n8n-nodes-base 2.35.2 → 2.36.0

package/dist/utils/atlassian.d.ts

@@ -0,0 +1,23 @@
+import type { IExecuteFunctions, IHookFunctions, ILoadOptionsFunctions, IPollFunctions, IWebhookFunctions } from 'n8n-workflow';
+type AtlassianContext = IHookFunctions | IExecuteFunctions | ILoadOptionsFunctions | IPollFunctions | IWebhookFunctions;
+export type AtlassianProduct = 'jira' | 'confluence';
+export interface AccessibleResource {
+    id: string;
+    url: string;
+    name?: string;
+}
+export declare function clearAtlassianCloudIdCache(): void;
+/**
+ * Extracts the hostname from a site URL pasted in any reasonable form: with or
+ * without a scheme, with a trailing slash, with a path like /wiki, any casing.
+ * Throws on input that doesn't contain a parseable hostname.
+ */
+export declare function extractAtlassianSiteHostname(siteUrl: string): string;
+export declare function getAtlassianApiBaseUrl(product: AtlassianProduct, cloudId: string): string;
+/**
+ * Resolves a site URL to its cloudId by matching its hostname (case-insensitively)
+ * against the sites the OAuth2 connection can access.
+ */
+export declare function getAtlassianCloudId(this: AtlassianContext, credentialType: string, siteUrl: string, product: AtlassianProduct): Promise<string>;
+export {};
+//# sourceMappingURL=atlassian.d.ts.map

package/dist/utils/atlassian.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"atlassian.d.ts","sourceRoot":"","sources":["../../utils/atlassian.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,iBAAiB,EACjB,cAAc,EACd,qBAAqB,EACrB,cAAc,EACd,iBAAiB,EAEjB,MAAM,cAAc,CAAC;AAGtB,KAAK,gBAAgB,GAClB,cAAc,GACd,iBAAiB,GACjB,qBAAqB,GACrB,cAAc,GACd,iBAAiB,CAAC;AAErB,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,YAAY,CAAC;AAOrD,MAAM,WAAW,kBAAkB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;CACd;AAMD,wBAAgB,0BAA0B,SAEzC;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAIpE;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAEzF;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACxC,IAAI,EAAE,gBAAgB,EACtB,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,gBAAgB,GACvB,OAAO,CAAC,MAAM,CAAC,CAuDjB"}

package/dist/utils/atlassian.js

@@ -0,0 +1,81 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.clearAtlassianCloudIdCache = clearAtlassianCloudIdCache;
+exports.extractAtlassianSiteHostname = extractAtlassianSiteHostname;
+exports.getAtlassianApiBaseUrl = getAtlassianApiBaseUrl;
+exports.getAtlassianCloudId = getAtlassianCloudId;
+const n8n_workflow_1 = require("n8n-workflow");
+const PRODUCT_NAMES = {
+    jira: 'Jira',
+    confluence: 'Confluence',
+};
+// credentialId:hostname → cloudId, kept for the life of the process. Keyed per
+// credential so cache timing can't reveal which sites other credentials reach.
+const cloudIdCache = new Map();
+function clearAtlassianCloudIdCache() {
+    cloudIdCache.clear();
+}
+/**
+ * Extracts the hostname from a site URL pasted in any reasonable form: with or
+ * without a scheme, with a trailing slash, with a path like /wiki, any casing.
+ * Throws on input that doesn't contain a parseable hostname.
+ */
+function extractAtlassianSiteHostname(siteUrl) {
+    const trimmed = siteUrl.trim();
+    const withScheme = /^[a-z][a-z0-9+.-]*:\/\//i.test(trimmed) ? trimmed : `https://${trimmed}`;
+    return new URL(withScheme).hostname.toLowerCase();
+}
+function getAtlassianApiBaseUrl(product, cloudId) {
+    return `https://api.atlassian.com/ex/${product}/${encodeURIComponent(cloudId)}`;
+}
+/**
+ * Resolves a site URL to its cloudId by matching its hostname (case-insensitively)
+ * against the sites the OAuth2 connection can access.
