n8n-nodes-base 2.40.0 → 2.40.2

package/dist/utils/query-escaping.d.ts

@@ -0,0 +1,86 @@
+import type { INode } from 'n8n-workflow';
+/**
+ * Query languages differ in how a literal quote is written, so pick the helper
+ * by language rather than by what looks familiar.
+ *
+ * Values are `unknown` and coerced here: a node parameter can resolve to a
+ * number, boolean or null through an expression, and `as string` at the call
+ * site would not convert it.
+ */
+/**
+ * Escapes a value for a single-quoted literal in an OData `$filter`
+ * (Microsoft Graph, SharePoint), where a literal quote is written twice.
+ *
+ * @see https://learn.microsoft.com/en-us/graph/filter-query-parameter
+ */
+export declare function escapeODataValue(value: unknown): string;
+/**
+ * Escapes a value for a single-quoted literal in a backslash-escaping query
+ * language: SendGrid's SGQL and the Google Drive query language.
+ *
+ * @see https://www.twilio.com/docs/sendgrid/for-developers/sending-email/segmentation-query-language
+ * @see https://developers.google.com/workspace/drive/api/guides/search-files
+ */
+export declare function escapeBackslashQuotedValue(value: unknown): string;
+/**
+ * Escapes a value for a single-quoted operand of an SGQL `LIKE` (SendGrid).
+ *
+ * `%` is a wildcard there, so a value carrying one has to double it to stay a
+ * literal — otherwise a bound value can widen an exact lookup. `_` is left
+ * alone: the reference documents no wildcard meaning for it, and it is common
+ * in real addresses.
+ *
+ * @see https://www.twilio.com/docs/sendgrid/for-developers/sending-email/segmentation-query-language
+ */
+export declare function escapeSgqlLikeValue(value: unknown): string;
+/**
+ * Escapes a value for a double-quoted clause in a Microsoft Graph
+ * **directory-object** `$search` (`/users`, `/groups`), where the documented
+ * rule is to backslash-escape a quote or a backslash.
+ *
+ * Only that dialect. Graph's other `$search` surfaces differ — message search is
+ * Exchange KQL, which documents no escape, so a value carrying the delimiter has
+ * to be rejected instead (see `assertNoQueryDelimiters`).
+ *
+ * @see https://learn.microsoft.com/en-us/graph/search-query-parameter — "Use $search on directory object collections"
+ */
+export declare function escapeODataSearchValue(value: unknown): string;
+/**
+ * Escapes a value for a double-quoted operand of an Amazon Cognito `ListUsers`
+ * filter, where a quote is backslash-escaped.
+ *
+ * @see https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ListUsers.html — "Quotation marks within the filter string must be escaped using the backslash (\) character"
+ */
+export declare function escapeCognitoFilterValue(value: unknown): string;
+/**
+ * Returns a value for an *unquoted* OData datetime operand, `receivedDateTime ge …`.
+ *
+ * An unquoted operand has no delimiter to escape, so the value is held to the
+ * literal grammar instead. A `dateTime` parameter is a UI control, not a runtime
+ * guarantee: an expression can resolve one to any value.
+ *
+ * Accepts milliseconds since the epoch, which the calling fields document. A
+ * value that already carries an offset passes through unchanged, so a datetime
+ * that works today keeps the exact form the API already receives; one missing the
+ * time or the offset is completed rather than refused.
+ *
+ * Checks the shape, not the calendar: an impossible date cannot break out of the
+ * operand, so it is left for the API to reject.
+ *
+ * @see https://learn.microsoft.com/en-us/graph/filter-query-parameter
+ */
+export declare function toODataDateTimeLiteral(fieldName: string, value: unknown): string;
+/**
+ * Rejects a value carrying a delimiter of a query language that offers no way to
+ * escape it — ServiceNow encoded queries (`^` separates clauses) and the
+ * Freshservice filter API (quotes in a filter value are
+ * [a known upstream limitation](https://community.freshworks.dev/t/how-are-single-quotes-escaped-in-filter-query-string-values/5123)
+ * with no workaround).
+ *
+ * Throws rather than dropping the delimiter, which would silently change what
+ * the query matches.
+ */
+export declare function assertNoQueryDelimiters(this: {
+    getNode(): INode;
+}, fieldName: string, value: unknown, delimiters: string[], itemIndex?: number): void;
+//# sourceMappingURL=query-escaping.d.ts.map

package/dist/utils/query-escaping.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"query-escaping.d.ts","sourceRoot":"","sources":["../../utils/query-escaping.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAE1C;;;;;;;GAOG;AAEH;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEvD;AAUD;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEjE;AAED;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE1D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE7D;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE/D;AAqBD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,CAahF;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CACtC,IAAI,EAAE;IAAE,OAAO,IAAI,KAAK,CAAA;CAAE,EAC1B,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,OAAO,EACd,UAAU,EAAE,MAAM,EAAE,EACpB,SAAS,CAAC,EAAE,MAAM,GAChB,IAAI,CAWN"}

