n8n 2.20.6 → 2.21.0

package/dist/instance-settings-loader/instance-settings-loader.service.js

@@ -12,19 +12,21 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.InstanceSettingsLoaderService = void 0;
 const backend_common_1 = require("@n8n/backend-common");
 const di_1 = require("@n8n/di");
+const community_packages_instance_settings_loader_1 = require("./loaders/community-packages.instance-settings-loader");
 const log_streaming_instance_settings_loader_1 = require("./loaders/log-streaming.instance-settings-loader");
 const mcp_settings_loader_1 = require("./loaders/mcp-settings.loader");
 const owner_instance_settings_loader_1 = require("./loaders/owner.instance-settings-loader");
 const security_policy_instance_settings_loader_1 = require("./loaders/security-policy.instance-settings-loader");
-const sso_instance_settings_loader_1 = require("./loaders/sso.instance-settings-loader");
+const sso_instance_settings_loader_1 = require("./loaders/sso/sso.instance-settings-loader");
 let InstanceSettingsLoaderService = class InstanceSettingsLoaderService {
-    constructor(logger, ownerLoader, ssoLoader, securityPolicyLoader, logStreamingLoader, mcpLoader) {
+    constructor(logger, ownerLoader, ssoLoader, securityPolicyLoader, logStreamingLoader, mcpLoader, communityPackagesLoader) {
         this.logger = logger;
         this.ownerLoader = ownerLoader;
         this.ssoLoader = ssoLoader;
         this.securityPolicyLoader = securityPolicyLoader;
         this.logStreamingLoader = logStreamingLoader;
         this.mcpLoader = mcpLoader;
+        this.communityPackagesLoader = communityPackagesLoader;
         this.logger = this.logger.scoped('instance-settings-loader');
     }
     async init() {
@@ -33,6 +35,7 @@ let InstanceSettingsLoaderService = class InstanceSettingsLoaderService {
         await this.run('security-policy', async () => await this.securityPolicyLoader.run());
         await this.run('log-streaming', async () => await this.logStreamingLoader.run());
         await this.run('mcp', async () => await this.mcpLoader.run());
+        await this.run('community-packages', async () => await this.communityPackagesLoader.run());
     }
     async run(name, fn) {
         const result = await fn();
@@ -47,6 +50,7 @@ exports.InstanceSettingsLoaderService = InstanceSettingsLoaderService = __decora
         sso_instance_settings_loader_1.SsoInstanceSettingsLoader,
         security_policy_instance_settings_loader_1.SecurityPolicyInstanceSettingsLoader,
         log_streaming_instance_settings_loader_1.LogStreamingInstanceSettingsLoader,
-        mcp_settings_loader_1.McpSettingsLoader])
+        mcp_settings_loader_1.McpSettingsLoader,
+        community_packages_instance_settings_loader_1.CommunityPackagesInstanceSettingsLoader])
 ], InstanceSettingsLoaderService);
 //# sourceMappingURL=instance-settings-loader.service.js.map

package/dist/instance-settings-loader/instance-settings-loader.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"instance-settings-loader.service.js","sourceRoot":"","sources":["../../src/instance-settings-loader/instance-settings-loader.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wDAA6C;AAC7C,gCAAkC;AAElC,6GAAsG;AACtG,uEAAkE;AAClE,6FAAuF;AACvF,iHAA0G;AAC1G,yFAAmF;AAK5E,IAAM,6BAA6B,GAAnC,MAAM,6BAA6B;IACzC,YACS,MAAc,EACL,WAAwC,EACxC,SAAoC,EACpC,oBAA0D,EAC1D,kBAAsD,EACtD,SAA4B;QALrC,WAAM,GAAN,MAAM,CAAQ;QACL,gBAAW,GAAX,WAAW,CAA6B;QACxC,cAAS,GAAT,SAAS,CAA2B;QACpC,yBAAoB,GAApB,oBAAoB,CAAsC;QAC1D,uBAAkB,GAAlB,kBAAkB,CAAoC;QACtD,cAAS,GAAT,SAAS,CAAmB;QAE7C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,IAAI;QACT,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;QAClE,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9D,MAAM,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,CAAC,CAAC;QACrF,MAAM,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC;QACjF,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/D,CAAC;IAEO,KAAK,CAAC,GAAG,CAAC,IAAY,EAAE,EAA+B;QAC9D,MAAM,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,IAAI,MAAM,MAAM,EAAE,CAAC,CAAC;IACpE,CAAC;CACD,CAAA;AAxBY,sEAA6B;wCAA7B,6BAA6B;IADzC,IAAA,YAAO,GAAE;qCAGQ,uBAAM;QACQ,4DAA2B;QAC7B,wDAAyB;QACd,+EAAoC;QACtC,2EAAkC;QAC3C,uCAAiB;GAPlC,6BAA6B,CAwBzC"}
+{"version":3,"file":"instance-settings-loader.service.js","sourceRoot":"","sources":["../../src/instance-settings-loader/instance-settings-loader.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wDAA6C;AAC7C,gCAAkC;AAElC,uHAAgH;AAChH,6GAAsG;AACtG,uEAAkE;AAClE,6FAAuF;AACvF,iHAA0G;AAC1G,6FAAuF;AAKhF,IAAM,6BAA6B,GAAnC,MAAM,6BAA6B;IACzC,YACS,MAAc,EACL,WAAwC,EACxC,SAAoC,EACpC,oBAA0D,EAC1D,kBAAsD,EACtD,SAA4B,EAC5B,uBAAgE;QANzE,WAAM,GAAN,MAAM,CAAQ;QACL,gBAAW,GAAX,WAAW,CAA6B;QACxC,cAAS,GAAT,SAAS,CAA2B;QACpC,yBAAoB,GAApB,oBAAoB,CAAsC;QAC1D,uBAAkB,GAAlB,kBAAkB,CAAoC;QACtD,cAAS,GAAT,SAAS,CAAmB;QAC5B,4BAAuB,GAAvB,uBAAuB,CAAyC;QAEjF,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,IAAI;QACT,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;QAClE,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9D,MAAM,IAAI,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,CAAC,CAAC;QACrF,MAAM,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC;QACjF,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9D,MAAM,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,uBAAuB,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5F,CAAC;IAEO,KAAK,CAAC,GAAG,CAAC,IAAY,EAAE,EAA+B;QAC9D,MAAM,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,IAAI,MAAM,MAAM,EAAE,CAAC,CAAC;IACpE,CAAC;CACD,CAAA;AA1BY,sEAA6B;wCAA7B,6BAA6B;IADzC,IAAA,YAAO,GAAE;qCAGQ,uBAAM;QACQ,4DAA2B;QAC7B,wDAAyB;QACd,+EAAoC;QACtC,2EAAkC;QAC3C,uCAAiB;QACH,qFAAuC;GARtE,6BAA6B,CA0BzC"}

package/dist/instance-settings-loader/loaders/community-packages.instance-settings-loader.d.ts

