpleParameterValue(`=${expression}`, {}, runExecutionData, runIndex, itemIndex, node.name, connectionInputData, mode, additionalKeys, executionData);
+            },
             getNodeParameter: (parameterName, fallbackValue, options) => {
                 const itemIndex = 0;
                 const runIndex = 0;