n8n 2.26.3 → 2.27.0

package/dist/modules/n8n-packages/entities/workflow/workflow-importer.js

@@ -10,38 +10,155 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.WorkflowImporter = void 0;
+const db_1 = require("@n8n/db");
 const di_1 = require("@n8n/di");
+const workflow_creation_service_1 = require("../../../../workflows/workflow-creation.service");
+const workflow_service_1 = require("../../../../workflows/workflow.service");
+const workflow_conflict_policy_1 = require("./workflow-conflict-policy");
+const workflow_id_policy_1 = require("./workflow-id-policy");
 const workflow_import_match_service_1 = require("./workflow-import-match.service");
-const workflow_conflict_policy_factory_1 = require("./workflow-conflict-policy.factory");
+const workflow_publisher_1 = require("./workflow-publisher");
 let WorkflowImporter = class WorkflowImporter {
-    constructor(workflowConflictPolicyFactory, workflowImportMatchService) {
-        this.workflowConflictPolicyFactory = workflowConflictPolicyFactory;
+    constructor(workflowImportMatchService, workflowCreationService, workflowService, workflowPublisher) {
         this.workflowImportMatchService = workflowImportMatchService;
+        this.workflowCreationService = workflowCreationService;
+        this.workflowService = workflowService;
+        this.workflowPublisher = workflowPublisher;
     }
-    async importWorkflows(prepared, policy, context, bindings) {
-        const workflowConflictPolicyHandler = this.workflowConflictPolicyFactory.getHandler(policy);
-        const matchBySourceWorkflowId = await this.workflowImportMatchService.findBySourceWorkflowIds(context.projectId, prepared.map(({ sourceWorkflowId }) => sourceWorkflowId));
-        const conflicts = Array.from(matchBySourceWorkflowId.entries()).map(([sourceWorkflowId, match]) => ({
-            sourceWorkflowId,
-            existingWorkflowId: match.id,
-            name: match.name,
-        }));
-        workflowConflictPolicyHandler.preFlight(conflicts);
-        const outcomes = [];
+    async plan(context, prepared, options) {
+        const existingBySourceWorkflowId = await this.workflowImportMatchService.findBySourceWorkflowIds(context.projectId, prepared.map(({ sourceWorkflowId }) => sourceWorkflowId));
+        const items = [];
+        const conflicts = [];
+        const sourceCreateIds = [];
+        for (const workflow of prepared) {
+            const existing = existingBySourceWorkflowId.get(workflow.sourceWorkflowId) ?? null;
+            const { action, blocked } = (0, workflow_conflict_policy_1.decideWorkflowConflictAction)(options.workflowConflictPolicy, existing);
+            const item = toPlanItem(workflow, existing, action, options.workflowIdPolicy);
+            items.push(item);
+            if (item.action === 'create' && options.workflowIdPolicy === 'source' && !blocked) {
+                sourceCreateIds.push(item.decidedId);
+            }
+            if (blocked && existing) {
+                conflicts.push({
+                    sourceWorkflowId: workflow.sourceWorkflowId,
+                    existingWorkflowId: existing.id,
+                    name: existing.name,
+                });
+            }
+        }
+        const idConflicts = await this.collectIdConflicts(sourceCreateIds);
+        return { items, conflicts, idConflicts };
+    }
+    async collectIdConflicts(candidateIds) {
+        const existing = await this.workflowImportMatchService.findOwningProjectsByWorkflowId(candidateIds);
+        return candidateIds.flatMap((id) => {
+            const location = existing.get(id);
+            if (!location)
+                return [];
+            return [
+                {
+                    sourceWorkflowId: id,
+                    existingWorkflowId: id,
+                    existingProjectId: location.projectId,
+                    isArchived: location.isArchived,
+                    name: location.name,
+                },
+            ];
+        });
+    }
+    async apply(plan, context, bindings) {
         const workflowBindings = new Map(bindings.workflows);
-        for (const { entity, sourceWorkflowId } of prepared) {
-            const match = matchBySourceWorkflowId.get(sourceWorkflowId) ?? null;
-            const outcome = await workflowConflictPolicyHandler.handle(entity, sourceWorkflowId, match, context);
+        const outcomes = [];
+        for (const item of plan.items) {
+            const outcome = await this.applyItem(item, context, bindings);
             outcomes.push(outcome);
-            workflowBindings.set(sourceWorkflowId, outcome.workflow.id);
+            workflowBindings.set(outcome.sourceWorkflowId, outcome.workflow.id);
         }
         return { outcomes, bindings: { ...bindings, workflows: workflowBindings } };
     }
+    async applyItem(item, context, bindings) {
+        if (item.action === 'skip') {
+            return {
+                status: 'skipped',
+                workflow: item.existing,
+                sourceWorkflowId: item.sourceWorkflowId,
+            };
+        }
+        const savedWorkflow = await this.persistWorkflow(context, item, bindings.credentials);
+        const workflow = await this.workflowPublisher.apply(context.user, item, savedWorkflow, context.publishingPolicy);
+        return {
+            status: item.action === 'create' ? 'created' : 'updated',
+            workflow,
+            sourceWorkflowId: item.sourceWorkflowId,
+        };
+    }
+    async persistWorkflow(context, item, credentialBindings) {
+        if (item.action === 'create') {
+            const entity = prepareEntityForPersist(item.entity, credentialBindings, item.decidedId);
+            return await this.workflowCreationService.createWorkflow(context.user, entity, {
+                projectId: context.projectId,
+                parentFolderId: context.folderId ?? undefined,
+                publicApi: true,
+                source: 'import',
+                sourceWorkflowId: item.sourceWorkflowId,
+            });
+        }
+        const entity = prepareEntityForPersist(item.entity, credentialBindings);
+        const workflow = await this.workflowService.update(context.user, entity, item.existing.id, {
+            publicApi: true,
+            source: 'import',
+        });
+        workflow.parentFolder = item.existing.parentFolder;
+        return workflow;
+    }
 };
 exports.WorkflowImporter = WorkflowImporter;
 exports.WorkflowImporter = WorkflowImporter = __decorate([
     (0, di_1.Service)(),
-    __metadata("design:paramtypes", [workflow_conflict_policy_factory_1.WorkflowConflictPolicyFactory,
-        workflow_import_match_service_1.WorkflowImportMatchService])
+    __metadata("design:paramtypes", [workflow_import_match_service_1.WorkflowImportMatchService,
+        workflow_creation_service_1.WorkflowCreationService,
+        workflow_service_1.WorkflowService,
+        workflow_publisher_1.WorkflowPublisher])
 ], WorkflowImporter);
+function prepareEntityForPersist(source, credentialBindings, decidedId) {
+    const entity = Object.assign(new db_1.WorkflowEntity(), source, {
+        nodes: structuredClone(source.nodes),
+        ...(decidedId !== undefined ? { id: decidedId } : {}),
+    });
+    applyCredentialBindingsInPlace(entity, credentialBindings);
+    return entity;
+}
+function applyCredentialBindingsInPlace(entity, credentialBindings) {
+    for (const node of entity.nodes) {
+        for (const details of Object.values(node.credentials ?? {})) {
+            if (!details.id)
+                continue;
+            const targetId = credentialBindings.get(details.id);
+            if (targetId) {
+                details.id = targetId;
+            }
+        }
+    }
+}
+function toPlanItem(prepared, existing, action, idPolicy) {
+    if (existing === null) {
+        return {
+            action: 'create',
+            decidedId: (0, workflow_id_policy_1.decideWorkflowId)(idPolicy, prepared.sourceWorkflowId),
+            ...prepared,
+        };
+    }
+    switch (action) {
+        case 'update':
+            return { action, ...prepared, existing };
+        case 'skip':
+            return { action, ...prepared, existing };
+        case 'create':
+            return {
+                action,
+                decidedId: (0, workflow_id_policy_1.decideWorkflowId)(idPolicy, prepared.sourceWorkflowId),
+                ...prepared,
+            };
+    }
+}
 //# sourceMappingURL=workflow-importer.js.map

