n8n 2.25.6 → 2.26.1

package/dist/modules/instance-ai/eval/sub-agent-roles.js

@@ -1,21 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SUB_AGENT_ROLES = void 0;
-exports.resolveSubAgentRole = resolveSubAgentRole;
-const instance_ai_1 = require("@n8n/instance-ai");
-exports.SUB_AGENT_ROLES = {
-    builder: {
-        systemPrompt: instance_ai_1.BUILDER_AGENT_PROMPT,
-        label: 'builder',
-        defaultMaxSteps: instance_ai_1.MAX_STEPS.BUILDER,
-    },
-};
-function resolveSubAgentRole(role) {
-    const config = exports.SUB_AGENT_ROLES[role];
-    if (!config) {
-        const available = Object.keys(exports.SUB_AGENT_ROLES).join(', ');
-        throw new Error(`Unknown sub-agent role "${role}". Available: ${available}`);
-    }
-    return config;
-}
-//# sourceMappingURL=sub-agent-roles.js.map

package/dist/modules/instance-ai/eval/sub-agent-roles.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sub-agent-roles.js","sourceRoot":"","sources":["../../../../src/modules/instance-ai/eval/sub-agent-roles.ts"],"names":[],"mappings":";;;AA2BA,kDAOC;AAlCD,kDAAmE;AAmBtD,QAAA,eAAe,GAAuC;IAClE,OAAO,EAAE;QACR,YAAY,EAAE,kCAAoB;QAClC,KAAK,EAAE,SAAS;QAChB,eAAe,EAAE,uBAAS,CAAC,OAAO;KAClC;CACD,CAAC;AAEF,SAAgB,mBAAmB,CAAC,IAAY;IAC/C,MAAM,MAAM,GAAG,uBAAe,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,uBAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,iBAAiB,SAAS,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/modules/mcp/tools/workflow-builder/get-suggested-workflow-nodes.tool.d.ts

@@ -1,10 +0,0 @@
-import type { User } from '@n8n/db';
-import z from 'zod';
-import type { ToolDefinition } from '../../mcp.types';
-import type { NodeCatalogService } from '../../../../node-catalog';
-import type { Telemetry } from '../../../../telemetry';
-declare const inputSchema: {
-    categories: z.ZodArray<z.ZodString, "many">;
-};
-export declare const createGetSuggestedWorkflowNodesTool: (user: User, nodeCatalogService: NodeCatalogService, telemetry: Telemetry) => ToolDefinition<typeof inputSchema>;
-export {};

package/dist/modules/mcp/tools/workflow-builder/get-suggested-workflow-nodes.tool.js

@@ -1,64 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createGetSuggestedWorkflowNodesTool = void 0;
-const zod_1 = __importDefault(require("zod"));
-const mcp_constants_1 = require("../../mcp.constants");
-const constants_1 = require("./constants");
-const inputSchema = {
-    categories: zod_1.default
-        .array(zod_1.default.string())
-        .min(1)
-        .describe('Workflow technique categories. Available: chatbot, notification, scheduling, data_transformation, data_persistence, data_extraction, document_processing, form_input, content_generation, triage, scraping_and_research'),
-};
-const outputSchema = {
-    suggestions: zod_1.default
-        .string()
-        .describe('Curated node recommendations with pattern hints and configuration guidance'),
-};
-const createGetSuggestedWorkflowNodesTool = (user, nodeCatalogService, telemetry) => ({
-    name: constants_1.CODE_BUILDER_GET_SUGGESTED_NODES_TOOL.toolName,
-    config: {
-        description: 'Required workflow-planning step. Get curated node recommendations for workflow technique categories before searching for nodes or writing code. Returns recommended nodes with pattern hints and configuration guidance.',
-        inputSchema,
-        outputSchema,
-        annotations: {
-            title: constants_1.CODE_BUILDER_GET_SUGGESTED_NODES_TOOL.displayTitle,
-            readOnlyHint: true,
-            destructiveHint: false,
-            idempotentHint: true,
-            openWorldHint: false,
-        },
-    },
-    handler: async ({ categories }) => {
-        const telemetryPayload = {
-            user_id: user.id,
-            tool_name: constants_1.CODE_BUILDER_GET_SUGGESTED_NODES_TOOL.toolName,
-            parameters: { categories },
-        };
-        try {
-            const result = await nodeCatalogService.getSuggestedNodes(categories);
-            telemetryPayload.results = {
-                success: true,
-                data: { categoryCount: categories.length },
-            };
-            telemetry.track(mcp_constants_1.USER_CALLED_MCP_TOOL_EVENT, telemetryPayload);
-            return {
-                content: [{ type: 'text', text: result }],
-                structuredContent: { suggestions: result },
-            };
-        }
-        catch (error) {
-            telemetryPayload.results = {
-                success: false,
-                error: error instanceof Error ? error.message : String(error),
-            };
-            telemetry.track(mcp_constants_1.USER_CALLED_MCP_TOOL_EVENT, telemetryPayload);
-            throw error;
-        }
-    },
-});
-exports.createGetSuggestedWorkflowNodesTool = createGetSuggestedWorkflowNodesTool;
-//# sourceMappingURL=get-suggested-workflow-nodes.tool.js.map