@@ -0,0 +1,20 @@
+import { Logger } from '@n8n/backend-common';
+import { InstanceSettingsLoaderConfig } from '@n8n/config';
+import { WorkflowRepository } from '@n8n/db';
+import { CommunityNodeTypesService } from '../../modules/community-packages/community-node-types.service';
+import { CommunityPackagesConfig } from '../../modules/community-packages/community-packages.config';
+import { CommunityPackagesService } from '../../modules/community-packages/community-packages.service';
+export declare class CommunityPackagesInstanceSettingsLoader {
+    private readonly config;
+    private readonly communityPackagesConfig;
+    private readonly communityPackagesService;
+    private readonly communityNodeTypesService;
+    private readonly workflowRepository;
+    private logger;
+    constructor(config: InstanceSettingsLoaderConfig, communityPackagesConfig: CommunityPackagesConfig, communityPackagesService: CommunityPackagesService, communityNodeTypesService: CommunityNodeTypesService, workflowRepository: WorkflowRepository, logger: Logger);
+    run(): Promise<'created' | 'skipped'>;
+    private findWorkflowsReferencingPackage;
+    private buildReconciliationPlan;
+    private resolveVersionAndChecksum;
+    private parseAndValidate;
+}

package/dist/instance-settings-loader/loaders/community-packages.instance-settings-loader.js