package/dist/modules/n8n-packages/entities/workflow/workflow-importer.js.map

@@ -1 +1 @@
-{"version":3,"file":"workflow-importer.js","sourceRoot":"","sources":["../../../../../src/modules/n8n-packages/entities/workflow/workflow-importer.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gCAAkC;AAGlC,mFAA6E;AAC7E,yFAAmF;AAoB5E,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAC5B,YACkB,6BAA4D,EAC5D,0BAAsD;QADtD,kCAA6B,GAA7B,6BAA6B,CAA+B;QAC5D,+BAA0B,GAA1B,0BAA0B,CAA4B;IACrE,CAAC;IAEJ,KAAK,CAAC,eAAe,CACpB,QAA4B,EAC5B,MAA8B,EAC9B,OAA6B,EAC7B,QAA+B;QAE/B,MAAM,6BAA6B,GAAG,IAAI,CAAC,6BAA6B,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAE5F,MAAM,uBAAuB,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,uBAAuB,CAC5F,OAAO,CAAC,SAAS,EACjB,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,gBAAgB,CAAC,CACxD,CAAC;QAEF,MAAM,SAAS,GAAuB,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CACtF,CAAC,CAAC,gBAAgB,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/B,gBAAgB;YAChB,kBAAkB,EAAE,KAAK,CAAC,EAAE;YAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;SAChB,CAAC,CACF,CAAC;QACF,6BAA6B,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAEnD,MAAM,QAAQ,GAA4B,EAAE,CAAC;QAC7C,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACrD,KAAK,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,IAAI,QAAQ,EAAE,CAAC;YACrD,MAAM,KAAK,GAAG,uBAAuB,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC;YACpE,MAAM,OAAO,GAAG,MAAM,6BAA6B,CAAC,MAAM,CACzD,MAAM,EACN,gBAAgB,EAChB,KAAK,EACL,OAAO,CACP,CAAC;YACF,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAEvB,gBAAgB,CAAC,GAAG,CAAC,gBAAgB,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,gBAAgB,EAAE,EAAE,CAAC;IAC7E,CAAC;CACD,CAAA;AA7CY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,YAAO,GAAE;qCAGwC,gEAA6B;QAChC,0DAA0B;GAH5D,gBAAgB,CA6C5B"}
+{"version":3,"file":"workflow-importer.js","sourceRoot":"","sources":["../../../../../src/modules/n8n-packages/entities/workflow/workflow-importer.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gCAAyC;AACzC,gCAAkC;AAElC,qFAAgF;AAChF,mEAA+D;AAE/D,yEAA0E;AAC1E,6DAAwD;AACxD,mFAGyC;AAWzC,6DAAyD;AAkBlD,IAAM,gBAAgB,GAAtB,MAAM,gBAAgB;IAC5B,YACkB,0BAAsD,EACtD,uBAAgD,EAChD,eAAgC,EAChC,iBAAoC;QAHpC,+BAA0B,GAA1B,0BAA0B,CAA4B;QACtD,4BAAuB,GAAvB,uBAAuB,CAAyB;QAChD,oBAAe,GAAf,eAAe,CAAiB;QAChC,sBAAiB,GAAjB,iBAAiB,CAAmB;IACnD,CAAC;IAEJ,KAAK,CAAC,IAAI,CACT,OAA8B,EAC9B,QAA4B,EAC5B,OAAiC;QAEjC,MAAM,0BAA0B,GAC/B,MAAM,IAAI,CAAC,0BAA0B,CAAC,uBAAuB,CAC5D,OAAO,CAAC,SAAS,EACjB,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,gBAAgB,CAAC,CACxD,CAAC;QAEH,MAAM,KAAK,GAAuB,EAAE,CAAC;QACrC,MAAM,SAAS,GAAuB,EAAE,CAAC;QAIzC,MAAM,eAAe,GAAa,EAAE,CAAC;QAErC,KAAK,MAAM,QAAQ,IAAI,QAAQ,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,0BAA0B,CAAC,GAAG,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,IAAI,CAAC;YACnF,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAA,uDAA4B,EACvD,OAAO,CAAC,sBAAsB,EAC9B,QAAQ,CACR,CAAC;YAEF,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;YAC9E,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEjB,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,gBAAgB,KAAK,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;gBACnF,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtC,CAAC;YAED,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;gBACzB,SAAS,CAAC,IAAI,CAAC;oBACd,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;oBAC3C,kBAAkB,EAAE,QAAQ,CAAC,EAAE;oBAC/B,IAAI,EAAE,QAAQ,CAAC,IAAI;iBACnB,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,eAAe,CAAC,CAAC;QAEnE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IAC1C,CAAC;IAOO,KAAK,CAAC,kBAAkB,CAAC,YAAsB;QACtD,MAAM,QAAQ,GACb,MAAM,IAAI,CAAC,0BAA0B,CAAC,8BAA8B,CAAC,YAAY,CAAC,CAAC;QAEpF,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;YAClC,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAClC,IAAI,CAAC,QAAQ;gBAAE,OAAO,EAAE,CAAC;YACzB,OAAO;gBACN;oBACC,gBAAgB,EAAE,EAAE;oBACpB,kBAAkB,EAAE,EAAE;oBACtB,iBAAiB,EAAE,QAAQ,CAAC,SAAS;oBACrC,UAAU,EAAE,QAAQ,CAAC,UAAU;oBAC/B,IAAI,EAAE,QAAQ,CAAC,IAAI;iBACnB;aACD,CAAC;QACH,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CACV,IAAwB,EACxB,OAA8B,EAC9B,QAA+B;QAE/B,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,QAAQ,GAA4B,EAAE,CAAC;QAE7C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC9D,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAEvB,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACrE,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,gBAAgB,EAAE,EAAE,CAAC;IAC7E,CAAC;IAEO,KAAK,CAAC,SAAS,CACtB,IAAsB,EACtB,OAA8B,EAC9B,QAA+B;QAE/B,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO;gBACN,MAAM,EAAE,SAAS;gBACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;aACvC,CAAC;QACH,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;QACtF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAClD,OAAO,CAAC,IAAI,EACZ,IAAI,EACJ,aAAa,EACb,OAAO,CAAC,gBAAgB,CACxB,CAAC;QAEF,OAAO;YACN,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YACxD,QAAQ;YACR,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;SACvC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe,CAC5B,OAA8B,EAC9B,IAA+B,EAC/B,kBAAwD;QAExD,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACxF,OAAO,MAAM,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE;gBAC9E,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,cAAc,EAAE,OAAO,CAAC,QAAQ,IAAI,SAAS;gBAC7C,SAAS,EAAE,IAAI;gBACf,MAAM,EAAE,QAAQ;gBAChB,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;aACvC,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,uBAAuB,CAAC,IAAI,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QACxE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;YAC1F,SAAS,EAAE,IAAI;YACf,MAAM,EAAE,QAAQ;SAChB,CAAC,CAAC;QAEH,QAAQ,CAAC,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QACnD,OAAO,QAAQ,CAAC;IACjB,CAAC;CACD,CAAA;AArJY,4CAAgB;2BAAhB,gBAAgB;IAD5B,IAAA,YAAO,GAAE;qCAGqC,0DAA0B;QAC7B,mDAAuB;QAC/B,kCAAe;QACb,sCAAiB;GAL1C,gBAAgB,CAqJ5B;AAGD,SAAS,uBAAuB,CAC/B,MAAsB,EACtB,kBAAwD,EACxD,SAAkB;IAElB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,mBAAc,EAAE,EAAE,MAAM,EAAE;QAC1D,KAAK,EAAE,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC;QACpC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC,CAAC;IACH,8BAA8B,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC3D,OAAO,MAAM,CAAC;AACf,CAAC;AAGD,SAAS,8BAA8B,CACtC,MAAsB,EACtB,kBAAwD;IAExD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,CAAC;YAC7D,IAAI,CAAC,OAAO,CAAC,EAAE;gBAAE,SAAS;YAE1B,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACpD,IAAI,QAAQ,EAAE,CAAC;gBACd,OAAO,CAAC,EAAE,GAAG,QAAQ,CAAC;YACvB,CAAC;QACF,CAAC;IACF,CAAC;AACF,CAAC;AAED,SAAS,UAAU,CAClB,QAA0B,EAC1B,QAA+B,EAC/B,MAA6B,EAC7B,QAA0B;IAE1B,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACvB,OAAO;YACN,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,IAAA,qCAAgB,EAAC,QAAQ,EAAE,QAAQ,CAAC,gBAAgB,CAAC;YAChE,GAAG,QAAQ;SACX,CAAC;IACH,CAAC;IAED,QAAQ,MAAM,EAAE,CAAC;QAChB,KAAK,QAAQ;YACZ,OAAO,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,CAAC;QAC1C,KAAK,MAAM;YACV,OAAO,EAAE,MAAM,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,CAAC;QAC1C,KAAK,QAAQ;YAEZ,OAAO;gBACN,MAAM;gBACN,SAAS,EAAE,IAAA,qCAAgB,EAAC,QAAQ,EAAE,QAAQ,CAAC,gBAAgB,CAAC;gBAChE,GAAG,QAAQ;aACX,CAAC;IACJ,CAAC;AACF,CAAC"}