package/dist/modules/mcp/tools/workflow-builder/get-suggested-workflow-nodes.tool.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"get-suggested-workflow-nodes.tool.js","sourceRoot":"","sources":["../../../../../src/modules/mcp/tools/workflow-builder/get-suggested-workflow-nodes.tool.ts"],"names":[],"mappings":";;;;;;AACA,8CAAoB;AAEpB,uDAAiE;AAMjE,2CAAoE;AAEpE,MAAM,WAAW,GAAG;IACnB,UAAU,EAAE,aAAC;SACX,KAAK,CAAC,aAAC,CAAC,MAAM,EAAE,CAAC;SACjB,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CACR,yNAAyN,CACzN;CACsB,CAAC;AAE1B,MAAM,YAAY,GAAG;IACpB,WAAW,EAAE,aAAC;SACZ,MAAM,EAAE;SACR,QAAQ,CAAC,4EAA4E,CAAC;CAChE,CAAC;AAKnB,MAAM,mCAAmC,GAAG,CAClD,IAAU,EACV,kBAAsC,EACtC,SAAoB,EACiB,EAAE,CAAC,CAAC;IACzC,IAAI,EAAE,iDAAqC,CAAC,QAAQ;IACpD,MAAM,EAAE;QACP,WAAW,EACV,0NAA0N;QAC3N,WAAW;QACX,YAAY;QACZ,WAAW,EAAE;YACZ,KAAK,EAAE,iDAAqC,CAAC,YAAY;YACzD,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,KAAK;SACpB;KACD;IACD,OAAO,EAAE,KAAK,EAAE,EAAE,UAAU,EAA4B,EAAE,EAAE;QAC3D,MAAM,gBAAgB,GAAkC;YACvD,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,SAAS,EAAE,iDAAqC,CAAC,QAAQ;YACzD,UAAU,EAAE,EAAE,UAAU,EAAE;SAC1B,CAAC;QAEF,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC;YAEtE,gBAAgB,CAAC,OAAO,GAAG;gBAC1B,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,EAAE,aAAa,EAAE,UAAU,CAAC,MAAM,EAAE;aAC1C,CAAC;YACF,SAAS,CAAC,KAAK,CAAC,0CAA0B,EAAE,gBAAgB,CAAC,CAAC;YAE9D,OAAO;gBACN,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;gBACzC,iBAAiB,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE;aAC1C,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,gBAAgB,CAAC,OAAO,GAAG;gBAC1B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC7D,CAAC;YACF,SAAS,CAAC,KAAK,CAAC,0CAA0B,EAAE,gBAAgB,CAAC,CAAC;YAC9D,MAAM,KAAK,CAAC;QACb,CAAC;IACF,CAAC;CACD,CAAC,CAAC;AAhDU,QAAA,mCAAmC,uCAgD7C"}

package/dist/modules/redaction/redaction.config.d.ts

@@ -1,3 +0,0 @@
-export declare class RedactionConfig {
-    enforcement: boolean;
-}

package/dist/modules/redaction/redaction.config.js

@@ -1,27 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.RedactionConfig = void 0;
-const config_1 = require("@n8n/config");
-let RedactionConfig = class RedactionConfig {
-    constructor() {
-        this.enforcement = false;
-    }
-};
-exports.RedactionConfig = RedactionConfig;
-__decorate([
-    (0, config_1.Env)('N8N_ENV_FEAT_REDACTION_ENFORCEMENT'),
-    __metadata("design:type", Boolean)
-], RedactionConfig.prototype, "enforcement", void 0);
-exports.RedactionConfig = RedactionConfig = __decorate([
-    config_1.Config
-], RedactionConfig);
-//# sourceMappingURL=redaction.config.js.map