+ */
+async function getAtlassianCloudId(credentialType, siteUrl, product) {
+    let hostname;
+    try {
+        hostname = extractAtlassianSiteHostname(siteUrl);
+    }
+    catch {
+        throw new n8n_workflow_1.NodeOperationError(this.getNode(), `"${siteUrl}" is not a valid Atlassian site URL. Expected something like https://your-site.atlassian.net.`);
+    }
+    const rawCredentialId = this.getNode().credentials?.[credentialType]?.id;
+    const credentialId = typeof rawCredentialId === 'string' ? rawCredentialId : '';
+    const cacheKey = `${credentialId}:${hostname}`;
+    const cached = cloudIdCache.get(cacheKey);
+    if (cached)
+        return cached;
+    let resources;
+    try {
+        resources = await this.helpers.httpRequestWithAuthentication.call(this, credentialType, {
+            method: 'GET',
+            url: 'https://api.atlassian.com/oauth/token/accessible-resources',
+            json: true,
+        });
+    }
+    catch (error) {
+        throw new n8n_workflow_1.NodeApiError(this.getNode(), error);
+    }
+    if (!Array.isArray(resources))
+        resources = [];
+    const site = resources.find((resource) => {
+        try {
+            return new URL(resource.url).hostname.toLowerCase() === hostname;
+        }
+        catch {
+            return false;
+        }
+    });
+    if (!site) {
+        // Capped at 5 so a bogus siteUrl can't dump the full site list into persisted execution data
+        const urls = resources
+            .filter((resource) => typeof resource?.url === 'string' && resource.url !== '')
+            .map((resource) => resource.url);
+        const reachable = urls.slice(0, 5).join(', ') + (urls.length > 5 ? `, and ${urls.length - 5} more` : '');
+        throw new n8n_workflow_1.NodeOperationError(this.getNode(), `No ${PRODUCT_NAMES[product]} site matched "${siteUrl}". This connection can access: ${reachable || 'no sites'}.`);
+    }
+    cloudIdCache.set(cacheKey, site.id);
+    return site.id;
+}
+//# sourceMappingURL=atlassian.js.map

package/dist/utils/atlassian.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"atlassian.js","sourceRoot":"","sources":["../../utils/atlassian.ts"],"names":[],"mappings":";;;;;;AAQA,+CAAgE;AAWhE,MAAM,aAAa,GAAqC;IACvD,IAAI,EAAE,MAAM;IACZ,UAAU,EAAE,YAAY;CACxB,CAAC;AAQF,+EAA+E;AAC/E,+EAA+E;AAC/E,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;AAE/C;IACC,YAAY,CAAC,KAAK,EAAE,CAAC;AACtB,CAAC;AAED;;;;GAIG;AACH,sCAA6C,OAAe;IAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,UAAU,GAAG,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,OAAO,EAAE,CAAC;IAC7F,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;AACnD,CAAC;AAED,gCAAuC,OAAyB,EAAE,OAAe;IAChF,OAAO,gCAAgC,OAAO,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;AACjF,CAAC;AAED;;;GAGG;AACI,KAAK,8BAEX,cAAsB,EACtB,OAAe,EACf,OAAyB;IAEzB,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACJ,QAAQ,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,iCAAkB,CAC3B,IAAI,CAAC,OAAO,EAAE,EACd,IAAI,OAAO,+FAA+F,CAC1G,CAAC;IACH,CAAC;IAED,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;IACzE,MAAM,YAAY,GAAG,OAAO,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,MAAM,QAAQ,GAAG,GAAG,YAAY,IAAI,QAAQ,EAAE,CAAC;IAC/C,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,IAAI,SAA+B,CAAC;IACpC,IAAI,CAAC;QACJ,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,6BAA6B,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE;YACvF,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,4DAA4D;YACjE,IAAI,EAAE,IAAI;SACV,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,2BAAY,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAmB,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,SAAS,GAAG,EAAE,CAAC;IAE9C,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;QACxC,IAAI,CAAC;YACJ,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,6FAA6F;QAC7F,MAAM,IAAI,GAAG,SAAS;aACpB,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,QAAQ,EAAE,GAAG,KAAK,QAAQ,IAAI,QAAQ,CAAC,GAAG,KAAK,EAAE,CAAC;aAC9E,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,SAAS,GACd,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxF,MAAM,IAAI,iCAAkB,CAC3B,IAAI,CAAC,OAAO,EAAE,EACd,MAAM,aAAa,CAAC,OAAO,CAAC,kBAAkB,OAAO,kCACpD,SAAS,IAAI,UACd,GAAG,CACH,CAAC;IACH,CAAC;IAED,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACpC,OAAO,IAAI,CAAC,EAAE,CAAC;AAChB,CAAC"}

package/dist/utils/microsoft/transport.d.ts

@@ -0,0 +1,65 @@
+import type { IExecuteFunctions, ILoadOptionsFunctions, IDataObject, IHttpRequestMethods, IHookFunctions, INode } from 'n8n-workflow';
+/**
+ * Credential-name literal of the shared `microsoftEntraServicePrincipalApi`
+ * (app-only) credential. Used as both the `authentication` selector value and the
+ * credential type, so a rename stays in one place.
+ */
+export declare const SERVICE_PRINCIPAL_AUTH = "microsoftEntraServicePrincipalApi";
+/**
+ * Field-level `displayOptions.hide` gate spread onto every operation/event/field
+ * that has no usable app-only form. The slash-prefixed `/authentication` key
+ * addresses the root selector from a nested field (distinct from the un-prefixed
+ * `show.authentication` key used on the credential entries themselves).
+ * Frozen so no import can mutate the contract (the inner array keeps the mutable
+ * type `IDisplayOptions` expects, so only the key is locked).
+ */
+export declare const SP_HIDE: Readonly<{
+    '/authentication': string[];
+}>;
+export type MicrosoftGraphCredentialType<TDefault extends string> = TDefault | 'microsoftOAuth2Api' | typeof SERVICE_PRINCIPAL_AUTH;
+/**
+ * Validates a user-supplied Graph id (already `extractValue`-resolved) before it is
+ * interpolated RAW into a Graph path, and returns the coerced, trimmed and
+ * percent-decoded value. Teams URLs expose ids percent-encoded
+ * (`19%3A...%40thread.tacv2`) and the RLC hints tell users to paste them, so the id
+ * is decoded once and the decoded form is what gets validated and interpolated,
+ * matching the raw shape list-sourced ids already travel in.
+ * Throws a `NodeOperationError` with a fully static message (never echoing the id)
+ * on a bad shape. Reused for both path IDs and `task:create` body IDs.
+ */
+export declare function validateMicrosoftGraphId(id: string, node: INode): string;
+export type MicrosoftGraphPathSegment = string | {
+    id: string;
+};
+/**
+ * Single, non-bypassable path builder for every Graph path that interpolates a
+ * user-supplied id. `segments` is an ordered mix of literal strings and id parts
+ * (`{ id: value }`). Every `{ id }` is validated then interpolated RAW, under
+ * both credential types. See `validateMicrosoftGraphId` / `GRAPH_ID_REJECT` for why
+ * validation (not encoding) is the guard.