package/dist/modules/n8n-packages/entities/workflow/workflow-publisher.d.ts

@@ -0,0 +1,16 @@
+import { Logger } from '@n8n/backend-common';
+import type { User, WorkflowEntity } from '@n8n/db';
+import { ProjectRepository } from '@n8n/db';
+import { ProjectService } from '../../../../services/project.service.ee';
+import { WorkflowService } from '../../../../workflows/workflow.service';
+import type { PersistedWorkflowPlanItem } from './workflow-import.types';
+import { WorkflowPublishingPolicy } from './workflow-publishing-policy.types';
+export declare class WorkflowPublisher {
+    private readonly logger;
+    private readonly projectRepository;
+    private readonly projectService;
+    private readonly workflowService;
+    constructor(logger: Logger, projectRepository: ProjectRepository, projectService: ProjectService, workflowService: WorkflowService);
+    assertCanPublish(user: User, projectId: string, policy: WorkflowPublishingPolicy): Promise<void>;
+    apply(user: User, item: PersistedWorkflowPlanItem, workflow: WorkflowEntity, policy: WorkflowPublishingPolicy): Promise<WorkflowEntity>;
+}

package/dist/modules/n8n-packages/entities/workflow/workflow-publisher.js

@@ -0,0 +1,87 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkflowPublisher = void 0;
+const backend_common_1 = require("@n8n/backend-common");
+const db_1 = require("@n8n/db");
+const di_1 = require("@n8n/di");
+const n8n_workflow_1 = require("n8n-workflow");
+const forbidden_error_1 = require("../../../../errors/response-errors/forbidden.error");
+const not_found_error_1 = require("../../../../errors/response-errors/not-found.error");
+const project_service_ee_1 = require("../../../../services/project.service.ee");
+const workflow_service_1 = require("../../../../workflows/workflow.service");
+const workflow_publishing_policy_1 = require("./workflow-publishing-policy");
+const workflow_publishing_policy_types_1 = require("./workflow-publishing-policy.types");
+let WorkflowPublisher = class WorkflowPublisher {
+    constructor(logger, projectRepository, projectService, workflowService) {
+        this.logger = logger;
+        this.projectRepository = projectRepository;
+        this.projectService = projectService;
+        this.workflowService = workflowService;
+    }
+    async assertCanPublish(user, projectId, policy) {
+        if (policy !== workflow_publishing_policy_types_1.WorkflowPublishingPolicy.PublishAll) {
+            return;
+        }
+        const project = await this.projectService.getProjectWithScope(user, projectId, [
+            'workflow:publish',
+        ]);
+        if (project) {
+            return;
+        }
+        if (!(await this.projectRepository.existsBy({ id: projectId }))) {
+            throw new not_found_error_1.NotFoundError(`Project not found: ${projectId}`);
+        }
+        throw new forbidden_error_1.ForbiddenError('You do not have permission to publish workflows in this project.');
+    }
+    async apply(user, item, workflow, policy) {
+        const action = (0, workflow_publishing_policy_1.decideWorkflowPublishingAction)(policy, toPublishingContext(item, workflow));
+        if (action === 'noop') {
+            return workflow;
+        }
+        try {
+            if (action === 'publish') {
+                return await this.workflowService.activateWorkflow(user, workflow.id, {
+                    versionId: workflow.versionId,
+                    source: 'import',
+                });
+            }
+            return await this.workflowService.deactivateWorkflow(user, workflow.id, {
+                source: 'import',
+            });
+        }
+        catch (error) {
+            this.logger.warn('Failed to apply publishing policy to imported workflow', {
+                workflowId: workflow.id,
+                action,
+                error: (0, n8n_workflow_1.ensureError)(error).message,
+            });
+            return workflow;
+        }
+    }
+};
+exports.WorkflowPublisher = WorkflowPublisher;
+exports.WorkflowPublisher = WorkflowPublisher = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [backend_common_1.Logger,
+        db_1.ProjectRepository,
+        project_service_ee_1.ProjectService,
+        workflow_service_1.WorkflowService])
+], WorkflowPublisher);
+function toPublishingContext(item, workflow) {
+    return {
+        status: item.action === 'create' ? 'created' : 'updated',
+        sourcePublished: item.sourcePublished,
+        currentlyPublished: !!workflow.activeVersionId,
+        isArchived: workflow.isArchived,
+    };
+}
+//# sourceMappingURL=workflow-publisher.js.map

package/dist/modules/n8n-packages/entities/workflow/workflow-publisher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-publisher.js","sourceRoot":"","sources":["../../../../../src/modules/n8n-packages/entities/workflow/workflow-publisher.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wDAA6C;AAE7C,gCAA4C;AAC5C,gCAAkC;AAClC,+CAA2C;AAE3C,8EAA0E;AAC1E,8EAAyE;AACzE,sEAA+D;AAC/D,mEAA+D;AAG/D,6EAA8E;AAC9E,yFAG4C;AAQrC,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAC7B,YACkB,MAAc,EACd,iBAAoC,EACpC,cAA8B,EAC9B,eAAgC;QAHhC,WAAM,GAAN,MAAM,CAAQ;QACd,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,mBAAc,GAAd,cAAc,CAAgB;QAC9B,oBAAe,GAAf,eAAe,CAAiB;IAC/C,CAAC;IAOJ,KAAK,CAAC,gBAAgB,CACrB,IAAU,EACV,SAAiB,EACjB,MAAgC;QAEhC,IAAI,MAAM,KAAK,2DAAwB,CAAC,UAAU,EAAE,CAAC;YACpD,OAAO;QACR,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,mBAAmB,CAAC,IAAI,EAAE,SAAS,EAAE;YAC9E,kBAAkB;SAClB,CAAC,CAAC;QACH,IAAI,OAAO,EAAE,CAAC;YACb,OAAO;QACR,CAAC;QAED,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC;YACjE,MAAM,IAAI,+BAAa,CAAC,sBAAsB,SAAS,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,IAAI,gCAAc,CAAC,kEAAkE,CAAC,CAAC;IAC9F,CAAC;IAMD,KAAK,CAAC,KAAK,CACV,IAAU,EACV,IAA+B,EAC/B,QAAwB,EACxB,MAAgC;QAEhC,MAAM,MAAM,GAAG,IAAA,2DAA8B,EAAC,MAAM,EAAE,mBAAmB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAE3F,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACvB,OAAO,QAAQ,CAAC;QACjB,CAAC;QAED,IAAI,CAAC;YACJ,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE;oBACrE,SAAS,EAAE,QAAQ,CAAC,SAAS;oBAC7B,MAAM,EAAE,QAAQ;iBAChB,CAAC,CAAC;YACJ,CAAC;YAED,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE;gBACvE,MAAM,EAAE,QAAQ;aAChB,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAIhB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wDAAwD,EAAE;gBAC1E,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,MAAM;gBACN,KAAK,EAAE,IAAA,0BAAW,EAAC,KAAK,CAAC,CAAC,OAAO;aACjC,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC;QACjB,CAAC;IACF,CAAC;CACD,CAAA;AA1EY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,YAAO,GAAE;qCAGiB,uBAAM;QACK,sBAAiB;QACpB,mCAAc;QACb,kCAAe;GALtC,iBAAiB,CA0E7B;AAED,SAAS,mBAAmB,CAC3B,IAA+B,EAC/B,QAAwB;IAExB,OAAO;QACN,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACxD,eAAe,EAAE,IAAI,CAAC,eAAe;QACrC,kBAAkB,EAAE,CAAC,CAAC,QAAQ,CAAC,eAAe;QAC9C,UAAU,EAAE,QAAQ,CAAC,UAAU;KAC/B,CAAC;AACH,CAAC"}

package/dist/modules/n8n-packages/entities/workflow/workflow-publishing-policy.d.ts