@@ -0,0 +1,235 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CommunityPackagesInstanceSettingsLoader = void 0;
+const backend_common_1 = require("@n8n/backend-common");
+const config_1 = require("@n8n/config");
+const db_1 = require("@n8n/db");
+const di_1 = require("@n8n/di");
+const n8n_workflow_1 = require("n8n-workflow");
+const zod_1 = require("zod");
+const community_node_types_service_1 = require("../../modules/community-packages/community-node-types.service");
+const community_packages_config_1 = require("../../modules/community-packages/community-packages.config");
+const community_packages_service_1 = require("../../modules/community-packages/community-packages.service");
+const instance_bootstrapping_error_1 = require("../instance-bootstrapping.error");
+const envPackageSchema = zod_1.z
+    .object({
+    name: zod_1.z.string().min(1),
+    version: zod_1.z.string().min(1).optional(),
+    checksum: zod_1.z.string().min(1).optional(),
+})
+    .strict();
+const envPackagesSchema = zod_1.z.array(envPackageSchema);
+let CommunityPackagesInstanceSettingsLoader = class CommunityPackagesInstanceSettingsLoader {
+    constructor(config, communityPackagesConfig, communityPackagesService, communityNodeTypesService, workflowRepository, logger) {
+        this.config = config;
+        this.communityPackagesConfig = communityPackagesConfig;
+        this.communityPackagesService = communityPackagesService;
+        this.communityNodeTypesService = communityNodeTypesService;
+        this.workflowRepository = workflowRepository;
+        this.logger = logger;
+        this.logger = this.logger.scoped('instance-settings-loader');
+    }
+    async run() {
+        if (!this.config.communityPackagesManagedByEnv) {
+            this.logger.debug('communityPackagesManagedByEnv is disabled — skipping community packages env config');
+            return 'skipped';
+        }
+        if (!this.communityPackagesConfig.enabled) {
+            this.logger.warn('N8N_COMMUNITY_PACKAGES_MANAGED_BY_ENV is enabled but community packages are disabled (N8N_COMMUNITY_PACKAGES_ENABLED=false) — skipping');
+            return 'skipped';
+        }
+        this.logger.info('communityPackagesManagedByEnv is enabled — reconciling installed community packages from env vars');
+        let items;
+        try {
+            items = this.parseAndValidate(this.config.communityPackages);
+        }
+        catch (error) {
+            const message = error.message ?? 'Unknown error';
+            this.logger.error(message);
+            throw new instance_bootstrapping_error_1.InstanceBootstrappingError(message);
+        }
+        const resolved = [];
+        for (const item of items) {
+            resolved.push(await this.resolveVersionAndChecksum(item));
+        }
+        const installed = await this.communityPackagesService.getAllInstalledPackages();
+        const { toInstall, toUpdate, toRemove } = this.buildReconciliationPlan(resolved, installed);
+        let changed = false;
+        for (const item of toInstall) {
+            try {
+                await this.communityPackagesService.installPackage(item.name, item.version, item.checksum);
+                this.logger.info(`Installed community package ${formatRef(item)} from env`);
+                changed = true;
+            }
+            catch (error) {
+                this.logger.error(`Failed to install community package ${formatRef(item)} from env: ${(0, n8n_workflow_1.ensureError)(error).message}`);
+            }
+        }
+        for (const { env, installed: existing } of toUpdate) {
+            try {
+                await this.communityPackagesService.updatePackage(env.name, existing, env.version, env.checksum);
+                this.logger.info(`Updated community package '${env.name}' from ${existing.installedVersion} to ${env.version} from env`);
+                changed = true;
+            }
+            catch (error) {
+                this.logger.error(`Failed to update community package '${env.name}' to ${env.version} from env: ${(0, n8n_workflow_1.ensureError)(error).message}`);
+            }
+        }
+        for (const pkg of toRemove) {
+            const { packageName } = pkg;
+            const dependentNodeCount = pkg.installedNodes?.length ?? 0;
+            const affectedWorkflows = await this.findWorkflowsReferencingPackage(pkg);
+            try {
+                await this.communityPackagesService.removePackage(packageName, pkg);
+                this.logger.warn(`Removed community package '${packageName}' (had ${dependentNodeCount} registered node type(s)) — not declared in N8N_COMMUNITY_PACKAGES`, {
+                    packageName,
+                    installedVersion: pkg.installedVersion,
+                    workflowIds: affectedWorkflows.map((w) => w.id),
+                    activeWorkflowIds: affectedWorkflows.filter((w) => w.active).map((w) => w.id),
+                });
+                changed = true;
+            }
+            catch (error) {
+                this.logger.error(`Failed to remove community package '${packageName}' that is not declared in env: ${(0, n8n_workflow_1.ensureError)(error).message}`);
+            }
+        }
+        return changed ? 'created' : 'skipped';
+    }
+    async findWorkflowsReferencingPackage(pkg) {
+        const nodeTypes = pkg.installedNodes?.map((node) => node.type) ?? [];
+        if (nodeTypes.length === 0)
+            return [];
+        try {
+            return await this.workflowRepository.findWorkflowsWithNodeType(nodeTypes);
+        }
+        catch (error) {
+            this.logger.warn(`Failed to check workflows referencing community package '${pkg.packageName}' before removal`, { packageName: pkg.packageName, error: (0, n8n_workflow_1.ensureError)(error) });
