n8n 2.36.5 → 2.37.0

package/dist/modules/git-connections.ee/database/repositories/git-connection.repository.js

@@ -0,0 +1,37 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GitConnectionRepository = void 0;
+const di_1 = require("@n8n/di");
+const typeorm_1 = require("@n8n/typeorm");
+const git_connection_entity_1 = require("../entities/git-connection.entity");
+let GitConnectionRepository = class GitConnectionRepository extends typeorm_1.Repository {
+    constructor(dataSource) {
+        super(git_connection_entity_1.GitConnection, dataSource.manager);
+    }
+    async getManyAndCount(options) {
+        if (options.take <= 0) {
+            return { count: await this.count(), data: [] };
+        }
+        const [data, count] = await this.findAndCount({
+            order: { id: 'ASC' },
+            skip: options.skip,
+            take: options.take,
+        });
+        return { count, data };
+    }
+};
+exports.GitConnectionRepository = GitConnectionRepository;
+exports.GitConnectionRepository = GitConnectionRepository = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [typeorm_1.DataSource])
+], GitConnectionRepository);
+//# sourceMappingURL=git-connection.repository.js.map

package/dist/modules/git-connections.ee/database/repositories/git-connection.repository.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-connection.repository.js","sourceRoot":"","sources":["../../../../../src/modules/git-connections.ee/database/repositories/git-connection.repository.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gCAAkC;AAClC,0CAAsD;AAEtD,6EAAkE;AAG3D,IAAM,uBAAuB,GAA7B,MAAM,uBAAwB,SAAQ,oBAAyB;IACrE,YAAY,UAAsB;QACjC,KAAK,CAAC,qCAAa,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,OAAuC;QAG5D,IAAI,OAAO,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAChD,CAAC;QAED,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC;YAC7C,KAAK,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE;YACpB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;SAClB,CAAC,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC;CACD,CAAA;;kCAnBY,uBAAuB;IADnC,IAAA,YAAO,GAAE;qCAEe,oBAAU;GADtB,uBAAuB,CAmBnC"}

package/dist/modules/git-connections.ee/git-connections-git.service.d.ts

@@ -0,0 +1,33 @@
+import type { GitConnectionType, GitKeyGeneratorType } from '@n8n/api-types';
+import { Logger } from '@n8n/backend-common';
+import type { GitConnection } from './database/entities/git-connection.entity';
+type PlainCredentials = {
+    type: 'ssh';
+    privateKey: string;
+} | {
+    type: 'https';
+    username: string;
+    password: string;
+};
+export declare class GitConnectionsGitService {
+    private readonly logger;
+    constructor(logger: Logger);
+    validateRepositoryUrl(repositoryUrl: string, connectionType: GitConnectionType): void;
+    private validateHttpsRepositoryUrl;
+    private validateSshRepositoryUrl;
+    validateBranchName(branchName: string): Promise<void>;
+    generateSshKeyPair(keyType: GitKeyGeneratorType): Promise<{
+        publicKey: string;
+        privateKey: string;
+    }>;
+    clone({ connection, credentials, branchName, rootFolder, }: {
+        connection: GitConnection;
+        credentials: PlainCredentials;
+        branchName: string;
+        rootFolder: string;
+    }): Promise<void>;
+    resetWorkingCopy(rootFolder: string): Promise<void>;
+    cleanup(rootFolder: string): Promise<void>;
+    private withGit;
+}
+export {};