package/dist/utils/query-escaping.js

@@ -0,0 +1,152 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.escapeODataValue = escapeODataValue;
+exports.escapeBackslashQuotedValue = escapeBackslashQuotedValue;
+exports.escapeSgqlLikeValue = escapeSgqlLikeValue;
+exports.escapeODataSearchValue = escapeODataSearchValue;
+exports.escapeCognitoFilterValue = escapeCognitoFilterValue;
+exports.toODataDateTimeLiteral = toODataDateTimeLiteral;
+exports.assertNoQueryDelimiters = assertNoQueryDelimiters;
+const n8n_workflow_1 = require("n8n-workflow");
+/**
+ * Query languages differ in how a literal quote is written, so pick the helper
+ * by language rather than by what looks familiar.
+ *
+ * Values are `unknown` and coerced here: a node parameter can resolve to a
+ * number, boolean or null through an expression, and `as string` at the call
+ * site would not convert it.
+ */
+/**
+ * Escapes a value for a single-quoted literal in an OData `$filter`
+ * (Microsoft Graph, SharePoint), where a literal quote is written twice.
+ *
+ * @see https://learn.microsoft.com/en-us/graph/filter-query-parameter
+ */
+function escapeODataValue(value) {
+    return String(value).replaceAll("'", "''");
+}
+/**
+ * Backslashes are escaped first, otherwise a trailing backslash in the value
+ * would consume the backslash we add and leave the quote unescaped.
+ */
+function escapeWithBackslash(value, quote) {
+    return String(value).replaceAll('\\', '\\\\').replaceAll(quote, `\\${quote}`);
+}
+/**
+ * Escapes a value for a single-quoted literal in a backslash-escaping query
+ * language: SendGrid's SGQL and the Google Drive query language.
+ *
+ * @see https://www.twilio.com/docs/sendgrid/for-developers/sending-email/segmentation-query-language
+ * @see https://developers.google.com/workspace/drive/api/guides/search-files
+ */
+function escapeBackslashQuotedValue(value) {
+    return escapeWithBackslash(value, "'");
+}
+/**
+ * Escapes a value for a single-quoted operand of an SGQL `LIKE` (SendGrid).
+ *
+ * `%` is a wildcard there, so a value carrying one has to double it to stay a
+ * literal — otherwise a bound value can widen an exact lookup. `_` is left
+ * alone: the reference documents no wildcard meaning for it, and it is common
+ * in real addresses.
+ *
+ * @see https://www.twilio.com/docs/sendgrid/for-developers/sending-email/segmentation-query-language
+ */
+function escapeSgqlLikeValue(value) {
+    return escapeWithBackslash(value, "'").replaceAll('%', '%%');
+}
+/**
+ * Escapes a value for a double-quoted clause in a Microsoft Graph
+ * **directory-object** `$search` (`/users`, `/groups`), where the documented
+ * rule is to backslash-escape a quote or a backslash.
+ *
+ * Only that dialect. Graph's other `$search` surfaces differ — message search is
+ * Exchange KQL, which documents no escape, so a value carrying the delimiter has
+ * to be rejected instead (see `assertNoQueryDelimiters`).
+ *
+ * @see https://learn.microsoft.com/en-us/graph/search-query-parameter — "Use $search on directory object collections"
+ */
+function escapeODataSearchValue(value) {
+    return escapeWithBackslash(value, '"');
+}
+/**
+ * Escapes a value for a double-quoted operand of an Amazon Cognito `ListUsers`
+ * filter, where a quote is backslash-escaped.
+ *
+ * @see https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_ListUsers.html — "Quotation marks within the filter string must be escaped using the backslash (\) character"
+ */
+function escapeCognitoFilterValue(value) {
+    return escapeWithBackslash(value, '"');
+}
+// Admits only the characters an OData datetime is made of, so a match carries
+// nothing that could be read as anything but the operand.
+const ODATA_DATE_TIME = /^\d{4}-\d{2}-\d{2}(?:T\d{2}:\d{2}(?::\d{2}(?:\.\d+)?)?(?:Z|[+-]\d{2}:\d{2})?)?$/;
+/**
+ * Completes a conforming value that omits the time or the offset. Graph wants a
+ * whole DateTimeOffset, and the picker only produces one, so a short value comes
+ * from an expression, where it reads as UTC.
+ *
+ * Completed as text rather than re-parsed: `new Date('2024-01-31T09:00')` resolves
+ * against the local zone, which would move the value into another day.
+ */
+function completeDateTimeOffset(text) {
+    if (!text.includes('T'))
+        return `${text}T00:00:00Z`;
+    if (/(?:Z|[+-]\d{2}:\d{2})$/.test(text))
+        return text;
+    return /T\d{2}:\d{2}$/.test(text) ? `${text}:00Z` : `${text}Z`;
+}
+/**
+ * Returns a value for an *unquoted* OData datetime operand, `receivedDateTime ge …`.
+ *
+ * An unquoted operand has no delimiter to escape, so the value is held to the
+ * literal grammar instead. A `dateTime` parameter is a UI control, not a runtime
+ * guarantee: an expression can resolve one to any value.
+ *
+ * Accepts milliseconds since the epoch, which the calling fields document. A
+ * value that already carries an offset passes through unchanged, so a datetime
+ * that works today keeps the exact form the API already receives; one missing the
+ * time or the offset is completed rather than refused.
+ *
+ * Checks the shape, not the calendar: an impossible date cannot break out of the
+ * operand, so it is left for the API to reject.
+ *
+ * @see https://learn.microsoft.com/en-us/graph/filter-query-parameter
+ */
+function toODataDateTimeLiteral(fieldName, value) {
+    if (typeof value === 'number' || (typeof value === 'string' && /^\d+$/.test(value))) {
+        const fromEpoch = new Date(Number(value));
+        // An out-of-range number gives an invalid date, whose toISOString() throws.
+        if (!Number.isNaN(fromEpoch.getTime()))
+            return fromEpoch.toISOString();
+    }
+    const text = String(value);
+    if (ODATA_DATE_TIME.test(text))
+        return completeDateTimeOffset(text);
+    throw new n8n_workflow_1.UserError(`'${fieldName}' must be a date`, {
+        description: `The value "${text}" is not a date. Use an ISO 8601 date such as 2024-01-31T09:00:00Z, or the number of milliseconds since the epoch.`,
+    });
+}
+/**
+ * Rejects a value carrying a delimiter of a query language that offers no way to
+ * escape it — ServiceNow encoded queries (`^` separates clauses) and the
+ * Freshservice filter API (quotes in a filter value are
+ * [a known upstream limitation](https://community.freshworks.dev/t/how-are-single-quotes-escaped-in-filter-query-string-values/5123)
+ * with no workaround).
+ *
+ * Throws rather than dropping the delimiter, which would silently change what
+ * the query matches.
+ */
+function assertNoQueryDelimiters(fieldName, value, delimiters, itemIndex) {
+    const text = String(value);
+    const found = delimiters.find((delimiter) => text.includes(delimiter));
+    if (found === undefined)
+        return;
+    // getNode() deep-copies the node, so it is resolved here rather than passed in
+    // — this runs per item, and the common case never reaches this line.
+    throw new n8n_workflow_1.NodeOperationError(this.getNode(), `'${fieldName}' cannot contain ${found}`, {
+        itemIndex,
+        description: `The service this node queries has no way to quote ${found} inside a value, so a value containing it cannot be looked up. Remove it from '${fieldName}'.`,
+    });
+}
+//# sourceMappingURL=query-escaping.js.map