+            return [];
+        }
+    }
+    buildReconciliationPlan(resolved, installed) {
+        const installedByName = new Map(installed.map((p) => [p.packageName, p]));
+        const desiredNames = new Set(resolved.map((i) => i.name));
+        const toInstall = [];
+        const toUpdate = [];
+        const toRemove = [];
+        for (const item of resolved) {
+            const existing = installedByName.get(item.name);
+            if (!existing) {
+                toInstall.push(item);
+            }
+            else if (item.version !== undefined && existing.installedVersion !== item.version) {
+                toUpdate.push({ env: item, installed: existing });
+            }
+        }
+        for (const pkg of installed) {
+            if (!desiredNames.has(pkg.packageName)) {
+                toRemove.push(pkg);
+            }
+        }
+        return { toInstall, toUpdate, toRemove };
+    }
+    async resolveVersionAndChecksum(item) {
+        if (item.checksum) {
+            return { name: item.name, version: item.version, checksum: item.checksum };
+        }
+        let vetted;
+        try {
+            vetted = await this.communityNodeTypesService.findVetted(item.name);
+        }
+        catch (error) {
+            this.logger.warn(`Failed to look up vetted checksum for community package '${item.name}': ${(0, n8n_workflow_1.ensureError)(error).message}`);
+        }
+        let resolvedVersion = item.version;
+        let checksum;
+        if (vetted) {
+            if (item.version === undefined) {
+                resolvedVersion = vetted.npmVersion;
+                checksum = vetted.checksum;
+            }
+            else if (vetted.npmVersion === item.version) {
+                checksum = vetted.checksum;
+            }
+            else {
+                checksum = vetted.nodeVersions?.find((v) => v.npmVersion === item.version)?.checksum;
+            }
+        }
+        if (!checksum && !this.communityPackagesConfig.unverifiedEnabled) {
+            const ref = resolvedVersion ? `'${item.name}@${resolvedVersion}'` : `'${item.name}'`;
+            throw new instance_bootstrapping_error_1.InstanceBootstrappingError(`N8N_COMMUNITY_PACKAGES: no checksum available for ${ref} and unverified packages are disabled`);
+        }
+        if (resolvedVersion === undefined) {
+            this.logger.warn(`Community package '${item.name}' has no pinned version and no vetted entry — installed version will not be reconciled across restarts`);
+        }
+        return { name: item.name, version: resolvedVersion, checksum };
+    }
+    parseAndValidate(raw) {
+        const trimmed = (raw ?? '').trim();
+        if (trimmed.length === 0)
+            return [];
+        let parsed;
+        try {
+            parsed = JSON.parse(trimmed);
+        }
+        catch (error) {
+            throw new Error(`N8N_COMMUNITY_PACKAGES is not valid JSON: ${error.message}`);
+        }
+        const result = envPackagesSchema.safeParse(parsed);
+        if (!result.success) {
+            const issue = result.error.issues[0];
+            const path = issue.path.length > 0 ? issue.path.join('.') : '(root)';
+            throw new Error(`N8N_COMMUNITY_PACKAGES validation failed at "${path}": ${issue.message}`);
+        }
+        const items = result.data;
+        const seenNames = new Set();
+        const normalized = items.map((item, index) => {
+            let parsed;
+            try {
+                parsed = this.communityPackagesService.parseNpmPackageName(item.name);
+            }
+            catch (error) {
+                throw new Error(`N8N_COMMUNITY_PACKAGES has an invalid package name "${item.name}" at index ${index}: ${error.message}`);
+            }
+            if (parsed.version !== undefined &&
+                item.version !== undefined &&
+                parsed.version !== item.version) {
+                throw new Error(`N8N_COMMUNITY_PACKAGES has conflicting versions for "${parsed.packageName}" at index ${index}: "${parsed.version}" in name vs "${item.version}" in version field`);
+            }
+            const name = parsed.packageName;
+            const version = item.version ?? parsed.version;
+            if (version !== undefined && !(0, community_packages_service_1.isValidVersionSpecifier)(version)) {
+                throw new Error(`N8N_COMMUNITY_PACKAGES has an invalid version "${version}" for package "${name}" at index ${index}`);
+            }
+            if (seenNames.has(name)) {
+                throw new Error(`N8N_COMMUNITY_PACKAGES has duplicate package name "${name}" at index ${index}`);
+            }
+            seenNames.add(name);
+            if (item.checksum !== undefined && version === undefined) {
+                throw new Error(`N8N_COMMUNITY_PACKAGES has a checksum but no version for package "${name}" at index ${index}: checksum requires a version`);
+            }
+            return { name, version, checksum: item.checksum };
+        });
+        return normalized;
+    }
+};
+exports.CommunityPackagesInstanceSettingsLoader = CommunityPackagesInstanceSettingsLoader;
+exports.CommunityPackagesInstanceSettingsLoader = CommunityPackagesInstanceSettingsLoader = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [config_1.InstanceSettingsLoaderConfig,
+        community_packages_config_1.CommunityPackagesConfig,
+        community_packages_service_1.CommunityPackagesService,
+        community_node_types_service_1.CommunityNodeTypesService,
+        db_1.WorkflowRepository,
+        backend_common_1.Logger])
+], CommunityPackagesInstanceSettingsLoader);
+const formatRef = (item) => item.version ? `'${item.name}@${item.version}'` : `'${item.name}'`;
+//# sourceMappingURL=community-packages.instance-settings-loader.js.map