@@ -0,0 +1,2 @@
+import { WorkflowPublishingPolicy, type PublishingAction, type WorkflowPublishingContext } from './workflow-publishing-policy.types';
+export declare function decideWorkflowPublishingAction(policy: WorkflowPublishingPolicy, context: WorkflowPublishingContext): PublishingAction;

package/dist/modules/n8n-packages/entities/workflow/workflow-publishing-policy.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decideWorkflowPublishingAction = decideWorkflowPublishingAction;
+const workflow_publishing_policy_types_1 = require("./workflow-publishing-policy.types");
+const WORKFLOW_PUBLISHING_POLICIES = {
+    [workflow_publishing_policy_types_1.WorkflowPublishingPolicy.PreservePublishedState]: ({ status, currentlyPublished, sourcePublished, }) => (status === 'updated' && currentlyPublished && sourcePublished ? 'publish' : 'noop'),
+    [workflow_publishing_policy_types_1.WorkflowPublishingPolicy.MatchSource]: ({ status, sourcePublished, currentlyPublished }) => {
+        if (sourcePublished && (status === 'created' || status === 'updated')) {
+            return 'publish';
+        }
+        if (status === 'updated' && !sourcePublished && currentlyPublished) {
+            return 'unpublish';
+        }
+        return 'noop';
+    },
+    [workflow_publishing_policy_types_1.WorkflowPublishingPolicy.PublishAll]: () => 'publish',
+    [workflow_publishing_policy_types_1.WorkflowPublishingPolicy.UnpublishAll]: ({ status, currentlyPublished }) => status === 'updated' && currentlyPublished ? 'unpublish' : 'noop',
+};
+function decideWorkflowPublishingAction(policy, context) {
+    if (context.status === 'skipped') {
+        return 'noop';
+    }
+    if (context.isArchived) {
+        return context.currentlyPublished ? 'unpublish' : 'noop';
+    }
+    return WORKFLOW_PUBLISHING_POLICIES[policy](context);
+}
+//# sourceMappingURL=workflow-publishing-policy.js.map

package/dist/modules/n8n-packages/entities/workflow/workflow-publishing-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-publishing-policy.js","sourceRoot":"","sources":["../../../../../src/modules/n8n-packages/entities/workflow/workflow-publishing-policy.ts"],"names":[],"mappings":";;AAiCA,wEAaC;AA9CD,yFAI4C;AAM5C,MAAM,4BAA4B,GAG9B;IACH,CAAC,2DAAwB,CAAC,sBAAsB,CAAC,EAAE,CAAC,EACnD,MAAM,EACN,kBAAkB,EAClB,eAAe,GACf,EAAE,EAAE,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,kBAAkB,IAAI,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;IAC1F,CAAC,2DAAwB,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,kBAAkB,EAAE,EAAE,EAAE;QAC3F,IAAI,eAAe,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;YACvE,OAAO,SAAS,CAAC;QAClB,CAAC;QACD,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,eAAe,IAAI,kBAAkB,EAAE,CAAC;YACpE,OAAO,WAAW,CAAC;QACpB,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IACD,CAAC,2DAAwB,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,CAAC,SAAS;IACtD,CAAC,2DAAwB,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,EAAE,CAC3E,MAAM,KAAK,SAAS,IAAI,kBAAkB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM;CAClE,CAAC;AAEF,SAAgB,8BAA8B,CAC7C,MAAgC,EAChC,OAAkC;IAElC,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC;IACf,CAAC;IAED,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACxB,OAAO,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;IAC1D,CAAC;IAED,OAAO,4BAA4B,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC;AACtD,CAAC"}

package/dist/modules/n8n-packages/entities/workflow/workflow-publishing-policy.types.d.ts

@@ -0,0 +1,14 @@
+export declare const WorkflowPublishingPolicy: {
+    readonly PreservePublishedState: "preserve-published-state";
+    readonly MatchSource: "match-source";
+    readonly PublishAll: "publish-all";
+    readonly UnpublishAll: "unpublish-all";
+};
+export type WorkflowPublishingPolicy = (typeof WorkflowPublishingPolicy)[keyof typeof WorkflowPublishingPolicy];
+export type PublishingAction = 'publish' | 'unpublish' | 'noop';
+export interface WorkflowPublishingContext {
+    status: 'created' | 'updated' | 'skipped';
+    sourcePublished: boolean;
+    currentlyPublished: boolean;
+    isArchived: boolean;
+}

package/dist/modules/n8n-packages/entities/workflow/workflow-publishing-policy.types.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkflowPublishingPolicy = void 0;
+exports.WorkflowPublishingPolicy = {
+    PreservePublishedState: 'preserve-published-state',
+    MatchSource: 'match-source',
+    PublishAll: 'publish-all',
+    UnpublishAll: 'unpublish-all',
+};
+//# sourceMappingURL=workflow-publishing-policy.types.js.map

package/dist/modules/n8n-packages/entities/workflow/workflow-publishing-policy.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-publishing-policy.types.js","sourceRoot":"","sources":["../../../../../src/modules/n8n-packages/entities/workflow/workflow-publishing-policy.types.ts"],"names":[],"mappings":";;;AACa,QAAA,wBAAwB,GAAG;IAEvC,sBAAsB,EAAE,0BAA0B;IAElD,WAAW,EAAE,cAAc;IAE3B,UAAU,EAAE,aAAa;IAEzB,YAAY,EAAE,eAAe;CACpB,CAAC"}

package/dist/modules/n8n-packages/entities/workflow/workflow.serializer.js

@@ -19,7 +19,7 @@ let WorkflowSerializer = class WorkflowSerializer {
             settings: workflow.settings,
             versionId: workflow.versionId,
             parentFolderId: workflow.parentFolder?.id ?? null,
-            active: workflow.activeVersionId === workflow.versionId,
+            isPublished: workflow.activeVersionId === workflow.versionId,
             isArchived: workflow.isArchived,
         });
     }