package/dist/modules/redaction/redaction.config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"redaction.config.js","sourceRoot":"","sources":["../../../src/modules/redaction/redaction.config.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAA0C;AAGnC,IAAM,eAAe,GAArB,MAAM,eAAe;IAArB;QAGN,gBAAW,GAAY,KAAK,CAAC;IAC9B,CAAC;CAAA,CAAA;AAJY,0CAAe;AAG3B;IADC,IAAA,YAAG,EAAC,oCAAoC,CAAC;;oDACb;0BAHjB,eAAe;IAD3B,eAAM;GACM,eAAe,CAI3B"}

package/dist/services/ssrf/dns-resolver.d.ts

@@ -1,13 +0,0 @@
-import type { LookupAddress, LookupOptions } from 'node:dns';
-import { InMemoryDnsCache } from './in-memory-dns-cache.service';
-export type DnsLookupOptions = Pick<LookupOptions, 'all' | 'family' | 'order' | 'verbatim' | 'hints'>;
-export declare class DnsResolver {
-    private readonly dnsCache;
-    private readonly inFlightByCacheKey;
-    constructor(dnsCache: InMemoryDnsCache);
-    lookup(hostname: string, options?: DnsLookupOptions): Promise<LookupAddress[]>;
-    private doLookup;
-    private buildCacheKey;
-    private normalizeOptions;
-    private normalizeIpFamily;
-}

package/dist/services/ssrf/dns-resolver.js

@@ -1,93 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DnsResolver = void 0;
-const di_1 = require("@n8n/di");
-const node_dns_1 = require("node:dns");
-const in_memory_dns_cache_service_1 = require("./in-memory-dns-cache.service");
-const LOOKUP_CACHE_TTL_SECONDS = 1;
-let DnsResolver = class DnsResolver {
-    constructor(dnsCache) {
-        this.dnsCache = dnsCache;
-        this.inFlightByCacheKey = new Map();
-    }
-    async lookup(hostname, options = {}) {
-        const normalized = this.normalizeOptions(options);
-        const cacheKey = this.buildCacheKey(hostname, normalized);
-        const cached = await this.dnsCache.get(cacheKey);
-        if (cached)
-            return cached;
-        const existing = this.inFlightByCacheKey.get(cacheKey);
-        if (existing)
-            return await existing;
-        const lookupPromise = (async () => {
-            const addresses = await this.doLookup(hostname, normalized);
-            if (addresses.length > 0) {
-                await this.dnsCache.set(cacheKey, addresses, LOOKUP_CACHE_TTL_SECONDS);
-            }
-            return addresses;
-        })();
-        this.inFlightByCacheKey.set(cacheKey, lookupPromise);
-        return await lookupPromise.finally(() => {
-            this.inFlightByCacheKey.delete(cacheKey);
-        });
-    }
-    async doLookup(hostname, options) {
-        if (options.all) {
-            const records = await node_dns_1.promises.lookup(hostname, {
-                all: true,
-                family: options.family,
-                order: options.order,
-                verbatim: options.verbatim,
-                hints: options.hints,
-            });
-            return records;
-        }
-        const record = await node_dns_1.promises.lookup(hostname, {
-            all: false,
-            family: options.family,
-            order: options.order,
-            verbatim: options.verbatim,
-            hints: options.hints,
-        });
-        return [record];
-    }
-    buildCacheKey(hostname, options) {
-        const order = options.order ?? '-';
-        const verbatim = options.verbatim === undefined ? '-' : options.verbatim ? '1' : '0';
-        return `${hostname}|a:${options.all ? '1' : '0'}|f:${options.family}|o:${order}|v:${verbatim}|h:${options.hints ?? 0}`;
-    }
-    normalizeOptions(options) {
-        const all = options.all === true;
-        const family = this.normalizeIpFamily(options.family);
-        const order = options.order;
-        const verbatim = options.verbatim;
-        return { all, family, order, verbatim, hints: options.hints };
-    }
-    normalizeIpFamily(family) {
-        if (family === 4 || family === 6 || family === 0) {
-            return family;
-        }
-        if (family === 'IPv4') {
-            return 4;
-        }
-        if (family === 'IPv6') {
-            return 6;
-        }
-        return 0;
-    }
-};
-exports.DnsResolver = DnsResolver;
-exports.DnsResolver = DnsResolver = __decorate([
-    (0, di_1.Service)(),
-    __metadata("design:paramtypes", [in_memory_dns_cache_service_1.InMemoryDnsCache])
-], DnsResolver);
-//# sourceMappingURL=dns-resolver.js.map