package/dist/instance-settings-loader/loaders/community-packages.instance-settings-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"community-packages.instance-settings-loader.js","sourceRoot":"","sources":["../../../src/instance-settings-loader/loaders/community-packages.instance-settings-loader.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wDAA6C;AAC7C,wCAA2D;AAC3D,gCAA6C;AAC7C,gCAAkC;AAClC,+CAA2C;AAC3C,6BAAwB;AAExB,4GAAsG;AACtG,sGAAiG;AACjG,wGAGiE;AAGjE,kFAA6E;AAE7E,MAAM,gBAAgB,GAAG,OAAC;KACxB,MAAM,CAAC;IACP,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACtC,CAAC;KACD,MAAM,EAAE,CAAC;AAEX,MAAM,iBAAiB,GAAG,OAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAW7C,IAAM,uCAAuC,GAA7C,MAAM,uCAAuC;IACnD,YACkB,MAAoC,EACpC,uBAAgD,EAChD,wBAAkD,EAClD,yBAAoD,EACpD,kBAAsC,EAC/C,MAAc;QALL,WAAM,GAAN,MAAM,CAA8B;QACpC,4BAAuB,GAAvB,uBAAuB,CAAyB;QAChD,6BAAwB,GAAxB,wBAAwB,CAA0B;QAClD,8BAAyB,GAAzB,yBAAyB,CAA2B;QACpD,uBAAkB,GAAlB,kBAAkB,CAAoB;QAC/C,WAAM,GAAN,MAAM,CAAQ;QAEtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,GAAG;QACR,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,6BAA6B,EAAE,CAAC;YAChD,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,oFAAoF,CACpF,CAAC;YACF,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,CAAC;YAC3C,IAAI,CAAC,MAAM,CAAC,IAAI,CACf,wIAAwI,CACxI,CAAC;YACF,OAAO,SAAS,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CACf,mGAAmG,CACnG,CAAC;QAEF,IAAI,KAAmB,CAAC;QACxB,IAAI,CAAC;YACJ,KAAK,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAI,KAAe,CAAC,OAAO,IAAI,eAAe,CAAC;YAC5D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC3B,MAAM,IAAI,yDAA0B,CAAC,OAAO,CAAC,CAAC;QAC/C,CAAC;QAID,MAAM,QAAQ,GAAsB,EAAE,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YAC1B,QAAQ,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,uBAAuB,EAAE,CAAC;QAChF,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,uBAAuB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAE5F,IAAI,OAAO,GAAG,KAAK,CAAC;QAEpB,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACJ,MAAM,IAAI,CAAC,wBAAwB,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC3F,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gBAC5E,OAAO,GAAG,IAAI,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,uCAAuC,SAAS,CAAC,IAAI,CAAC,cAAc,IAAA,0BAAW,EAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAChG,CAAC;YACH,CAAC;QACF,CAAC;QAED,KAAK,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,QAAQ,EAAE,CAAC;YACrD,IAAI,CAAC;gBACJ,MAAM,IAAI,CAAC,wBAAwB,CAAC,aAAa,CAChD,GAAG,CAAC,IAAI,EACR,QAAQ,EACR,GAAG,CAAC,OAAO,EACX,GAAG,CAAC,QAAQ,CACZ,CAAC;gBACF,IAAI,CAAC,MAAM,CAAC,IAAI,CACf,8BAA8B,GAAG,CAAC,IAAI,UAAU,QAAQ,CAAC,gBAAgB,OAAO,GAAG,CAAC,OAAO,WAAW,CACtG,CAAC;gBACF,OAAO,GAAG,IAAI,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,uCAAuC,GAAG,CAAC,IAAI,QAAQ,GAAG,CAAC,OAAO,cAAc,IAAA,0BAAW,EAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAC5G,CAAC;YACH,CAAC;QACF,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC5B,MAAM,EAAE,WAAW,EAAE,GAAG,GAAG,CAAC;YAC5B,MAAM,kBAAkB,GAAG,GAAG,CAAC,cAAc,EAAE,MAAM,IAAI,CAAC,CAAC;YAC3D,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,+BAA+B,CAAC,GAAG,CAAC,CAAC;YAC1E,IAAI,CAAC;gBACJ,MAAM,IAAI,CAAC,wBAAwB,CAAC,aAAa,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;gBACpE,IAAI,CAAC,MAAM,CAAC,IAAI,CACf,8BAA8B,WAAW,UAAU,kBAAkB,oEAAoE,EACzI;oBACC,WAAW;oBACX,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;oBACtC,WAAW,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/C,iBAAiB,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC7E,CACD,CAAC;gBACF,OAAO,GAAG,IAAI,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,uCAAuC,WAAW,kCAAkC,IAAA,0BAAW,EAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAChH,CAAC;YACH,CAAC;QACF,CAAC;QAED,OAAO,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACxC,CAAC;IAEO,KAAK,CAAC,+BAA+B,CAC5C,GAAsB;QAEtB,MAAM,SAAS,GAAG,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACrE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAEtC,IAAI,CAAC;YACJ,OAAO,MAAM,IAAI,CAAC,kBAAkB,CAAC,yBAAyB,CAAC,SAAS,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CACf,4DAA4D,GAAG,CAAC,WAAW,kBAAkB,EAC7F,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,IAAA,0BAAW,EAAC,KAAK,CAAC,EAAE,CAC3D,CAAC;YACF,OAAO,EAAE,CAAC;QACX,CAAC;IACF,CAAC;IAEO,uBAAuB,CAAC,QAA2B,EAAE,SAA8B;QAC1F,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAE1D,MAAM,SAAS,GAAsB,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAkE,EAAE,CAAC;QACnF,MAAM,QAAQ,GAAwB,EAAE,CAAC;QAEzC,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACf,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtB,CAAC;iBAAM,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,QAAQ,CAAC,gBAAgB,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;gBACrF,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;YACnD,CAAC;QACF,CAAC;QAED,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;gBACxC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpB,CAAC;QACF,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IAC1C,CAAC;IAEO,KAAK,CAAC,yBAAyB,CAAC,IAAgB;QACvD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5E,CAAC;QAED,IAAI,MAAoE,CAAC;QACzE,IAAI,CAAC;YACJ,MAAM,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CACf,4DAA4D,IAAI,CAAC,IAAI,MAAM,IAAA,0BAAW,EAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CACvG,CAAC;QACH,CAAC;QAED,IAAI,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC;QACnC,IAAI,QAA4B,CAAC;QAEjC,IAAI,MAAM,EAAE,CAAC;YACZ,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAChC,eAAe,GAAG,MAAM,CAAC,UAAU,CAAC;gBACpC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;YAC5B,CAAC;iBAAM,IAAI,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC/C,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;YAC5B,CAAC;iBAAM,CAAC;gBACP,QAAQ,GAAG,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC;YACtF,CAAC;QACF,CAAC;QAED,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAAC,iBAAiB,EAAE,CAAC;YAClE,MAAM,GAAG,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,eAAe,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC;YACrF,MAAM,IAAI,yDAA0B,CACnC,qDAAqD,GAAG,uCAAuC,CAC/F,CAAC;QACH,CAAC;QAED,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,IAAI,CACf,sBAAsB,IAAI,CAAC,IAAI,wGAAwG,CACvI,CAAC;QACH,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC;IAChE,CAAC;IAEO,gBAAgB,CAAC,GAAW;QACnC,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAEpC,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,6CAA8C,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1F,CAAC;QAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACrC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,gDAAgD,IAAI,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5F,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC;QAC1B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;QAEpC,MAAM,UAAU,GAAiB,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YAC1D,IAAI,MAAM,CAAC;YACX,IAAI,CAAC;gBACJ,MAAM,GAAG,IAAI,CAAC,wBAAwB,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CACd,uDAAuD,IAAI,CAAC,IAAI,cAAc,KAAK,KAAM,KAAe,CAAC,OAAO,EAAE,CAClH,CAAC;YACH,CAAC;YAED,IACC,MAAM,CAAC,OAAO,KAAK,SAAS;gBAC5B,IAAI,CAAC,OAAO,KAAK,SAAS;gBAC1B,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,EAC9B,CAAC;gBACF,MAAM,IAAI,KAAK,CACd,wDAAwD,MAAM,CAAC,WAAW,cAAc,KAAK,MAAM,MAAM,CAAC,OAAO,iBAAiB,IAAI,CAAC,OAAO,oBAAoB,CAClK,CAAC;YACH,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC;YAChC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC;YAE/C,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,IAAA,oDAAuB,EAAC,OAAO,CAAC,EAAE,CAAC;gBAChE,MAAM,IAAI,KAAK,CACd,kDAAkD,OAAO,kBAAkB,IAAI,cAAc,KAAK,EAAE,CACpG,CAAC;YACH,CAAC;YAED,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CACd,sDAAsD,IAAI,cAAc,KAAK,EAAE,CAC/E,CAAC;YACH,CAAC;YACD,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAEpB,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1D,MAAM,IAAI,KAAK,CACd,qEAAqE,IAAI,cAAc,KAAK,+BAA+B,CAC3H,CAAC;YACH,CAAC;YAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACnD,CAAC,CAAC,CAAC;QAEH,OAAO,UAAU,CAAC;IACnB,CAAC;CACD,CAAA;AAxQY,0FAAuC;kDAAvC,uCAAuC;IADnD,IAAA,YAAO,GAAE;qCAGiB,qCAA4B;QACX,mDAAuB;QACtB,qDAAwB;QACvB,wDAAyB;QAChC,uBAAkB;QACvC,uBAAM;GAPX,uCAAuC,CAwQnD;AAED,MAAM,SAAS,GAAG,CAAC,IAAqB,EAAU,EAAE,CACnD,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC"}