package/dist/modules/n8n-packages/entities/workflow/workflow.serializer.js.map

@@ -1 +1 @@
-{"version":3,"file":"workflow.serializer.js","sourceRoot":"","sources":["../../../../../src/modules/n8n-packages/entities/workflow/workflow.serializer.ts"],"names":[],"mappings":";;;;;;;;;AACA,gCAAkC;AAGlC,2EAG+C;AASxC,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAC9B,SAAS,CAAC,QAAwB;QACjC,OAAO,0CAAwB,CAAC,KAAK,CAAC;YACrC,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,cAAc,EAAE,QAAQ,CAAC,YAAY,EAAE,EAAE,IAAI,IAAI;YACjD,MAAM,EAAE,QAAQ,CAAC,eAAe,KAAK,QAAQ,CAAC,SAAS;YACvD,UAAU,EAAE,QAAQ,CAAC,UAAU;SAC/B,CAAC,CAAC;IACJ,CAAC;IAWD,WAAW,CAAC,IAAwB;QACnC,MAAM,MAAM,GAAG,0CAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEpD,OAAO;YACN,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,KAAK,EAAE,MAAM,CAAC,KAAgB;YAC9B,WAAW,EAAE,MAAM,CAAC,WAA2B;YAC/C,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvE,CAAC;IACH,CAAC;CACD,CAAA;AAnCY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,YAAO,GAAE;GACG,kBAAkB,CAmC9B"}
+{"version":3,"file":"workflow.serializer.js","sourceRoot":"","sources":["../../../../../src/modules/n8n-packages/entities/workflow/workflow.serializer.ts"],"names":[],"mappings":";;;;;;;;;AACA,gCAAkC;AAGlC,2EAG+C;AASxC,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAC9B,SAAS,CAAC,QAAwB;QACjC,OAAO,0CAAwB,CAAC,KAAK,CAAC;YACrC,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,cAAc,EAAE,QAAQ,CAAC,YAAY,EAAE,EAAE,IAAI,IAAI;YACjD,WAAW,EAAE,QAAQ,CAAC,eAAe,KAAK,QAAQ,CAAC,SAAS;YAC5D,UAAU,EAAE,QAAQ,CAAC,UAAU;SAC/B,CAAC,CAAC;IACJ,CAAC;IAWD,WAAW,CAAC,IAAwB;QACnC,MAAM,MAAM,GAAG,0CAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEpD,OAAO;YACN,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,KAAK,EAAE,MAAM,CAAC,KAAgB;YAC9B,WAAW,EAAE,MAAM,CAAC,WAA2B;YAC/C,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvE,CAAC;IACH,CAAC;CACD,CAAA;AAnCY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,YAAO,GAAE;GACG,kBAAkB,CAmC9B"}

package/dist/modules/n8n-packages/io/tar/tar-package-reader.d.ts

@@ -1,13 +1,20 @@
 import type { PackageManifest } from '../../spec/manifest.schema';
 import type { PackageReader } from '../package-reader';
+export interface TarReaderLimits {
+    maxUncompressedBytes: number;
+    maxEntryBytes: number;
+    maxEntries: number;
+    maxPathLength: number;
+}
 export declare class TarPackageReader implements PackageReader {
     private readonly buffer;
-    private readonly maxUncompressedBytes;
+    private readonly limits;
     private entries;
-    constructor(buffer: Buffer, maxUncompressedBytes: number);
+    constructor(buffer: Buffer, limits: TarReaderLimits);
     readManifest(): Promise<PackageManifest>;
-    readFile(path: string): Promise<Buffer>;
+    readFile(entryPath: string): Promise<Buffer>;
     listEntries(): Promise<string[]>;
     private load;
+    private validateEntryPath;
     private parse;
 }

package/dist/modules/n8n-packages/io/tar/tar-package-reader.js

@@ -1,13 +1,19 @@
 "use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.TarPackageReader = void 0;
+const n8n_workflow_1 = require("n8n-workflow");
+const node_path_1 = __importDefault(require("node:path"));
 const tar_1 = require("tar");
 const bad_request_error_1 = require("../../../../errors/response-errors/bad-request.error");
 const MANIFEST_PATH = 'manifest.json';
+const ALLOWED_PATH_CHARS = /^[a-zA-Z0-9._/-]+$/;
 class TarPackageReader {
-    constructor(buffer, maxUncompressedBytes) {
+    constructor(buffer, limits) {
         this.buffer = buffer;
-        this.maxUncompressedBytes = maxUncompressedBytes;
+        this.limits = limits;
         this.entries = null;
     }
     async readManifest() {
@@ -17,17 +23,17 @@ class TarPackageReader {
             throw new bad_request_error_1.BadRequestError('Package is missing manifest.json');
         }
         try {
-            return JSON.parse(manifest.toString('utf-8'));
+            return (0, n8n_workflow_1.jsonParse)(manifest.toString('utf-8'));
         }
         catch {
             throw new bad_request_error_1.BadRequestError('Package manifest is not valid JSON');
         }
     }
-    async readFile(path) {
+    async readFile(entryPath) {
         const entries = await this.load();
-        const content = entries.get(path);
+        const content = entries.get(entryPath);
         if (!content) {
-            throw new bad_request_error_1.BadRequestError(`Package does not contain entry: ${path}`);
+            throw new bad_request_error_1.BadRequestError(`Package does not contain entry: ${entryPath}`);
         }
         return content;
     }
@@ -41,41 +47,118 @@ class TarPackageReader {
         this.entries = await this.parse();
         return this.entries;
     }
+    validateEntryPath(rawPath) {
+        const trimmed = rawPath.endsWith('/') ? rawPath.slice(0, -1) : rawPath;
+        if (trimmed.length === 0) {
+            throw new bad_request_error_1.BadRequestError('Package contains an entry with an empty path');
+        }
+        if (trimmed.length > this.limits.maxPathLength) {
+            throw new bad_request_error_1.BadRequestError('Package entry path exceeds the maximum allowed length');
+        }
+        if (trimmed.startsWith('/')) {
+            throw new bad_request_error_1.BadRequestError(`Package entry path "${trimmed}" must be relative`);
+        }
+        if (!ALLOWED_PATH_CHARS.test(trimmed)) {