package/dist/modules/git-connections.ee/git-connections-git.service.js

@@ -0,0 +1,191 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GitConnectionsGitService = void 0;
+const backend_common_1 = require("@n8n/backend-common");
+const di_1 = require("@n8n/di");
+const promises_1 = require("node:fs/promises");
+const node_os_1 = require("node:os");
+const node_path_1 = __importDefault(require("node:path"));
+const bad_request_error_1 = require("../../errors/response-errors/bad-request.error");
+const constants_1 = require("./constants");
+const git_connections_git_utils_1 = require("./git-connections-git.utils");
+let GitConnectionsGitService = class GitConnectionsGitService {
+    constructor(logger) {
+        this.logger = logger;
+        this.logger = this.logger.scoped('git-connections');
+    }
+    validateRepositoryUrl(repositoryUrl, connectionType) {
+        for (const char of repositoryUrl) {
+            const code = char.charCodeAt(0);
+            if (code < 32 || code === 127) {
+                throw new bad_request_error_1.BadRequestError('Repository URL must not contain control characters');
+            }
+        }
+        if (connectionType === 'https') {
+            this.validateHttpsRepositoryUrl(repositoryUrl);
+        }
+        else {
+            this.validateSshRepositoryUrl(repositoryUrl);
+        }
+    }
+    validateHttpsRepositoryUrl(repositoryUrl) {
+        let url;
+        try {
+            url = new URL(repositoryUrl);
+        }
+        catch {
+            throw new bad_request_error_1.BadRequestError('Repository URL must be a valid HTTP or HTTPS URL');
+        }
+        if (!['http:', 'https:'].includes(url.protocol)) {
+            throw new bad_request_error_1.BadRequestError('HTTPS connections require an HTTP or HTTPS repository URL');
+        }
+        if (url.username || url.password) {
+            throw new bad_request_error_1.BadRequestError('Repository URL must not contain credentials');
+        }
+    }
+    validateSshRepositoryUrl(repositoryUrl) {
+        const error = new bad_request_error_1.BadRequestError('SSH connections require an ssh:// or user@host:path repository URL');
+        if (repositoryUrl.startsWith('-') || repositoryUrl.includes('::'))
+            throw error;
+        const scheme = /^([a-zA-Z][a-zA-Z0-9+.-]*):\/\//.exec(repositoryUrl);
+        if (scheme) {
+            if (scheme[1].toLowerCase() !== 'ssh')
+                throw error;
+            let url;
+            try {
+                url = new URL(repositoryUrl);
+            }
+            catch {
+                throw error;
+            }
+            if (url.password)
+                throw new bad_request_error_1.BadRequestError('Repository URL must not contain credentials');
+            if (!url.hostname || !url.pathname || url.pathname === '/')
+                throw error;
+            return;
+        }
+        if (process.platform === 'win32' && /^[a-zA-Z]:/.test(repositoryUrl))
+            throw error;
+        const isScpLike = /^(?:[a-zA-Z0-9_.-]+@)?[a-zA-Z0-9._][a-zA-Z0-9._-]*:[^\s]+$/.test(repositoryUrl);
+        if (!isScpLike)
+            throw error;
+    }
+    async validateBranchName(branchName) {
+        const { simpleGit } = await import('simple-git');
+        try {
+            await simpleGit().raw(['check-ref-format', '--branch', branchName]);
+        }
+        catch {
+            throw new bad_request_error_1.BadRequestError(`Invalid Git branch name: ${branchName}`);
+        }
+    }
+    async generateSshKeyPair(keyType) {
+        return await (0, git_connections_git_utils_1.generateSshKeyPair)(keyType, constants_1.GIT_KEY_COMMENT);
+    }
+    async clone({ connection, credentials, branchName, rootFolder, }) {
+        await this.validateBranchName(branchName);
+        await (0, promises_1.mkdir)(rootFolder, { recursive: true });
+        const repositoryFolder = node_path_1.default.join(rootFolder, 'repository');
+        const nextRepositoryFolder = node_path_1.default.join(rootFolder, 'repository-next');
+        await (0, promises_1.rm)(nextRepositoryFolder, { recursive: true, force: true });
+        try {
+            await this.withGit({ connection, credentials, baseDir: rootFolder }, async (git) => {
+                const remoteRefs = await git.listRemote([
+                    '--heads',
+                    connection.repositoryUrl,
+                    `refs/heads/${branchName}`,
+                ]);
+                if (!remoteRefs.trim()) {
+                    throw new bad_request_error_1.BadRequestError(`Remote branch does not exist: ${branchName}`);
+                }
+                await git.clone(connection.repositoryUrl, nextRepositoryFolder, [
+                    '--branch',
+                    branchName,
+                    '--single-branch',
+                    '--no-tags',
+                    '--progress',
+                ]);
+                await (0, promises_1.rm)(repositoryFolder, { recursive: true, force: true });
+                await (0, promises_1.rename)(nextRepositoryFolder, repositoryFolder);
+            });
+        }
+        catch (error) {
+            await (0, promises_1.rm)(nextRepositoryFolder, { recursive: true, force: true });
+            if (error instanceof bad_request_error_1.BadRequestError)
+                throw error;
+            this.logger.warn('Failed to connect to Git repository', {
+                connectionId: connection.id,
+                branchName,
+            });
+            throw new bad_request_error_1.BadRequestError('Could not connect to the Git repository');
+        }
+    }
+    async resetWorkingCopy(rootFolder) {
+        await (0, promises_1.rm)(node_path_1.default.join(rootFolder, 'repository'), { recursive: true, force: true });
+        await (0, promises_1.rm)(node_path_1.default.join(rootFolder, 'repository-next'), { recursive: true, force: true });
+    }
+    async cleanup(rootFolder) {
+        await (0, promises_1.rm)(rootFolder, { recursive: true, force: true });
+    }
+    async withGit({ connection, credentials, baseDir, }, operation) {
+        await (0, promises_1.mkdir)(baseDir, { recursive: true });
+        const options = {
+            baseDir,
+            binary: 'git',
+            maxConcurrentProcesses: 1,
+            trimmed: false,
+            timeout: { block: constants_1.GIT_COMMAND_STALL_TIMEOUT_MS },
+        };
+        const { simpleGit } = await import('simple-git');
+        let temporaryFolder;
+        try {
+            let git;
+            if (credentials.type === 'https') {
+                const config = (0, git_connections_git_utils_1.buildHttpsGitConfig)(connection.repositoryUrl, credentials);
+                git = simpleGit({
+                    ...options,
+                    config,
+                    unsafe: { allowUnsafeCredentialHelper: true },
+                }).env('GIT_TERMINAL_PROMPT', '0');
+            }
+            else {
+                temporaryFolder = await (0, promises_1.mkdtemp)(node_path_1.default.join((0, node_os_1.tmpdir)(), 'n8n-git-connection-'));
+                const privateKeyPath = node_path_1.default.join(temporaryFolder, 'private-key');
+                await (0, promises_1.writeFile)(privateKeyPath, credentials.privateKey, { mode: 0o600 });
+                await (0, promises_1.chmod)(privateKeyPath, 0o600);
+                const sshFolder = node_path_1.default.join(baseDir, '.ssh');
+                await (0, promises_1.mkdir)(sshFolder, { recursive: true });
+                const sshCommand = (0, git_connections_git_utils_1.buildSshCommand)({
+                    privateKeyPath,
+                    knownHostsPath: node_path_1.default.join(sshFolder, 'known_hosts'),
+                });
+                git = simpleGit({ ...options, unsafe: { allowUnsafeSshCommand: true } })
+                    .env('GIT_SSH_COMMAND', sshCommand)
+                    .env('GIT_TERMINAL_PROMPT', '0');
+            }
+            return await operation(git);
+        }
+        finally {
+            if (temporaryFolder)
+                await (0, promises_1.rm)(temporaryFolder, { recursive: true, force: true });
+        }
+    }
+};
+exports.GitConnectionsGitService = GitConnectionsGitService;
+exports.GitConnectionsGitService = GitConnectionsGitService = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [backend_common_1.Logger])
+], GitConnectionsGitService);
+//# sourceMappingURL=git-connections-git.service.js.map