package/dist/services/ssrf/dns-resolver.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"dns-resolver.js","sourceRoot":"","sources":["../../../src/services/ssrf/dns-resolver.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gCAAkC;AAClC,uCAA2C;AAG3C,+EAAiE;AAgBjE,MAAM,wBAAwB,GAAG,CAAC,CAAC;AAY5B,IAAM,WAAW,GAAjB,MAAM,WAAW;IAGvB,YAA6B,QAA0B;QAA1B,aAAQ,GAAR,QAAQ,CAAkB;QAFtC,uBAAkB,GAAG,IAAI,GAAG,EAAoC,CAAC;IAExB,CAAC;IAK3D,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,UAA4B,EAAE;QAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAE1D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAE1B,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvD,IAAI,QAAQ;YAAE,OAAO,MAAM,QAAQ,CAAC;QAEpC,MAAM,aAAa,GAAG,CAAC,KAAK,IAAI,EAAE;YACjC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC5D,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,wBAAwB,CAAC,CAAC;YACxE,CAAC;YAED,OAAO,SAAS,CAAC;QAClB,CAAC,CAAC,EAAE,CAAC;QAEL,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QAErD,OAAO,MAAM,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE;YACvC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,QAAQ,CACrB,QAAgB,EAChB,OAAgC;QAEhC,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,MAAM,mBAAG,CAAC,MAAM,CAAC,QAAQ,EAAE;gBAC1C,GAAG,EAAE,IAAI;gBACT,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;aACpB,CAAC,CAAC;YACH,OAAO,OAAO,CAAC;QAChB,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,mBAAG,CAAC,MAAM,CAAC,QAAQ,EAAE;YACzC,GAAG,EAAE,KAAK;YACV,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;SACpB,CAAC,CAAC;QAEH,OAAO,CAAC,MAAM,CAAC,CAAC;IACjB,CAAC;IAEO,aAAa,CAAC,QAAgB,EAAE,OAAgC;QACvE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,GAAG,CAAC;QACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QACrF,OAAO,GAAG,QAAQ,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,OAAO,CAAC,MAAM,MAAM,KAAK,MAAM,QAAQ,MAAM,OAAO,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;IACxH,CAAC;IAEO,gBAAgB,CAAC,OAAyB;QACjD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;IAC/D,CAAC;IAEO,iBAAiB,CAAC,MAAkC;QAC3D,IAAI,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;YAClD,OAAO,MAAM,CAAC;QACf,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACvB,OAAO,CAAC,CAAC;QACV,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACvB,OAAO,CAAC,CAAC;QACV,CAAC;QACD,OAAO,CAAC,CAAC;IACV,CAAC;CACD,CAAA;AAtFY,kCAAW;sBAAX,WAAW;IADvB,IAAA,YAAO,GAAE;qCAI8B,8CAAgB;GAH3C,WAAW,CAsFvB"}

package/dist/services/ssrf/hostname-matcher.d.ts

@@ -1,6 +0,0 @@
-export declare class HostnameMatcher {
-    private readonly parsed;
-    constructor(patterns: readonly string[]);
-    matches(hostname: string): boolean;
-    private normalizeHostname;
-}

package/dist/services/ssrf/hostname-matcher.js

@@ -1,38 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.HostnameMatcher = void 0;
-class HostnameMatcher {
-    constructor(patterns) {
-        this.parsed = patterns
-            .map((p) => this.normalizeHostname(p))
-            .filter(Boolean)
-            .map((value) => {
-            if (value.startsWith('*.')) {
-                const suffix = value.slice(1);
-                return { isWildcard: true, suffix };
-            }
-            return { isWildcard: false, value };
-        });
-    }
-    matches(hostname) {
-        const normalizedHostname = this.normalizeHostname(hostname);
-        for (const pattern of this.parsed) {
-            if (pattern.isWildcard) {
-                if (normalizedHostname.endsWith(pattern.suffix) &&
-                    normalizedHostname.length > pattern.suffix.length) {
-                    return true;
-                }
-                continue;
-            }
-            if (normalizedHostname === pattern.value) {
-                return true;
-            }
-        }
-        return false;
-    }
-    normalizeHostname(hostname) {
-        return hostname.trim().toLowerCase();
-    }
-}
-exports.HostnameMatcher = HostnameMatcher;
-//# sourceMappingURL=hostname-matcher.js.map