+ */
+export declare function buildMicrosoftGraphPath(this: IExecuteFunctions | ILoadOptionsFunctions | IHookFunctions, segments: MicrosoftGraphPathSegment[]): string;
+/**
+ * Binds the shared Microsoft Graph transport to a node's default credential type;
+ * the node facade calls this once at module load and re-exports the returned
+ * functions. `defaultCredentialType` is the node's back-compat delegated OAuth2
+ * default for legacy nodes with no stored `authentication` value: the node's own
+ * credential literal, or the generic `'microsoftOAuth2Api'` where that is the
+ * node's default (as in SharePoint v2). Never `SERVICE_PRINCIPAL_AUTH` (enforced
+ * below): legacy nodes would silently resolve to the tenant-wide app-only
+ * credential.
+ *
+ * Known SharePoint v2 deltas to fold in via factory config (not per-node forks)
+ * when it adopts the kernel: injectable static messages (UserTargetMessages
+ * pattern in nodes/Microsoft/GenericFunctions.ts), per-operation 403 permission
+ * hints, safe-message allowlist, per-page headers and a negative-limit guard on
+ * `microsoftApiRequestAllItems`.
+ */
+export declare function createMicrosoftGraphTransport<TDefault extends string>(config: {
+    defaultCredentialType: TDefault;
+}): {
+    getCredentialType: (this: IExecuteFunctions | ILoadOptionsFunctions | IHookFunctions) => MicrosoftGraphCredentialType<TDefault>;
+    microsoftApiRequest: (this: IExecuteFunctions | ILoadOptionsFunctions | IHookFunctions, method: IHttpRequestMethods, resource: string, body?: any, qs?: IDataObject, uri?: string, headers?: IDataObject) => Promise<any>;
+    microsoftApiRequestAllItems: (this: IExecuteFunctions | ILoadOptionsFunctions, propertyName: string, method: IHttpRequestMethods, endpoint: string, body?: any, query?: IDataObject, limit?: number) => Promise<any>;
+};
+//# sourceMappingURL=transport.d.ts.map

package/dist/utils/microsoft/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../../utils/microsoft/transport.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,iBAAiB,EACjB,qBAAqB,EACrB,WAAW,EAEX,mBAAmB,EAEnB,cAAc,EACd,KAAK,EACL,MAAM,cAAc,CAAC;AAKtB;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,sCAAsC,CAAC;AAE1E;;;;;;;GAOG;AACH,eAAO,MAAM,OAAO,EAAE,QAAQ,CAAC;IAAE,iBAAiB,EAAE,MAAM,EAAE,CAAA;CAAE,CAE5D,CAAC;AAEH,MAAM,MAAM,4BAA4B,CAAC,QAAQ,SAAS,MAAM,IAC7D,QAAQ,GACR,oBAAoB,GACpB,OAAO,sBAAsB,CAAC;AAiBjC;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,GAAG,MAAM,CA6BxE;AAED,MAAM,MAAM,yBAAyB,GAAG,MAAM,GAAG;IAAE,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhE;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACtC,IAAI,EAAE,iBAAiB,GAAG,qBAAqB,GAAG,cAAc,EAChE,QAAQ,EAAE,yBAAyB,EAAE,GACnC,MAAM,CAUR;AAuBD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,6BAA6B,CAAC,QAAQ,SAAS,MAAM,EAAE,MAAM,EAAE;IAC9E,qBAAqB,EAAE,QAAQ,CAAC;CAChC;8BAyBO,iBAAiB,GAAG,qBAAqB,GAAG,cAAc,KAC9D,4BAA4B,CAAC,QAAQ,CAAC;gCAiBlC,iBAAiB,GAAG,qBAAqB,GAAG,cAAc,UACxD,mBAAmB,YACjB,MAAM,SACV,GAAG,OACL,WAAW,QACT,MAAM,YACH,WAAW,KAClB,OAAO,CAAC,GAAG,CAAC;wCA6GR,iBAAiB,GAAG,qBAAqB,gBACjC,MAAM,UACZ,mBAAmB,YACjB,MAAM,SACV,GAAG,UACF,WAAW,UACV,MAAM,KACZ,OAAO,CAAC,GAAG,CAAC;EA2Bf"}

package/dist/utils/microsoft/transport.js

@@ -0,0 +1,287 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SP_HIDE = exports.SERVICE_PRINCIPAL_AUTH = void 0;
+exports.validateMicrosoftGraphId = validateMicrosoftGraphId;
+exports.buildMicrosoftGraphPath = buildMicrosoftGraphPath;
+exports.createMicrosoftGraphTransport = createMicrosoftGraphTransport;
+const n8n_workflow_1 = require("n8n-workflow");
+const utilities_1 = require("../utilities");
+/**
+ * Credential-name literal of the shared `microsoftEntraServicePrincipalApi`
+ * (app-only) credential. Used as both the `authentication` selector value and the
+ * credential type, so a rename stays in one place.
+ */
+exports.SERVICE_PRINCIPAL_AUTH = 'microsoftEntraServicePrincipalApi';
+/**
+ * Field-level `displayOptions.hide` gate spread onto every operation/event/field
+ * that has no usable app-only form. The slash-prefixed `/authentication` key
+ * addresses the root selector from a nested field (distinct from the un-prefixed
+ * `show.authentication` key used on the credential entries themselves).
+ * Frozen so no import can mutate the contract (the inner array keeps the mutable
+ * type `IDisplayOptions` expects, so only the key is locked).
+ */
+exports.SP_HIDE = Object.freeze({
+    '/authentication': [exports.SERVICE_PRINCIPAL_AUTH],
+});
+// Reject any id that could escape its Graph path segment or start a query/fragment:
+// path separators (`/` `\`), query/fragment starters (`?` `#`), residual percent
+// (`%`), and control chars (0x00-0x1F). `:` and `@` are ALLOWED: they are
+// structure-neutral inside a single Teams id segment (real channel ids look like
+// `19:...@thread.tacv2`), and the proven Graph URL shape interpolates them raw.