package/dist/utils/query-escaping.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query-escaping.js","sourceRoot":"","sources":["../../utils/query-escaping.ts"],"names":[],"mappings":";;;;;;;;;AAAA,+CAA6D;AAG7D;;;;;;;GAOG;AAEH;;;;;GAKG;AACH,0BAAiC,KAAc;IAC9C,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,KAAc,EAAE,KAAa;IACzD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,KAAK,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED;;;;;;GAMG;AACH,oCAA2C,KAAc;IACxD,OAAO,mBAAmB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;;;;GASG;AACH,6BAAoC,KAAc;IACjD,OAAO,mBAAmB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;;;;;;GAUG;AACH,gCAAuC,KAAc;IACpD,OAAO,mBAAmB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AAED;;;;;GAKG;AACH,kCAAyC,KAAc;IACtD,OAAO,mBAAmB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AAED,8EAA8E;AAC9E,0DAA0D;AAC1D,MAAM,eAAe,GACpB,iFAAiF,CAAC;AAEnF;;;;;;;GAOG;AACH,SAAS,sBAAsB,CAAC,IAAY;IAC3C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,IAAI,YAAY,CAAC;IACpD,IAAI,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC;AAChE,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,gCAAuC,SAAiB,EAAE,KAAc;IACvE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACrF,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,4EAA4E;QAC5E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YAAE,OAAO,SAAS,CAAC,WAAW,EAAE,CAAC;IACxE,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAEpE,MAAM,IAAI,wBAAS,CAAC,IAAI,SAAS,kBAAkB,EAAE;QACpD,WAAW,EAAE,cAAc,IAAI,oHAAoH;KACnJ,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,iCAEC,SAAiB,EACjB,KAAc,EACd,UAAoB,EACpB,SAAkB;IAElB,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACvE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAEhC,+EAA+E;IAC/E,qEAAqE;IACrE,MAAM,IAAI,iCAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,SAAS,oBAAoB,KAAK,EAAE,EAAE;QACtF,SAAS;QACT,WAAW,EAAE,qDAAqD,KAAK,kFAAkF,SAAS,IAAI;KACtK,CAAC,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "n8n-nodes-base",
-  "version": "2.40.0",
+  "version": "2.40.2",
   "description": "Base nodes of n8n",
   "main": "index.js",
   "typesVersions": {
@@ -13,8 +13,8 @@
   "files": [
     "dist",
     "aws-credentials.js",
-    "LICENSE_EE.md",
-    "LICENSE.md"
+    "LICENSE.md",
+    "LICENSE_EE.md"
   ],
   "n8n": {
     "credentials": [
@@ -876,7 +876,7 @@
     ]
   },
   "devDependencies": {
-    "@n8n/client-oauth2": "1.22.0",
+    "@n8n/client-oauth2": "1.22.1",
     "@n8n/eslint-plugin-community-nodes": "0.33.0",
     "@n8n/playwright-janitor": "0.1.0",
     "@n8n/typescript-config": "1.12.0",
@@ -911,7 +911,7 @@
     "@types/uuid": "^11.0.0",
     "@types/xml2js": "^0.4.14",
     "n8n-containers": "1.0.0",
-    "n8n-core": "2.40.0",
+    "n8n-core": "2.40.2",
     "nock": "14.0.14",
     "reflect-metadata": "0.2.2",
     "typescript": "7.0.2",
@@ -926,7 +926,7 @@
     "@smithy/protocol-http": "5.3.12",
     "@smithy/signature-v4": "5.7.2",
     "@smithy/types": "4.13.1",
-    "@n8n/backend-network": "1.14.0",
+    "@n8n/backend-network": "1.14.1",
     "@confluentinc/kafka-javascript": "1.9.1",
     "@kafkajs/confluent-schema-registry": "3.8.0",
     "@langchain/core": "1.2.8",
@@ -979,7 +979,7 @@
     "mqtt-packet": "9.0.0",
     "mssql": "12.7.0",
     "mysql2": "3.23.1",
-    "n8n-workflow": "2.40.0",
+    "n8n-workflow": "2.40.1",
     "node-html-markdown": "1.2.0",
     "node-ssh": "13.2.0",
     "nodemailer": "8.0.10",