package/dist/services/ssrf/hostname-matcher.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"hostname-matcher.js","sourceRoot":"","sources":["../../../src/services/ssrf/hostname-matcher.ts"],"names":[],"mappings":";;;AAiBA,MAAa,eAAe;IAG3B,YAAY,QAA2B;QACtC,IAAI,CAAC,MAAM,GAAG,QAAQ;aACpB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;aACrC,MAAM,CAAC,OAAO,CAAC;aACf,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACd,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC9B,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;YACrC,CAAC;YACD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC;IAKD,OAAO,CAAC,QAAgB;QACvB,MAAM,kBAAkB,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAE5D,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACnC,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;gBAGxB,IACC,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;oBAC3C,kBAAkB,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAChD,CAAC;oBACF,OAAO,IAAI,CAAC;gBACb,CAAC;gBACD,SAAS;YACV,CAAC;YAGD,IAAI,kBAAkB,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;gBAC1C,OAAO,IAAI,CAAC;YACb,CAAC;QACF,CAAC;QAED,OAAO,KAAK,CAAC;IACd,CAAC;IAEO,iBAAiB,CAAC,QAAgB;QACzC,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtC,CAAC;CACD;AA/CD,0CA+CC"}

package/dist/services/ssrf/in-memory-dns-cache.service.d.ts

@@ -1,11 +0,0 @@
-import { SsrfProtectionConfig } from '@n8n/config';
-import { LookupAddress } from 'node:dns';
-export declare class InMemoryDnsCache {
-    private readonly ssrfConfig;
-    private cache;
-    constructor(ssrfConfig: SsrfProtectionConfig);
-    private ensureCache;
-    get(hostname: string): Promise<LookupAddress[] | undefined>;
-    set(hostname: string, ips: LookupAddress[], ttl: number): Promise<void>;
-    clear(): Promise<void>;
-}

package/dist/services/ssrf/in-memory-dns-cache.service.js

@@ -1,61 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.InMemoryDnsCache = void 0;
-const config_1 = require("@n8n/config");
-const constants_1 = require("@n8n/constants");
-const di_1 = require("@n8n/di");
-const cache_manager_1 = require("cache-manager");
-const n8n_workflow_1 = require("n8n-workflow");
-const node_assert_1 = __importDefault(require("node:assert"));
-let InMemoryDnsCache = class InMemoryDnsCache {
-    constructor(ssrfConfig) {
-        this.ssrfConfig = ssrfConfig;
-    }
-    async ensureCache() {
-        if (!this.cache) {
-            const sizeCalculation = (item) => {
-                const str = (0, n8n_workflow_1.jsonStringify)(item, { replaceCircularRefs: true });
-                return new TextEncoder().encode(str).length;
-            };
-            this.cache = await (0, cache_manager_1.caching)('memory', {
-                maxSize: this.ssrfConfig.dnsCacheMaxSize,
-                sizeCalculation,
-                ttl: 0,
-                ttlResolution: 0,
-            });
-        }
-        return this.cache;
-    }
-    async get(hostname) {
-        const cache = await this.ensureCache();
-        return await cache.get(hostname);
-    }
-    async set(hostname, ips, ttl) {
-        (0, node_assert_1.default)(ttl > 0, 'DNS cache TTL must be greater than 0');
-        const cache = await this.ensureCache();
-        const ttlMs = ttl * constants_1.Time.seconds.toMilliseconds;
-        await cache.set(hostname, ips, ttlMs);
-    }
-    async clear() {
-        const cache = await this.ensureCache();
-        await cache.reset();
-    }
-};
-exports.InMemoryDnsCache = InMemoryDnsCache;
-exports.InMemoryDnsCache = InMemoryDnsCache = __decorate([
-    (0, di_1.Service)(),
-    __metadata("design:paramtypes", [config_1.SsrfProtectionConfig])
-], InMemoryDnsCache);
-//# sourceMappingURL=in-memory-dns-cache.service.js.map