+// This class runs against the percent-DECODED value: a pre-encoded separator like
+// `..%2F..` decodes to `../..` and is caught by the separator chars, a double-encoded
+// one like `..%252F..` decodes to `..%2F..` and is caught by the residual `%`
+// (legitimate Graph ids never carry a literal `%` after the single decode), and a
+// malformed encoding rejects in the decode step before this.
+// Validating the decoded shape (not encoding) is what keeps a value safe to
+// interpolate raw. Messages are static so a rejected id is never echoed back.
+// eslint-disable-next-line no-control-regex
+const GRAPH_ID_REJECT = /[\x00-\x1f\/\\?#%]/;
+/**
+ * Validates a user-supplied Graph id (already `extractValue`-resolved) before it is
+ * interpolated RAW into a Graph path, and returns the coerced, trimmed and
+ * percent-decoded value. Teams URLs expose ids percent-encoded
+ * (`19%3A...%40thread.tacv2`) and the RLC hints tell users to paste them, so the id
+ * is decoded once and the decoded form is what gets validated and interpolated,
+ * matching the raw shape list-sourced ids already travel in.
+ * Throws a `NodeOperationError` with a fully static message (never echoing the id)
+ * on a bad shape. Reused for both path IDs and `task:create` body IDs.
+ */
+function validateMicrosoftGraphId(id, node) {
+    const trimmed = String(id ?? '').trim();
+    if (trimmed === '') {
+        throw new n8n_workflow_1.NodeOperationError(node, 'A required ID is empty', {
+            // Teams wording; make it injectable (UserTargetMessages pattern in
+            // nodes/Microsoft/GenericFunctions.ts) when the second consumer (SharePoint v2) lands.
+            description: 'Set the team, channel, plan, bucket or task ID and try again.',
+        });
+    }
+    let value;
+    try {
+        value = decodeURIComponent(trimmed);
+    }
+    catch {
+        throw new n8n_workflow_1.NodeOperationError(node, 'The ID is not valid', {
+            description: 'The ID contains a malformed percent-encoding. Copy it again and try again.',
+        });
+    }
+    if (/^\.+$/.test(value)) {
+        throw new n8n_workflow_1.NodeOperationError(node, 'The ID is not valid', {
+            description: 'An ID cannot consist only of dots.',
+        });
+    }
+    if (GRAPH_ID_REJECT.test(value)) {
+        throw new n8n_workflow_1.NodeOperationError(node, 'The ID is not valid', {
+            description: 'Remove any slashes, backslashes, question marks or hashes, and make sure the ID is not double-encoded.',
+        });
+    }
+    return value;
+}
+/**
+ * Single, non-bypassable path builder for every Graph path that interpolates a
+ * user-supplied id. `segments` is an ordered mix of literal strings and id parts
+ * (`{ id: value }`). Every `{ id }` is validated then interpolated RAW, under
+ * both credential types. See `validateMicrosoftGraphId` / `GRAPH_ID_REJECT` for why
+ * validation (not encoding) is the guard.
+ */
+function buildMicrosoftGraphPath(segments) {
+    const node = this.getNode();
+    return segments
+        .map((segment) => {
+        if (typeof segment === 'string')
+            return segment;
+        // validateMicrosoftGraphId coerces + trims — `as string` at the call sites is
+        // compile-time only, so an expression can resolve an id to a non-string.
+        return validateMicrosoftGraphId(segment.id, node);
+    })
+        .join('');
+}
+/**
+ * Best-effort read of the node's `resource` parameter for "{Resource} not found"
+ * rewrites. The parameter exists on action nodes but not in trigger hook or
+ * load-options contexts, where `getNodeParameter` either throws or returns the
+ * literal fallback `0`; both resolve to `undefined` here so callers fall back to
+ * a generic message instead of surfacing "0 not found".
+ */
+function nodeResourceName() {
+    try {
+        const resource = this.getNodeParameter('resource', 0);
+        if (typeof resource === 'string' && resource !== '') {
+            return (0, utilities_1.capitalize)(resource);
+        }
+    }
+    catch {
+        // hook/load-options contexts may not expose this parameter
+    }
+    return undefined;
+}
+/**
+ * Binds the shared Microsoft Graph transport to a node's default credential type;
+ * the node facade calls this once at module load and re-exports the returned
+ * functions. `defaultCredentialType` is the node's back-compat delegated OAuth2
+ * default for legacy nodes with no stored `authentication` value: the node's own
+ * credential literal, or the generic `'microsoftOAuth2Api'` where that is the
+ * node's default (as in SharePoint v2). Never `SERVICE_PRINCIPAL_AUTH` (enforced
+ * below): legacy nodes would silently resolve to the tenant-wide app-only
+ * credential.
+ *
+ * Known SharePoint v2 deltas to fold in via factory config (not per-node forks)
+ * when it adopts the kernel: injectable static messages (UserTargetMessages
+ * pattern in nodes/Microsoft/GenericFunctions.ts), per-operation 403 permission
+ * hints, safe-message allowlist, per-page headers and a negative-limit guard on
+ * `microsoftApiRequestAllItems`.
+ */
+function createMicrosoftGraphTransport(config) {
+    const { defaultCredentialType } = config;
+    const defaultTypeName = defaultCredentialType;
+    if (defaultTypeName === exports.SERVICE_PRINCIPAL_AUTH) {
+        // Fail at module load so a misconfigured facade can never ship.