package/dist/instance-settings-loader/loaders/{sso.instance-settings-loader.d.ts → sso/oidc.instance-settings-loader.d.ts}

@@ -2,19 +2,13 @@ import { Logger } from '@n8n/backend-common';
 import { InstanceSettingsLoaderConfig } from '@n8n/config';
 import { SettingsRepository } from '@n8n/db';
 import { Cipher } from 'n8n-core';
-export declare class SsoInstanceSettingsLoader {
+export declare class OidcInstanceSettingsLoader {
     private readonly config;
     private readonly settingsRepository;
     private readonly cipher;
     private logger;
     constructor(config: InstanceSettingsLoaderConfig, settingsRepository: SettingsRepository, cipher: Cipher, logger: Logger);
-    run(): Promise<'created' | 'skipped'>;
-    private applySamlConfig;
-    private applyOidcConfig;
-    private syncAuthMethod;
-    private writeSamlPreferences;
-    private writeSamlLoginDisabled;
-    private writeOidcPreferences;
-    private writeOidcLoginDisabled;
-    private writeProvisioning;
+    apply(): Promise<void>;
+    private writePreferences;
+    private writeLoginDisabled;
 }

package/dist/instance-settings-loader/loaders/sso/oidc.instance-settings-loader.js

@@ -0,0 +1,98 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OidcInstanceSettingsLoader = void 0;
+const api_types_1 = require("@n8n/api-types");
+const backend_common_1 = require("@n8n/backend-common");
+const config_1 = require("@n8n/config");
+const db_1 = require("@n8n/db");
+const di_1 = require("@n8n/di");
+const n8n_core_1 = require("n8n-core");
+const zod_1 = require("zod");
+const constants_1 = require("../../../modules/sso-oidc/constants");
+const instance_bootstrapping_error_1 = require("../../instance-bootstrapping.error");
+const oidcEnvSchema = zod_1.z
+    .object({
+    oidcClientId: zod_1.z
+        .string()
+        .min(1, 'N8N_SSO_OIDC_CLIENT_ID is required when configuring OIDC via environment variables'),
+    oidcClientSecret: zod_1.z
+        .string()
+        .min(1, 'N8N_SSO_OIDC_CLIENT_SECRET is required when configuring OIDC via environment variables'),
+    oidcDiscoveryEndpoint: zod_1.z.string().url('N8N_SSO_OIDC_DISCOVERY_ENDPOINT must be a valid URL'),
+    oidcLoginEnabled: zod_1.z.boolean(),
+    oidcPrompt: zod_1.z.enum(api_types_1.OIDC_PROMPT_VALUES, {
+        errorMap: () => ({
+            message: `N8N_SSO_OIDC_PROMPT must be one of: ${api_types_1.OIDC_PROMPT_VALUES.join(', ')}`,
+        }),
+    }),
+    oidcAcrValues: zod_1.z.string(),
+})
+    .transform((input) => ({
+    clientId: input.oidcClientId,
+    clientSecret: input.oidcClientSecret,
+    discoveryEndpoint: input.oidcDiscoveryEndpoint,
+    loginEnabled: input.oidcLoginEnabled,
+    prompt: input.oidcPrompt,
+    authenticationContextClassReference: input.oidcAcrValues
+        ? input.oidcAcrValues
+            .split(',')
+            .map((v) => v.trim())
+            .filter(Boolean)
+        : [],
+}));
+let OidcInstanceSettingsLoader = class OidcInstanceSettingsLoader {
+    constructor(config, settingsRepository, cipher, logger) {
+        this.config = config;
+        this.settingsRepository = settingsRepository;
+        this.cipher = cipher;
+        this.logger = logger;
+        this.logger = this.logger.scoped('instance-settings-loader');
+    }
+    async apply() {
+        if (!this.config.oidcLoginEnabled) {
+            await this.writeLoginDisabled();
+            return;
+        }
+        this.logger.info('OIDC login is enabled — applying OIDC SSO env vars');
+        const parsed = oidcEnvSchema.safeParse(this.config);
+        if (!parsed.success) {
+            throw new instance_bootstrapping_error_1.InstanceBootstrappingError(parsed.error.issues[0].message);
+        }
+        await this.writePreferences(parsed.data);
+    }
+    async writePreferences(preferences) {
+        await this.settingsRepository.upsert({
+            key: constants_1.OIDC_PREFERENCES_DB_KEY,
+            value: JSON.stringify({
+                ...preferences,
+                clientSecret: await this.cipher.encryptV2(preferences.clientSecret),
+            }),
+            loadOnStartup: true,
+        }, { conflictPaths: ['key'] });
+    }
+    async writeLoginDisabled() {
+        await this.settingsRepository.upsert({
+            key: constants_1.OIDC_PREFERENCES_DB_KEY,
+            value: JSON.stringify({ loginEnabled: false }),
+            loadOnStartup: true,
+        }, { conflictPaths: ['key'] });
+    }
+};
+exports.OidcInstanceSettingsLoader = OidcInstanceSettingsLoader;
+exports.OidcInstanceSettingsLoader = OidcInstanceSettingsLoader = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [config_1.InstanceSettingsLoaderConfig,
+        db_1.SettingsRepository,
+        n8n_core_1.Cipher,
+        backend_common_1.Logger])
+], OidcInstanceSettingsLoader);
+//# sourceMappingURL=oidc.instance-settings-loader.js.map

package/dist/instance-settings-loader/loaders/sso/oidc.instance-settings-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc.instance-settings-loader.js","sourceRoot":"","sources":["../../../../src/instance-settings-loader/loaders/sso/oidc.instance-settings-loader.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,8CAAoD;AACpD,wDAA6C;AAC7C,wCAA2D;AAC3D,gCAA6C;AAC7C,gCAAkC;AAClC,uCAAkC;AAClC,6BAAwB;AAExB,4DAAuE;AAEvE,qFAAgF;AAEhF,MAAM,aAAa,GAAG,OAAC;KACrB,MAAM,CAAC;IACP,YAAY,EAAE,OAAC;SACb,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,EAAE,oFAAoF,CAAC;IAC9F,gBAAgB,EAAE,OAAC;SACjB,MAAM,EAAE;SACR,GAAG,CACH,CAAC,EACD,wFAAwF,CACxF;IACF,qBAAqB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,qDAAqD,CAAC;IAC5F,gBAAgB,EAAE,OAAC,CAAC,OAAO,EAAE;IAC7B,UAAU,EAAE,OAAC,CAAC,IAAI,CAAC,8BAAkB,EAAE;QACtC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;YAChB,OAAO,EAAE,uCAAuC,8BAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC/E,CAAC;KACF,CAAC;IACF,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE;CACzB,CAAC;KACD,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACtB,QAAQ,EAAE,KAAK,CAAC,YAAY;IAC5B,YAAY,EAAE,KAAK,CAAC,gBAAgB;IACpC,iBAAiB,EAAE,KAAK,CAAC,qBAAqB;IAC9C,YAAY,EAAE,KAAK,CAAC,gBAAgB;IACpC,MAAM,EAAE,KAAK,CAAC,UAAU;IACxB,mCAAmC,EAAE,KAAK,CAAC,aAAa;QACvD,CAAC,CAAC,KAAK,CAAC,aAAa;aAClB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC;QAClB,CAAC,CAAC,EAAE;CACL,CAAC,CAAC,CAAC;AAGE,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IACtC,YACkB,MAAoC,EACpC,kBAAsC,EACtC,MAAc,EACvB,MAAc;QAHL,WAAM,GAAN,MAAM,CAA8B;QACpC,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,WAAM,GAAN,MAAM,CAAQ;QACvB,WAAM,GAAN,MAAM,CAAQ;QAEtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,KAAK;QACV,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAChC,OAAO;QACR,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,IAAI,yDAA0B,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,WAG9B;QACA,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CACnC;YACC,GAAG,EAAE,mCAAuB;YAC5B,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC;gBACrB,GAAG,WAAW;gBACd,YAAY,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,YAAY,CAAC;aACnE,CAAC;YACF,aAAa,EAAE,IAAI;SACnB,EACD,EAAE,aAAa,EAAE,CAAC,KAAK,CAAC,EAAE,CAC1B,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,kBAAkB;QAC/B,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CACnC;YACC,GAAG,EAAE,mCAAuB;YAC5B,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;YAC9C,aAAa,EAAE,IAAI;SACnB,EACD,EAAE,aAAa,EAAE,CAAC,KAAK,CAAC,EAAE,CAC1B,CAAC;IACH,CAAC;CACD,CAAA;AAnDY,gEAA0B;qCAA1B,0BAA0B;IADtC,IAAA,YAAO,GAAE;qCAGiB,qCAA4B;QAChB,uBAAkB;QAC9B,iBAAM;QACf,uBAAM;GALX,0BAA0B,CAmDtC"}

package/dist/instance-settings-loader/loaders/sso/provisioning.instance-settings-loader.d.ts