+            throw new bad_request_error_1.BadRequestError(`Package entry path "${trimmed}" contains disallowed characters`);
+        }
+        const normalized = node_path_1.default.posix.normalize(trimmed);
+        if (normalized === '..' ||
+            normalized.startsWith('../') ||
+            normalized.includes('/../') ||
+            normalized.endsWith('/..')) {
+            throw new bad_request_error_1.BadRequestError(`Package entry path "${trimmed}" attempts to escape the package root`);
+        }
+        return normalized;
+    }
     async parse() {
+        const { maxEntries, maxEntryBytes, maxUncompressedBytes } = this.limits;
         const entries = new Map();
         let totalUncompressedBytes = 0;
+        let entryCount = 0;
+        let firstFileSeen = false;
         return await new Promise((resolve, reject) => {
-            const parser = new tar_1.Parser();
+            const parser = new tar_1.Parser({ strict: true });
+            let aborted = false;
+            const fail = (message) => {
+                if (aborted)
+                    return;
+                aborted = true;
+                try {
+                    parser.abort(new Error(message));
+                }
+                catch {
+                }
+                reject(new bad_request_error_1.BadRequestError(message));
+            };
+            const accept = (entry) => {
+                if (++entryCount > maxEntries) {
+                    throw new bad_request_error_1.BadRequestError('Package contains too many entries');
+                }
+                if (entry.type !== 'File' && entry.type !== 'Directory') {
+                    throw new bad_request_error_1.BadRequestError(`Package contains a disallowed entry type for "${entry.path}"`);
+                }
+                const safePath = this.validateEntryPath(entry.path);
+                if (entries.has(safePath)) {
+                    throw new bad_request_error_1.BadRequestError(`Package contains a duplicate entry for "${safePath}"`);
+                }
+                if (entry.type === 'Directory')
+                    return null;
+                if (!firstFileSeen) {
+                    firstFileSeen = true;
+                    if (safePath !== MANIFEST_PATH) {
+                        throw new bad_request_error_1.BadRequestError(`Package must begin with ${MANIFEST_PATH} but found "${safePath}"`);
+                    }
+                }
+                return safePath;
+            };
             parser.on('entry', (entry) => {
-                if (entry.type !== 'File') {
+                let validated = null;
+                if (!aborted) {
+                    try {
+                        validated = accept(entry);
+                    }
+                    catch (error) {
+                        fail(error instanceof bad_request_error_1.BadRequestError ? error.message : 'Invalid package entry path');
+                    }
+                }
+                if (validated === null) {
                     entry.resume();
                     return;
                 }
+                const safePath = validated;
                 const chunks = [];
                 let entryBytes = 0;
                 entry.on('data', (chunk) => {
+                    if (aborted)
+                        return;
                     entryBytes += chunk.length;
-                    if (entryBytes > this.maxUncompressedBytes) {
-                        reject(new bad_request_error_1.BadRequestError(`Package entry "${entry.path}" exceeds the maximum allowed uncompressed size`));
+                    if (entryBytes > maxEntryBytes) {
+                        fail(`Package entry "${safePath}" exceeds the maximum allowed uncompressed size per entry`);
+                        return;
+                    }
+                    totalUncompressedBytes += chunk.length;
+                    if (totalUncompressedBytes > maxUncompressedBytes) {
+                        fail('Package exceeds the maximum allowed uncompressed size');
                         return;
                     }
                     chunks.push(chunk);
                 });
                 entry.on('end', () => {
-                    const content = Buffer.concat(chunks);
-                    totalUncompressedBytes += content.length;
-                    if (totalUncompressedBytes > this.maxUncompressedBytes) {
-                        reject(new bad_request_error_1.BadRequestError('Package exceeds the maximum allowed uncompressed size'));
-                        return;
-                    }
-                    entries.set(entry.path, content);
+                    if (!aborted)
+                        entries.set(safePath, Buffer.concat(chunks));
                 });
                 entry.resume();
             });
-            parser.on('error', (error) => {
-                reject(new bad_request_error_1.BadRequestError(error instanceof Error ? error.message : 'Failed to read package archive'));
+            parser.on('error', () => {
+                if (aborted)
+                    return;
+                aborted = true;
+                reject(new bad_request_error_1.BadRequestError('Failed to read package archive'));
+            });
+            parser.on('end', () => {
+                if (!aborted)
+                    resolve(entries);
             });
-            parser.on('end', () => resolve(entries));
             parser.end(this.buffer);
         });
     }