package/dist/services/ssrf/in-memory-dns-cache.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"in-memory-dns-cache.service.js","sourceRoot":"","sources":["../../../src/services/ssrf/in-memory-dns-cache.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,wCAAmD;AACnD,8CAAsC;AACtC,gCAAkC;AAElC,iDAAwC;AACxC,+CAA6C;AAC7C,8DAAiC;AAO1B,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAG5B,YAA6B,UAAgC;QAAhC,eAAU,GAAV,UAAU,CAAsB;IAAG,CAAC;IAEzD,KAAK,CAAC,WAAW;QACxB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACjB,MAAM,eAAe,GAAG,CAAC,IAAa,EAAE,EAAE;gBACzC,MAAM,GAAG,GAAG,IAAA,4BAAa,EAAC,IAAI,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/D,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;YAC7C,CAAC,CAAC;YAEF,IAAI,CAAC,KAAK,GAAG,MAAM,IAAA,uBAAO,EAAC,QAAQ,EAAE;gBACpC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,eAAe;gBACxC,eAAe;gBACf,GAAG,EAAE,CAAC;gBACN,aAAa,EAAE,CAAC;aAChB,CAAC,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,QAAgB;QACzB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACvC,OAAO,MAAM,KAAK,CAAC,GAAG,CAAkB,QAAQ,CAAC,CAAC;IACnD,CAAC;IAOD,KAAK,CAAC,GAAG,CAAC,QAAgB,EAAE,GAAoB,EAAE,GAAW;QAC5D,IAAA,qBAAM,EAAC,GAAG,GAAG,CAAC,EAAE,sCAAsC,CAAC,CAAC;QAExD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,GAAG,GAAG,gBAAI,CAAC,OAAO,CAAC,cAAc,CAAC;QAChD,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,KAAK;QACV,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACD,CAAA;AA7CY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,YAAO,GAAE;qCAIgC,6BAAoB;GAHjD,gBAAgB,CA6C5B"}

package/dist/services/ssrf/ip-range-builder.d.ts

@@ -1,10 +0,0 @@
-import { BlockList } from 'node:net';
-export interface IpRangeIssue {
-    entry: string;
-    error: string;
-}
-export interface IpRangeBuildResult {
-    list: BlockList;
-    issues: IpRangeIssue[];
-}
-export declare function buildIpRangeList(cidrRanges: readonly string[]): IpRangeBuildResult;

package/dist/services/ssrf/ip-range-builder.js

@@ -1,52 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.buildIpRangeList = buildIpRangeList;
-const n8n_workflow_1 = require("n8n-workflow");
-const node_net_1 = require("node:net");
-const zod_1 = require("zod");
-function buildIpRangeList(cidrRanges) {
-    const list = new node_net_1.BlockList();
-    const issues = [];
-    for (const rawEntry of cidrRanges) {
-        const entry = rawEntry.trim();
-        if (entry.length === 0) {
-            continue;
-        }
-        try {
-            const cidr = parseCidr(entry);
-            if (!cidr) {
-                issues.push({ entry, error: 'Invalid CIDR notation' });
-                continue;
-            }
-            list.addSubnet(cidr.network, cidr.prefix, cidr.family);
-        }
-        catch (e) {
-            const error = (0, n8n_workflow_1.ensureError)(e);
-            issues.push({ entry, error: `Failed to add IP range: ${error.message}` });
-        }
-    }
-    return { list, issues };
-}
-function parseCidr(entry) {
-    const result = cidrSchema.safeParse(entry);
-    if (!result.success) {
-        return null;
-    }
-    const [network, prefixStr] = result.data.split('/');
-    const family = validateIp(network);
-    if (family === null) {
-        return null;
-    }
-    const prefix = Number.parseInt(prefixStr, 10);
-    return { network, prefix, family };
-}
-const cidrSchema = zod_1.z.string().cidr();
-function validateIp(ip) {
-    const version = (0, node_net_1.isIP)(ip);
-    if (version === 4)
-        return 'ipv4';
-    if (version === 6)
-        return 'ipv6';
-    return null;
-}
-//# sourceMappingURL=ip-range-builder.js.map