package/dist/utils/url.d.ts

@@ -1,9 +0,0 @@
-/**
- * Encode an id as a single URL path segment. `.`, `..`, and the empty string
- * are rejected: they survive encodeURIComponent but are removed during path
- * normalisation, so they cannot be encoded safely. Nullish values are
- * rejected before encoding, since they would otherwise become the literal
- * string "null" or "undefined".
- */
-export declare function toPathSegment(id: unknown): string;
-//# sourceMappingURL=url.d.ts.map

package/dist/utils/url.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"url.d.ts","sourceRoot":"","sources":["../../utils/url.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,EAAE,EAAE,OAAO,GAAG,MAAM,CASjD"}

package/dist/utils/url.js

@@ -1,22 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.toPathSegment = toPathSegment;
-const n8n_workflow_1 = require("n8n-workflow");
-/**
- * Encode an id as a single URL path segment. `.`, `..`, and the empty string
- * are rejected: they survive encodeURIComponent but are removed during path
- * normalisation, so they cannot be encoded safely. Nullish values are
- * rejected before encoding, since they would otherwise become the literal
- * string "null" or "undefined".
- */
-function toPathSegment(id) {
-    if (id === null || id === undefined) {
-        throw new n8n_workflow_1.UserError('Invalid identifier: a value is required');
-    }
-    const value = String(id);
-    if (value === '' || value === '.' || value === '..') {
-        throw new n8n_workflow_1.UserError(`Invalid identifier: "${value}" is not allowed`);
-    }
-    return encodeURIComponent(value);
-}
-//# sourceMappingURL=url.js.map

package/dist/utils/url.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"url.js","sourceRoot":"","sources":["../../utils/url.ts"],"names":[],"mappings":";;;AAAA,+CAAyC;AAEzC;;;;;;GAMG;AACH,uBAA8B,EAAW;IACxC,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,IAAI,wBAAS,CAAC,yCAAyC,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IACzB,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACrD,MAAM,IAAI,wBAAS,CAAC,wBAAwB,KAAK,kBAAkB,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC"}