+        throw new n8n_workflow_1.UnexpectedError('createMicrosoftGraphTransport: defaultCredentialType must be a delegated OAuth2 credential, not the Service Principal credential');
+    }
+    /**
+     * Resolves which credential type the node is configured to use. Defaults to the
+     * configured `defaultCredentialType` so existing workflows (and nodes saved
+     * before the `authentication` selector existed) keep working unchanged, while
+     * allowing the generic `microsoftOAuth2Api` (Graph) credential or the app-only
+     * `microsoftEntraServicePrincipalApi` (Service Principal) credential to be selected.
+     *
+     * Allow-list resolver: only the two known non-default credential names are honored;
+     * anything else (unset/legacy nodes, an unknown value, or the load-options fallback
+     * `0`) falls back to the default credential.
+     *
+     * Shared by the action node, its `listSearch` helpers and the Trigger's
+     * webhook hooks, since all of them authenticate through `microsoftApiRequest`.
+     */
+    function getCredentialType() {
+        // `0` is the execute item index; in load-options/hook contexts getNodeParameter
+        // treats the 2nd arg as the FALLBACK value, so don't switch this to the 3-arg form.
+        // Use an explicit allow-list (not `selected ?? default`): in load-options/hooks a
+        // legacy node with no stored `authentication` returns the literal fallback `0`,
+        // which is not nullish — so `?? default` would resolve to `0` and break
+        // `getCredentials(0)`. Anything other than the two known non-default values
+        // (incl. `0`, `undefined`, legacy nodes) resolves to the default credential.
+        const selected = this.getNodeParameter('authentication', 0);
+        return selected === 'microsoftOAuth2Api' || selected === exports.SERVICE_PRINCIPAL_AUTH
+            ? selected
+            : defaultCredentialType;
+    }
+    async function microsoftApiRequest(method, resource, body = {}, qs = {}, uri, headers = {}) {
+        const credentialType = getCredentialType.call(this);
+        const isServicePrincipal = credentialType === exports.SERVICE_PRINCIPAL_AUTH;
+        const credentials = await this.getCredentials(credentialType);
+        const baseUrl = (typeof credentials.graphApiBaseUrl === 'string' && credentials.graphApiBaseUrl !== ''
+            ? credentials.graphApiBaseUrl
+            : 'https://graph.microsoft.com').replace(/\/+$/, '');
+        // An explicit `uri` (e.g. a next-page link from Graph) is used verbatim,
+        // but it must stay on the credential's Graph host: the bearer token must
+        // never travel to an unexpected origin. Graph's own @odata.nextLink is
+        // always same-origin, so nothing legitimate is refused.
+        const target = uri || `${baseUrl}${resource}`;
+        if (new URL(target).origin !== new URL(baseUrl).origin) {
+            throw new n8n_workflow_1.NodeOperationError(this.getNode(), 'Refusing to send credentials to an unexpected host');
+        }
+        const options = {
+            headers: {
+                'Content-Type': 'application/json',
+            },
+            method,
+            body,
+            qs,
+            uri: target,
+            json: true,
+        };
+        try {
+            if (Object.keys(headers).length !== 0) {
+                options.headers = Object.assign({}, options.headers, headers);
+            }
+            // The Service Principal credential is not an `oAuth2Api` parent type — it
+            // mints a bearer via preAuthentication + attaches it via authenticate, so it
+            // must go through `requestWithAuthentication` (core's single 401-retry re-runs
+            // the token mint). OAuth2 credentials keep using `requestOAuth2`.
+            if (isServicePrincipal) {
+                return await this.helpers.requestWithAuthentication.call(this, credentialType, options);
+            }
+            return await this.helpers.requestOAuth2.call(this, credentialType, options);
+        }
+        catch (error) {
+            if (isServicePrincipal) {
+                // App-only runs under a tenant-wide token: a raw Graph error body can carry
+                // correlation IDs and reflected input. For ANY status, never pass the raw
+                // body to NodeApiError (it would land in `messages`/context); throw a
+                // sanitized error whose only content is a static message + the status code.
+                //
+                // `requestWithAuthentication` wraps the underlying request error in a
+                // `NodeApiError`, which exposes the HTTP status on `httpCode` (a string) — NOT
+                // on `statusCode` / `error.error.statusCode`. Read `httpCode` first; fall back
+                // to `statusCode` for the rare raw-error case. The Graph body/code is not
+                // reliably accessible on the wrapped error, so key the NotFound rewrite off the
+                // numeric 404 rather than the Graph `code`.
+                const rawCode = error?.httpCode ?? error?.statusCode;
+                const httpCode = rawCode === undefined || rawCode === null ? undefined : Number(rawCode);
+                let message;
+                const nodeResource = nodeResourceName.call(this);
+                if (httpCode === 404 && nodeResource) {
+                    message = `${nodeResource} not found`;
+                }
+                else if (httpCode === 401) {
+                    message =
+                        "The Service Principal token was rejected. Check the app registration's client secret and that admin consent is granted.";
+                }
+                else if (httpCode === 402) {
+                    // Teams wording; make it injectable (UserTargetMessages pattern in
+                    // nodes/Microsoft/GenericFunctions.ts) when the second consumer (SharePoint v2) lands.