package/dist/modules/n8n-packages/io/tar/tar-package-reader.js.map

@@ -1 +1 @@
-{"version":3,"file":"tar-package-reader.js","sourceRoot":"","sources":["../../../../../src/modules/n8n-packages/io/tar/tar-package-reader.ts"],"names":[],"mappings":";;;AAAA,6BAA6C;AAE7C,kFAA6E;AAK7E,MAAM,aAAa,GAAG,eAAe,CAAC;AAEtC,MAAa,gBAAgB;IAG5B,YACkB,MAAc,EACd,oBAA4B;QAD5B,WAAM,GAAN,MAAM,CAAQ;QACd,yBAAoB,GAApB,oBAAoB,CAAQ;QAJtC,YAAO,GAA+B,IAAI,CAAC;IAKhD,CAAC;IAEJ,KAAK,CAAC,YAAY;QACjB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,IAAI,mCAAe,CAAC,kCAAkC,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC;YACJ,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAoB,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,mCAAe,CAAC,oCAAoC,CAAC,CAAC;QACjE,CAAC;IACF,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY;QAC1B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,IAAI,mCAAe,CAAC,mCAAmC,IAAI,EAAE,CAAC,CAAC;QACtE,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,WAAW;QAChB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACnC,CAAC;IAEO,KAAK,CAAC,IAAI;QACjB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QACtC,IAAI,CAAC,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,OAAO,CAAC;IACrB,CAAC;IAEO,KAAK,CAAC,KAAK;QAClB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC1C,IAAI,sBAAsB,GAAG,CAAC,CAAC;QAE/B,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC5C,MAAM,MAAM,GAAG,IAAI,YAAM,EAAE,CAAC;YAC5B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAgB,EAAE,EAAE;gBACvC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;oBAC3B,KAAK,CAAC,MAAM,EAAE,CAAC;oBACf,OAAO;gBACR,CAAC;gBACD,MAAM,MAAM,GAAa,EAAE,CAAC;gBAC5B,IAAI,UAAU,GAAG,CAAC,CAAC;gBACnB,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;oBAClC,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC;oBAC3B,IAAI,UAAU,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;wBAC5C,MAAM,CACL,IAAI,mCAAe,CAClB,kBAAkB,KAAK,CAAC,IAAI,iDAAiD,CAC7E,CACD,CAAC;wBACF,OAAO;oBACR,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACpB,CAAC,CAAC,CAAC;gBACH,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACpB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;oBACtC,sBAAsB,IAAI,OAAO,CAAC,MAAM,CAAC;oBACzC,IAAI,sBAAsB,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;wBACxD,MAAM,CAAC,IAAI,mCAAe,CAAC,uDAAuD,CAAC,CAAC,CAAC;wBACrF,OAAO;oBACR,CAAC;oBACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;gBAClC,CAAC,CAAC,CAAC;gBACH,KAAK,CAAC,MAAM,EAAE,CAAC;YAChB,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC5B,MAAM,CACL,IAAI,mCAAe,CAClB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gCAAgC,CACzE,CACD,CAAC;YACH,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YACzC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACJ,CAAC;CACD;AAxFD,4CAwFC"}
+{"version":3,"file":"tar-package-reader.js","sourceRoot":"","sources":["../../../../../src/modules/n8n-packages/io/tar/tar-package-reader.ts"],"names":[],"mappings":";;;;;;AAAA,+CAAyC;AACzC,0DAA6B;AAC7B,6BAA6C;AAE7C,kFAA6E;AAK7E,MAAM,aAAa,GAAG,eAAe,CAAC;AACtC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAShD,MAAa,gBAAgB;IAG5B,YACkB,MAAc,EACd,MAAuB;QADvB,WAAM,GAAN,MAAM,CAAQ;QACd,WAAM,GAAN,MAAM,CAAiB;QAJjC,YAAO,GAA+B,IAAI,CAAC;IAKhD,CAAC;IAEJ,KAAK,CAAC,YAAY;QACjB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,IAAI,mCAAe,CAAC,kCAAkC,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,CAAC;YACJ,OAAO,IAAA,wBAAS,EAAkB,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/D,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,mCAAe,CAAC,oCAAoC,CAAC,CAAC;QACjE,CAAC;IACF,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,SAAiB;QAC/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,IAAI,mCAAe,CAAC,mCAAmC,SAAS,EAAE,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,WAAW;QAChB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACnC,CAAC;IAEO,KAAK,CAAC,IAAI;QACjB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC;QACtC,IAAI,CAAC,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,OAAO,CAAC;IACrB,CAAC;IAEO,iBAAiB,CAAC,OAAe;QACxC,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAEvE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,mCAAe,CAAC,8CAA8C,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAChD,MAAM,IAAI,mCAAe,CAAC,uDAAuD,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,mCAAe,CAAC,uBAAuB,OAAO,oBAAoB,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,mCAAe,CAAC,uBAAuB,OAAO,kCAAkC,CAAC,CAAC;QAC7F,CAAC;QAED,MAAM,UAAU,GAAG,mBAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACjD,IACC,UAAU,KAAK,IAAI;YACnB,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC;YAC5B,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC3B,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EACzB,CAAC;YACF,MAAM,IAAI,mCAAe,CACxB,uBAAuB,OAAO,uCAAuC,CACrE,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,oBAAoB,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QACxE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC1C,IAAI,sBAAsB,GAAG,CAAC,CAAC;QAC/B,IAAI,UAAU,GAAG,CAAC,CAAC;QACnB,IAAI,aAAa,GAAG,KAAK,CAAC;QAE1B,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAI5C,MAAM,MAAM,GAAG,IAAI,YAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5C,IAAI,OAAO,GAAG,KAAK,CAAC;YAEpB,MAAM,IAAI,GAAG,CAAC,OAAe,EAAQ,EAAE;gBACtC,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,IAAI,CAAC;oBACJ,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;gBAClC,CAAC;gBAAC,MAAM,CAAC;gBAET,CAAC;gBACD,MAAM,CAAC,IAAI,mCAAe,CAAC,OAAO,CAAC,CAAC,CAAC;YACtC,CAAC,CAAC;YAGF,MAAM,MAAM,GAAG,CAAC,KAAgB,EAAiB,EAAE;gBAClD,IAAI,EAAE,UAAU,GAAG,UAAU,EAAE,CAAC;oBAC/B,MAAM,IAAI,mCAAe,CAAC,mCAAmC,CAAC,CAAC;gBAChE,CAAC;gBACD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBACzD,MAAM,IAAI,mCAAe,CAAC,iDAAiD,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;gBAC3F,CAAC;gBAED,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACpD,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC3B,MAAM,IAAI,mCAAe,CAAC,2CAA2C,QAAQ,GAAG,CAAC,CAAC;gBACnF,CAAC;gBACD,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;oBAAE,OAAO,IAAI,CAAC;gBAE5C,IAAI,CAAC,aAAa,EAAE,CAAC;oBACpB,aAAa,GAAG,IAAI,CAAC;oBACrB,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;wBAChC,MAAM,IAAI,mCAAe,CACxB,2BAA2B,aAAa,eAAe,QAAQ,GAAG,CAClE,CAAC;oBACH,CAAC;gBACF,CAAC;gBACD,OAAO,QAAQ,CAAC;YACjB,CAAC,CAAC;YAEF,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAgB,EAAE,EAAE;gBACvC,IAAI,SAAS,GAAkB,IAAI,CAAC;gBACpC,IAAI,CAAC,OAAO,EAAE,CAAC;oBACd,IAAI,CAAC;wBACJ,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;oBAC3B,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAChB,IAAI,CAAC,KAAK,YAAY,mCAAe,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC;oBACvF,CAAC;gBACF,CAAC;gBACD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;oBACxB,KAAK,CAAC,MAAM,EAAE,CAAC;oBACf,OAAO;gBACR,CAAC;gBACD,MAAM,QAAQ,GAAG,SAAS,CAAC;gBAE3B,MAAM,MAAM,GAAa,EAAE,CAAC;gBAC5B,IAAI,UAAU,GAAG,CAAC,CAAC;gBACnB,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;oBAClC,IAAI,OAAO;wBAAE,OAAO;oBACpB,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC;oBAC3B,IAAI,UAAU,GAAG,aAAa,EAAE,CAAC;wBAChC,IAAI,CACH,kBAAkB,QAAQ,2DAA2D,CACrF,CAAC;wBACF,OAAO;oBACR,CAAC;oBACD,sBAAsB,IAAI,KAAK,CAAC,MAAM,CAAC;oBACvC,IAAI,sBAAsB,GAAG,oBAAoB,EAAE,CAAC;wBACnD,IAAI,CAAC,uDAAuD,CAAC,CAAC;wBAC9D,OAAO;oBACR,CAAC;oBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACpB,CAAC,CAAC,CAAC;gBACH,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACpB,IAAI,CAAC,OAAO;wBAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC5D,CAAC,CAAC,CAAC;gBACH,KAAK,CAAC,MAAM,EAAE,CAAC;YAChB,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACvB,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,MAAM,CAAC,IAAI,mCAAe,CAAC,gCAAgC,CAAC,CAAC,CAAC;YAC/D,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACrB,IAAI,CAAC,OAAO;oBAAE,OAAO,CAAC,OAAO,CAAC,CAAC;YAChC,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACJ,CAAC;CACD;AA7KD,4CA6KC"}

package/dist/modules/n8n-packages/n8n-packages.config.d.ts

@@ -0,0 +1,6 @@
+export declare class PackageImportConfig {
+    maxUncompressedBytes: number;
+    maxEntryBytes: number;
+    maxEntries: number;
+    maxPathLength: number;
+}