@@ -0,0 +1,10 @@
+import { Logger } from '@n8n/backend-common';
+import { InstanceSettingsLoaderConfig } from '@n8n/config';
+import { SettingsRepository } from '@n8n/db';
+export declare class ProvisioningInstanceSettingsLoader {
+    private readonly config;
+    private readonly settingsRepository;
+    private logger;
+    constructor(config: InstanceSettingsLoaderConfig, settingsRepository: SettingsRepository, logger: Logger);
+    apply(): Promise<void>;
+}

package/dist/instance-settings-loader/loaders/sso/provisioning.instance-settings-loader.js

@@ -0,0 +1,65 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ProvisioningInstanceSettingsLoader = void 0;
+const backend_common_1 = require("@n8n/backend-common");
+const config_1 = require("@n8n/config");
+const db_1 = require("@n8n/db");
+const di_1 = require("@n8n/di");
+const zod_1 = require("zod");
+const constants_1 = require("../../../modules/provisioning.ee/constants");
+const instance_bootstrapping_error_1 = require("../../instance-bootstrapping.error");
+const ENV_PROVISIONING_MODES = [
+    'disabled',
+    'instance_role',
+    'instance_and_project_roles',
+];
+const provisioningSchema = zod_1.z
+    .object({
+    ssoUserRoleProvisioning: zod_1.z.enum(ENV_PROVISIONING_MODES, {
+        errorMap: () => ({
+            message: `N8N_SSO_USER_ROLE_PROVISIONING must be one of: ${ENV_PROVISIONING_MODES.join(', ')}`,
+        }),
+    }),
+})
+    .transform((input) => ({
+    scopesProvisionInstanceRole: input.ssoUserRoleProvisioning === 'instance_role' ||
+        input.ssoUserRoleProvisioning === 'instance_and_project_roles',
+    scopesProvisionProjectRoles: input.ssoUserRoleProvisioning === 'instance_and_project_roles',
+    scopesUseExpressionMapping: false,
+}));
+let ProvisioningInstanceSettingsLoader = class ProvisioningInstanceSettingsLoader {
+    constructor(config, settingsRepository, logger) {
+        this.config = config;
+        this.settingsRepository = settingsRepository;
+        this.logger = logger;
+        this.logger = this.logger.scoped('instance-settings-loader');
+    }
+    async apply() {
+        const parsed = provisioningSchema.safeParse(this.config);
+        if (!parsed.success) {
+            throw new instance_bootstrapping_error_1.InstanceBootstrappingError(parsed.error.issues[0].message);
+        }
+        await this.settingsRepository.upsert({
+            key: constants_1.PROVISIONING_PREFERENCES_DB_KEY,
+            value: JSON.stringify(parsed.data),
+            loadOnStartup: true,
+        }, { conflictPaths: ['key'] });
+    }
+};
+exports.ProvisioningInstanceSettingsLoader = ProvisioningInstanceSettingsLoader;
+exports.ProvisioningInstanceSettingsLoader = ProvisioningInstanceSettingsLoader = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [config_1.InstanceSettingsLoaderConfig,
+        db_1.SettingsRepository,
+        backend_common_1.Logger])
+], ProvisioningInstanceSettingsLoader);
+//# sourceMappingURL=provisioning.instance-settings-loader.js.map

package/dist/instance-settings-loader/loaders/sso/provisioning.instance-settings-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provisioning.instance-settings-loader.js","sourceRoot":"","sources":["../../../../src/instance-settings-loader/loaders/sso/provisioning.instance-settings-loader.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,wDAA6C;AAC7C,wCAA2D;AAC3D,gCAA6C;AAC7C,gCAAkC;AAClC,6BAAwB;AAExB,mEAAsF;AAEtF,qFAAgF;AAEhF,MAAM,sBAAsB,GAAG;IAC9B,UAAU;IACV,eAAe;IACf,4BAA4B;CACmB,CAAC;AAEjD,MAAM,kBAAkB,GAAG,OAAC;KAC1B,MAAM,CAAC;IACP,uBAAuB,EAAE,OAAC,CAAC,IAAI,CAAC,sBAAsB,EAAE;QACvD,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;YAChB,OAAO,EAAE,kDAAkD,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SAC9F,CAAC;KACF,CAAC;CACF,CAAC;KACD,SAAS,CACT,CAAC,KAAK,EAAyB,EAAE,CAAC,CAAC;IAClC,2BAA2B,EAC1B,KAAK,CAAC,uBAAuB,KAAK,eAAe;QACjD,KAAK,CAAC,uBAAuB,KAAK,4BAA4B;IAC/D,2BAA2B,EAAE,KAAK,CAAC,uBAAuB,KAAK,4BAA4B;IAC3F,0BAA0B,EAAE,KAAK;CACjC,CAAC,CACF,CAAC;AAGI,IAAM,kCAAkC,GAAxC,MAAM,kCAAkC;IAC9C,YACkB,MAAoC,EACpC,kBAAsC,EAC/C,MAAc;QAFL,WAAM,GAAN,MAAM,CAA8B;QACpC,uBAAkB,GAAlB,kBAAkB,CAAoB;QAC/C,WAAM,GAAN,MAAM,CAAQ;QAEtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,KAAK;QACV,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,IAAI,yDAA0B,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACtE,CAAC;QAED,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CACnC;YACC,GAAG,EAAE,2CAA+B;YACpC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;YAClC,aAAa,EAAE,IAAI;SACnB,EACD,EAAE,aAAa,EAAE,CAAC,KAAK,CAAC,EAAE,CAC1B,CAAC;IACH,CAAC;CACD,CAAA;AAxBY,gFAAkC;6CAAlC,kCAAkC;IAD9C,IAAA,YAAO,GAAE;qCAGiB,qCAA4B;QAChB,uBAAkB;QACvC,uBAAM;GAJX,kCAAkC,CAwB9C"}

package/dist/instance-settings-loader/loaders/sso/saml.instance-settings-loader.d.ts