+                    message =
+                        'This operation requires a metered Microsoft Teams API to be enabled on the tenant.';
+                }
+                else if (httpCode === 403) {
+                    message =
+                        'The app registration is missing a consented application permission for this operation. Grant the required Graph application permission and admin consent, then retry.';
+                }
+                else {
+                    message = `Microsoft Graph rejected the request (HTTP ${httpCode ?? 'unknown'}). Check the operation's inputs and the app registration's permissions.`;
+                }
+                const sanitizedError = { message };
+                const errorOptions = { message };
+                if (httpCode !== undefined && !Number.isNaN(httpCode)) {
+                    sanitizedError.httpStatusCode = httpCode;
+                    errorOptions.httpCode = `${httpCode}`;
+                }
+                throw new n8n_workflow_1.NodeApiError(this.getNode(), sanitizedError, errorOptions);
+            }
+            const errorOptions = {};
+            if (error.error?.error) {
+                const httpCode = error.statusCode;
+                error = error.error.error;
+                error.statusCode = httpCode;
+                errorOptions.message = error.message;
+                if (error.code === 'NotFound' && error.message === 'Resource not found') {
+                    // Same defensive read as the SP branch: in a trigger hook context the
+                    // `resource` parameter resolves to the fallback `0`, which must not
+                    // surface as "0 not found".
+                    const nodeResource = nodeResourceName.call(this);
+                    if (nodeResource) {
+                        errorOptions.message = `${nodeResource} not found`;
+                    }
+                }
+            }
+            throw new n8n_workflow_1.NodeApiError(this.getNode(), error, errorOptions);
+        }
+    }
+    async function microsoftApiRequestAllItems(propertyName, method, endpoint, body = {}, query = {}, limit) {
+        const returnData = [];
+        let responseData;
+        let uri;
+        do {
+            // `@odata.nextLink` already carries the query params; don't re-send them
+            responseData = await microsoftApiRequest.call(this, method, endpoint, body, uri ? {} : query, uri);
+            uri = responseData['@odata.nextLink'];
+            returnData.push.apply(returnData, responseData[propertyName]);
+            if (limit && returnData.length >= limit) {
+                return returnData.slice(0, limit);
+            }
+        } while (responseData['@odata.nextLink'] !== undefined);
+        return returnData;
+    }
+    return { getCredentialType, microsoftApiRequest, microsoftApiRequestAllItems };
+}
+//# sourceMappingURL=transport.js.map

package/dist/utils/microsoft/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../../../utils/microsoft/transport.ts"],"names":[],"mappings":";;;;;;AAUA,+CAAiF;AAEjF,4CAA0C;AAE1C;;;;GAIG;AACU,QAAA,sBAAsB,GAAG,mCAAmC,CAAC;AAE1E;;;;;;;GAOG;AACU,QAAA,OAAO,GAA8C,MAAM,CAAC,MAAM,CAAC;IAC/E,iBAAiB,EAAE,CAAC,QAAA,sBAAsB,CAAC;CAC3C,CAAC,CAAC;AAOH,oFAAoF;AACpF,iFAAiF;AACjF,0EAA0E;AAC1E,iFAAiF;AACjF,gFAAgF;AAChF,kFAAkF;AAClF,sFAAsF;AACtF,8EAA8E;AAC9E,kFAAkF;AAClF,6DAA6D;AAC7D,4EAA4E;AAC5E,8EAA8E;AAC9E,4CAA4C;AAC5C,MAAM,eAAe,GAAG,oBAAoB,CAAC;AAE7C;;;;;;;;;GASG;AACH,kCAAyC,EAAU,EAAE,IAAW;IAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,iCAAkB,CAAC,IAAI,EAAE,wBAAwB,EAAE;YAC5D,mEAAmE;YACnE,uFAAuF;YACvF,WAAW,EAAE,+DAA+D;SAC5E,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACJ,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,iCAAkB,CAAC,IAAI,EAAE,qBAAqB,EAAE;YACzD,WAAW,EAAE,4EAA4E;SACzF,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,iCAAkB,CAAC,IAAI,EAAE,qBAAqB,EAAE;YACzD,WAAW,EAAE,oCAAoC;SACjD,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,iCAAkB,CAAC,IAAI,EAAE,qBAAqB,EAAE;YACzD,WAAW,EACV,wGAAwG;SACzG,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAID;;;;;;GAMG;AACH,iCAEC,QAAqC;IAErC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;IAC5B,OAAO,QAAQ;SACb,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QAChB,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,OAAO,CAAC;QAChD,8EAA8E;QAC9E,yEAAyE;QACzE,OAAO,wBAAwB,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CAAC;AACZ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB;IAGxB,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACtD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;YACrD,OAAO,IAAA,