package/dist/services/ssrf/ip-range-builder.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ip-range-builder.js","sourceRoot":"","sources":["../../../src/services/ssrf/ip-range-builder.ts"],"names":[],"mappings":";;AAmBA,4CAyBC;AA5CD,+CAA2C;AAC3C,uCAA2C;AAC3C,6BAAwB;AAiBxB,SAAgB,gBAAgB,CAAC,UAA6B;IAC7D,MAAM,IAAI,GAAG,IAAI,oBAAS,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAmB,EAAE,CAAC;IAElC,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,SAAS;QACV,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAC9B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;gBACvD,SAAS;YACV,CAAC;YAED,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,IAAA,0BAAW,EAAC,CAAC,CAAC,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC3E,CAAC;IACF,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACzB,CAAC;AAKD,SAAS,SAAS,CACjB,KAAa;IAEb,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpD,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACb,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;AAErC,SAAS,UAAU,CAAC,EAAU;IAC7B,MAAM,OAAO,GAAG,IAAA,eAAI,EAAC,EAAE,CAAC,CAAC;IACzB,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACjC,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IACjC,OAAO,IAAI,CAAC;AACb,CAAC"}

package/dist/services/ssrf/ssrf-blocked-ip.error.d.ts

@@ -1,6 +0,0 @@
-import { UserError } from 'n8n-workflow';
-export declare class SsrfBlockedIpError extends UserError {
-    readonly ip: string;
-    readonly hostname?: string;
-    constructor(ip: string, hostname?: string);
-}

package/dist/services/ssrf/ssrf-blocked-ip.error.js

@@ -1,21 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.SsrfBlockedIpError = void 0;
-const n8n_workflow_1 = require("n8n-workflow");
-class SsrfBlockedIpError extends n8n_workflow_1.UserError {
-    constructor(ip, hostname) {
-        const target = hostname ? `'${hostname}' (${ip})` : ip;
-        super('The request was blocked because it resolves to a restricted IP address', {
-            description: `The target ${target} is not allowed. ` +
-                'This is a security measure to prevent Server-Side Request Forgery (SSRF). ' +
-                'If you need to access internal resources, ask your n8n administrator to allowlist ' +
-                'the hostname or IP range in the environment configuration.',
-            extra: { ip, hostname },
-        });
-        this.name = 'SsrfBlockedIpError';
-        this.ip = ip;
-        this.hostname = hostname;
-    }
-}
-exports.SsrfBlockedIpError = SsrfBlockedIpError;
-//# sourceMappingURL=ssrf-blocked-ip.error.js.map

package/dist/services/ssrf/ssrf-blocked-ip.error.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ssrf-blocked-ip.error.js","sourceRoot":"","sources":["../../../src/services/ssrf/ssrf-blocked-ip.error.ts"],"names":[],"mappings":";;;AAAA,+CAAyC;AAKzC,MAAa,kBAAmB,SAAQ,wBAAS;IAIhD,YAAY,EAAU,EAAE,QAAiB;QACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,KAAK,CAAC,wEAAwE,EAAE;YAC/E,WAAW,EACV,cAAc,MAAM,mBAAmB;gBACvC,4EAA4E;gBAC5E,oFAAoF;gBACpF,4DAA4D;YAC7D,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE;SACvB,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;QACjC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC1B,CAAC;CACD;AAnBD,gDAmBC"}

package/dist/services/ssrf/ssrf-protection.service.d.ts

@@ -1,26 +0,0 @@
-import { Logger } from '@n8n/backend-common';
-import { SsrfProtectionConfig } from '@n8n/config';
-import { SsrfBridge, SsrfCheckResult } from 'n8n-core';
-import { Result } from 'n8n-workflow';
-import type { LookupAddress } from 'node:dns';
-import type { LookupFunction } from 'node:net';
-import { DnsResolver } from './dns-resolver';
-export type LookAndValidateResult = Result<LookupAddress[], Error>;
-export declare class SsrfProtectionService implements SsrfBridge {
-    private readonly ssrfConfig;
-    private readonly dnsResolver;
-    private readonly logger;
-    private readonly blockedIps;
-    private readonly allowedIps;
-    private readonly allowedHostnameMatcher;
-    constructor(ssrfConfig: SsrfProtectionConfig, dnsResolver: DnsResolver, logger: Logger);
-    validateUrl(url: string | URL): Promise<SsrfCheckResult>;
-    validateIp(ip: string): SsrfCheckResult;
-    createSecureLookup(): LookupFunction;
-    validateRedirectSync(url: string): void;
-    private normalizeIpInHostname;
-    private secureLookupAsync;
-    private lookupAndValidate;
-    private tryParseUrl;
-    private getIpFamily;
-}