@@ -0,0 +1,12 @@
+import { Logger } from '@n8n/backend-common';
+import { InstanceSettingsLoaderConfig } from '@n8n/config';
+import { SettingsRepository } from '@n8n/db';
+export declare class SamlInstanceSettingsLoader {
+    private readonly config;
+    private readonly settingsRepository;
+    private logger;
+    constructor(config: InstanceSettingsLoaderConfig, settingsRepository: SettingsRepository, logger: Logger);
+    apply(): Promise<void>;
+    private writePreferences;
+    private writeLoginDisabled;
+}

package/dist/instance-settings-loader/loaders/sso/saml.instance-settings-loader.js

@@ -0,0 +1,75 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SamlInstanceSettingsLoader = void 0;
+const backend_common_1 = require("@n8n/backend-common");
+const config_1 = require("@n8n/config");
+const db_1 = require("@n8n/db");
+const di_1 = require("@n8n/di");
+const zod_1 = require("zod");
+const constants_1 = require("../../../modules/sso-saml/constants");
+const instance_bootstrapping_error_1 = require("../../instance-bootstrapping.error");
+const samlEnvSchema = zod_1.z
+    .object({
+    samlMetadata: zod_1.z.string(),
+    samlMetadataUrl: zod_1.z.string(),
+    samlLoginEnabled: zod_1.z.boolean(),
+})
+    .refine((data) => data.samlMetadata || data.samlMetadataUrl, {
+    message: 'At least one of N8N_SSO_SAML_METADATA or N8N_SSO_SAML_METADATA_URL is required when configuring SAML via environment variables',
+})
+    .transform(({ samlMetadata, samlMetadataUrl, samlLoginEnabled }) => ({
+    ...(samlMetadata ? { metadata: samlMetadata } : {}),
+    ...(samlMetadataUrl ? { metadataUrl: samlMetadataUrl } : {}),
+    loginEnabled: samlLoginEnabled,
+}));
+let SamlInstanceSettingsLoader = class SamlInstanceSettingsLoader {
+    constructor(config, settingsRepository, logger) {
+        this.config = config;
+        this.settingsRepository = settingsRepository;
+        this.logger = logger;
+        this.logger = this.logger.scoped('instance-settings-loader');
+    }
+    async apply() {
+        if (!this.config.samlLoginEnabled) {
+            await this.writeLoginDisabled();
+            return;
+        }
+        this.logger.info('SAML login is enabled — applying SAML SSO env vars');
+        const parsed = samlEnvSchema.safeParse(this.config);
+        if (!parsed.success) {
+            throw new instance_bootstrapping_error_1.InstanceBootstrappingError(parsed.error.issues[0].message);
+        }
+        await this.writePreferences(parsed.data);
+    }
+    async writePreferences(preferences) {
+        await this.settingsRepository.save({
+            key: constants_1.SAML_PREFERENCES_DB_KEY,
+            value: JSON.stringify(preferences),
+            loadOnStartup: true,
+        });
+    }
+    async writeLoginDisabled() {
+        await this.settingsRepository.save({
+            key: constants_1.SAML_PREFERENCES_DB_KEY,
+            value: JSON.stringify({ loginEnabled: false }),
+            loadOnStartup: true,
+        });
+    }
+};
+exports.SamlInstanceSettingsLoader = SamlInstanceSettingsLoader;
+exports.SamlInstanceSettingsLoader = SamlInstanceSettingsLoader = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [config_1.InstanceSettingsLoaderConfig,
+        db_1.SettingsRepository,
+        backend_common_1.Logger])
+], SamlInstanceSettingsLoader);
+//# sourceMappingURL=saml.instance-settings-loader.js.map

package/dist/instance-settings-loader/loaders/sso/saml.instance-settings-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"saml.instance-settings-loader.js","sourceRoot":"","sources":["../../../../src/instance-settings-loader/loaders/sso/saml.instance-settings-loader.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wDAA6C;AAC7C,wCAA2D;AAC3D,gCAA6C;AAC7C,gCAAkC;AAClC,6BAAwB;AAExB,4DAAuE;AAEvE,qFAAgF;AAEhF,MAAM,aAAa,GAAG,OAAC;KACrB,MAAM,CAAC;IACP,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE;IACxB,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE;IAC3B,gBAAgB,EAAE,OAAC,CAAC,OAAO,EAAE;CAC7B,CAAC;KACD,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,eAAe,EAAE;IAC5D,OAAO,EACN,gIAAgI;CACjI,CAAC;KACD,SAAS,CAAC,CAAC,EAAE,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,CAAC;IACpE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,YAAY,EAAE,gBAAgB;CAC9B,CAAC,CAAC,CAAC;AAGE,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IACtC,YACkB,MAAoC,EACpC,kBAAsC,EAC/C,MAAc;QAFL,WAAM,GAAN,MAAM,CAA8B;QACpC,uBAAkB,GAAlB,kBAAkB,CAAoB;QAC/C,WAAM,GAAN,MAAM,CAAQ;QAEtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,KAAK;QACV,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACnC,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAChC,OAAO;QACR,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,IAAI,yDAA0B,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,WAAoC;QAClE,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;YAClC,GAAG,EAAE,mCAAuB;YAC5B,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;YAClC,aAAa,EAAE,IAAI;SACnB,CAAC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,kBAAkB;QAC/B,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;YAClC,GAAG,EAAE,mCAAuB;YAC5B,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;YAC9C,aAAa,EAAE,IAAI;SACnB,CAAC,CAAC;IACJ,CAAC;CACD,CAAA;AAtCY,gEAA0B;qCAA1B,0BAA0B;IADtC,IAAA,YAAO,GAAE;qCAGiB,qCAA4B;QAChB,uBAAkB;QACvC,uBAAM;GAJX,0BAA0B,CAsCtC"}