sBAAU,EAAC,QAAQ,CAAC,CAAC;QAC7B,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,2DAA2D;IAC5D,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,uCAAuE,MAEtE;IACA,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,CAAC;IACzC,MAAM,eAAe,GAAW,qBAAqB,CAAC;IACtD,IAAI,eAAe,KAAK,QAAA,sBAAsB,EAAE,CAAC;QAChD,gEAAgE;QAChE,MAAM,IAAI,8BAAe,CACxB,kIAAkI,CAClI,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,SAAS,iBAAiB;QAGzB,gFAAgF;QAChF,oFAAoF;QACpF,kFAAkF;QAClF,gFAAgF;QAChF,wEAAwE;QACxE,4EAA4E;QAC5E,6EAA6E;QAC7E,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,CAAC,CAE9C,CAAC;QACb,OAAO,QAAQ,KAAK,oBAAoB,IAAI,QAAQ,KAAK,QAAA,sBAAsB;YAC9E,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,qBAAqB,CAAC;IAC1B,CAAC;IAED,KAAK,UAAU,mBAAmB,CAEjC,MAA2B,EAC3B,QAAgB,EAChB,IAAI,GAAQ,EAAE,EACd,EAAE,GAAgB,EAAE,EACpB,GAAY,EACZ,OAAO,GAAgB,EAAE;QAEzB,MAAM,cAAc,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,kBAAkB,GAAG,cAAc,KAAK,QAAA,sBAAsB,CAAC;QACrE,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,CACf,OAAO,WAAW,CAAC,eAAe,KAAK,QAAQ,IAAI,WAAW,CAAC,eAAe,KAAK,EAAE;YACpF,CAAC,CAAC,WAAW,CAAC,eAAe;YAC7B,CAAC,CAAC,6BAA6B,CAChC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACtB,yEAAyE;QACzE,yEAAyE;QACzE,uEAAuE;QACvE,wDAAwD;QACxD,MAAM,MAAM,GAAG,GAAG,IAAI,GAAG,OAAO,GAAG,QAAQ,EAAE,CAAC;QAC9C,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;YACxD,MAAM,IAAI,iCAAkB,CAC3B,IAAI,CAAC,OAAO,EAAE,EACd,oDAAoD,CACpD,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAoB;YAChC,OAAO,EAAE;gBACR,cAAc,EAAE,kBAAkB;aAClC;YACD,MAAM;YACN,IAAI;YACJ,EAAE;YACF,GAAG,EAAE,MAAM;YACX,IAAI,EAAE,IAAI;SACV,CAAC;QACF,IAAI,CAAC;YACJ,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvC,OAAO,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC/D,CAAC;YACD,0EAA0E;YAC1E,6EAA6E;YAC7E,+EAA+E;YAC/E,kEAAkE;YAClE,IAAI,kBAAkB,EAAE,CAAC;gBACxB,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;YACzF,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;QAC7E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,kBAAkB,EAAE,CAAC;gBACxB,4EAA4E;gBAC5E,0EAA0E;gBAC1E,sEAAsE;gBACtE,4EAA4E;gBAC5E,EAAE;gBACF,sEAAsE;gBACtE,+EAA+E;gBAC/E,+EAA+E;gBAC/E,0EAA0E;gBAC1E,gFAAgF;gBAChF,4CAA4C;gBAC5C,MAAM,OAAO,GAAG,KAAK,EAAE,QAAQ,IAAI,KAAK,EAAE,UAAU,CAAC;gBACrD,MAAM,QAAQ,GACb,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAEzE,IAAI,OAAe,CAAC;gBACpB,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjD,IAAI,QAAQ,KAAK,GAAG,IAAI,YAAY,EAAE,CAAC;oBACtC,OAAO,GAAG,GAAG,YAAY,YAAY,CAAC;gBACvC,CAAC;qBAAM,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;oBAC7B,OAAO;wBACN,yHAAyH,CAAC;gBAC5H,CAAC;qBAAM,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;oBAC7B,mEAAmE;oBACnE,uFAAuF;oBACvF,OAAO;wBACN,oFAAoF,CAAC;gBACvF,CAAC;qBAAM,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;oBAC7B,OAAO;wBACN,uKAAuK,CAAC;gBAC1K,CAAC;qBAAM,CAAC;oBACP,OAAO,GAAG,8CAA8C,QAAQ,IAAI,SAAS,yEAAyE,CAAC;gBACxJ,CAAC;gBAED,MAAM,cAAc,GAAe,EAAE,OAAO,EAAE,CAAC;gBAC/C,MAAM,YAAY,GAAgB,EAAE,OAAO,EAAE,CAAC;gBAC9C,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACvD,cAAc,CAAC,cAAc,GAAG,QAAQ,CAAC;oBACzC,YAAY,CAAC,QAAQ,GAAG,GAAG,QAAQ,EAAE,CAAC;gBACvC,CAAC;gBACD,MAAM,IAAI,2BAAY,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC;YACtE,CAAC;YAED,MAAM,YAAY,GAAgB,EAAE,CAAC;YACrC,IAAI,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC;gBACxB,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC;gBAClC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;gBAC1B,KAAK,CAAC,UAAU,GAAG,QAAQ,CAAC;gBAC5B,YAAY,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;gBAErC,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,OAAO,KAAK,oBAAoB,EAAE,CAAC;oBACzE,sEAAsE;oBACtE,oEAAoE;oBACpE,4BAA4B;oBAC5B,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACjD,IAAI,YAAY,EAAE,CAAC;wBAClB,YAAY,CAAC,OAAO,GAAG,GAAG,YAAY,YAAY,CAAC;oBACpD,CAAC;gBACF,CAAC;YACF,CAAC;YACD,MAAM,IAAI,2BAAY,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAmB,EAAE,YAAY,CAAC,CAAC;QAC3E,CAAC;IACF,CAAC;IAED,KAAK,UAAU,2BAA2B,CAEzC,YAAoB,EACpB,MAA2B,EAC3B,QAAgB,EAChB,IAAI,GAAQ,EAAE,EACd,KAAK,GAAgB,EAAE,EACvB,KAAc;QAEd,MAAM,UAAU,GAAkB,EAAE,CAAC;QAErC,IAAI,YAAY,CAAC;QACjB,IAAI,GAAuB,CAAC;QAE5B,GAAG,CAAC;YACH,yEAAyE;YACzE,YAAY,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAC5C,IAAI,EACJ,MAAM,EACN,QAAQ,EACR,IAAI,EACJ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,EAChB,GAAG,CACH,CAAC;YACF,GAAG,GAAG,YAAY,CAAC,iBAAiB,CAAC,CAAC;YACtC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,YAAY,CAAkB,CAAC,CAAC;YAC/E,IAAI,KAAK,IAAI,UAAU,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;gBACzC,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACnC,CAAC;QACF,CAAC,QAAQ,YAAY,CAAC,iBAAiB,CAAC,KAAK,SAAS,EAAE;QAExD,OAAO,UAAU,CAAC;IACnB,CAAC;IAED,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,2BAA2B,EAAE,CAAC;AAChF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "n8n-nodes-base",
-  "version": "2.35.2",
+  "version": "2.36.0",
   "description": "Base nodes of n8n",
   "main": "index.js",
   "typesVersions": {
@@ -34,6 +34,7 @@
       "dist/credentials/ApiTemplateIoApi.credentials.js",
       "dist/credentials/AsanaApi.credentials.js",
       "dist/credentials/AsanaOAuth2Api.credentials.js",
+      "dist/credentials/AtlassianOAuth2Api.credentials.js",
       "dist/credentials/Auth0ManagementApi.credentials.js",
       "dist/credentials/AutopilotApi.credentials.js",
       "dist/credentials/Aws.credentials.js",
@@ -71,6 +72,7 @@
       "dist/credentials/ClockifyApi.credentials.js",
       "dist/credentials/CockpitApi.credentials.js",
       "dist/credentials/CodaApi.credentials.js",
+      "dist/credentials/ConfluenceCloudOAuth2Api.credentials.js",
       "dist/credentials/ContentfulApi.credentials.js",
       "dist/credentials/ConvertApi.credentials.js",
       "dist/credentials/ConvertKitApi.credentials.js",
@@ -341,6 +343,7 @@
       "dist/credentials/ShopifyOAuth2Api.credentials.js",
       "dist/credentials/Signl4Api.credentials.js",
       "dist/credentials/SlackApi.credentials.js",
+      "dist/credentials/SlackManagerOAuth2Api.credentials.js",
       "dist/credentials/SlackOAuth2Api.credentials.js",
       "dist/credentials/Sms77Api.credentials.js",
       "dist/credentials/Smtp.credentials.js",
@@ -905,13 +908,13 @@
     "vite": "^8.0.2",
     "vitest": "^4.1.9",
     "vitest-mock-extended": "^3.1.0",
+    "@n8n/client-oauth2": "1.18.0",
     "@n8n/eslint-plugin-community-nodes": "0.29.0",
     "@n8n/playwright-janitor": "0.1.0",
-    "@n8n/typescript-config": "1.9.0",
-    "@n8n/client-oauth2": "1.17.2",
-    "@n8n/vitest-config": "1.20.0",
-    "n8n-core": "2.35.2",
-    "n8n-containers": "1.0.0"
+    "@n8n/typescript-config": "1.10.0",
+    "@n8n/vitest-config": "1.21.0",
+    "n8n-containers": "1.0.0",
+    "n8n-core": "2.36.0"
   },
   "dependencies": {
     "@aws-crypto/sha256-js": "5.2.0",
@@ -949,7 +952,7 @@
     "ics": "2.40.0",
     "isbot": "3.6.13",
     "iso-639-1": "2.1.15",
-    "isolated-vm": "^6.1.2",
+    "isolated-vm": "^7.0.0",
     "js-nacl": "1.4.0",
     "jsdom": "23.0.1",
     "json-schema": "0.4.0",
@@ -992,20 +995,20 @@
     "tar": "7.5.21",
     "tmp-promise": "3.0.3",
     "ts-ics": "1.2.2",
-    "undici": "^6.27.0",
+    "undici": "^6.28.0",
     "uuid": "11.1.1",
     "vm2": "3.11.5",
     "@e965/xlsx": "0.20.3",
     "xml2js": "0.6.2",
     "xmlhttprequest-ssl": "3.1.0",
     "zod": "3.25.76",
-    "@n8n/backend-network": "1.9.2",
+    "@n8n/backend-network": "1.10.0",
+    "@n8n/config": "2.34.0",
     "@n8n/di": "0.16.0",
-    "@n8n/config": "2.33.2",
     "@n8n/imap": "0.25.0",
     "@n8n/errors": "0.13.0",
-    "n8n-workflow": "2.35.1",
-    "@n8n/utils": "1.43.1"
+    "@n8n/utils": "1.44.0",
+    "n8n-workflow": "2.36.0"
   },
   "license": "SEE LICENSE IN LICENSE.md",
   "homepage": "https://n8n.io",

package/dist/nodes/Compression/decompress/GunzipOutputAccumulator.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"GunzipOutputAccumulator.d.ts","sourceRoot":"","sources":["../../../../nodes/Compression/decompress/GunzipOutputAccumulator.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,qBAAa,uBAAuB;IAOvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IANpC,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,CAAM;IAEnC,QAAQ,UAAS;IAEjB,OAAO,CAAC,SAAS,CAAK;IAEtB,YAA6B,OAAO,EAAE,MAAM,EAAI;IAEhD,uFAAuF;IACvF,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAShC;IAED,qBAAqB,IAAI,MAAM,CAE9B;CACD"}

package/dist/nodes/Compression/decompress/GunzipOutputAccumulator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"GunzipOutputAccumulator.js","sourceRoot":"","sources":["../../../../nodes/Compression/decompress/GunzipOutputAccumulator.ts"],"names":[],"mappings":";;;AAAA;;;;GAIG;AACH;IAO8B,OAAO;IAN3B,MAAM,GAAiB,EAAE,CAAC;IAEnC,QAAQ,GAAG,KAAK,CAAC;IAET,SAAS,GAAG,CAAC,CAAC;IAEtB,YAA6B,OAAe;uBAAf,OAAO;IAAW,CAAC;IAEhD,uFAAuF;IACvF,KAAK,CAAC,KAAiB;QACtB,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QACxC,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,CAAC;QAC/B,IAAI,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YACnC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrB,OAAO,IAAI,CAAC,QAAQ,CAAC;QACtB,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QAChC,OAAO,IAAI,CAAC,QAAQ,CAAC;IACtB,CAAC;IAED,qBAAqB;QACpB,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;CACD"}