package/dist/modules/git-connections.ee/git-connections-git.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-connections-git.service.js","sourceRoot":"","sources":["../../../src/modules/git-connections.ee/git-connections-git.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AACA,wDAA6C;AAC7C,gCAAkC;AAClC,+CAAgF;AAChF,qCAAiC;AACjC,0DAA6B;AAG7B,kFAA6E;AAE7E,2CAA4E;AAE5E,2EAIqC;AAO9B,IAAM,wBAAwB,GAA9B,MAAM,wBAAwB;IACpC,YAA6B,MAAc;sBAAd,MAAM;QAClC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACrD,CAAC;IAED,qBAAqB,CAAC,aAAqB,EAAE,cAAiC;QAG7E,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAChC,IAAI,IAAI,GAAG,EAAE,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC/B,MAAM,IAAI,mCAAe,CAAC,oDAAoD,CAAC,CAAC;YACjF,CAAC;QACF,CAAC;QACD,IAAI,cAAc,KAAK,OAAO,EAAE,CAAC;YAChC,IAAI,CAAC,0BAA0B,CAAC,aAAa,CAAC,CAAC;QAChD,CAAC;aAAM,CAAC;YACP,IAAI,CAAC,wBAAwB,CAAC,aAAa,CAAC,CAAC;QAC9C,CAAC;IACF,CAAC;IAMO,0BAA0B,CAAC,aAAqB;QACvD,IAAI,GAAQ,CAAC;QACb,IAAI,CAAC;YACJ,GAAG,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,mCAAe,CAAC,kDAAkD,CAAC,CAAC;QAC/E,CAAC;QACD,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjD,MAAM,IAAI,mCAAe,CAAC,2DAA2D,CAAC,CAAC;QACxF,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YAClC,MAAM,IAAI,mCAAe,CAAC,6CAA6C,CAAC,CAAC;QAC1E,CAAC;IACF,CAAC;IASO,wBAAwB,CAAC,aAAqB;QACrD,MAAM,KAAK,GAAG,IAAI,mCAAe,CAChC,oEAAoE,CACpE,CAAC;QAEF,IAAI,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,KAAK,CAAC;QAE/E,MAAM,MAAM,GAAG,iCAAiC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACrE,IAAI,MAAM,EAAE,CAAC;YACZ,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK;gBAAE,MAAM,KAAK,CAAC;YACnD,IAAI,GAAQ,CAAC;YACb,IAAI,CAAC;gBACJ,GAAG,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;YAC9B,CAAC;YAAC,MAAM,CAAC;gBACR,MAAM,KAAK,CAAC;YACb,CAAC;YAID,IAAI,GAAG,CAAC,QAAQ;gBAAE,MAAM,IAAI,mCAAe,CAAC,6CAA6C,CAAC,CAAC;YAC3F,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG;gBAAE,MAAM,KAAK,CAAC;YACxE,OAAO;QACR,CAAC;QAQD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC;YAAE,MAAM,KAAK,CAAC;QAGlF,MAAM,SAAS,GAAG,4DAA4D,CAAC,IAAI,CAClF,aAAa,CACb,CAAC;QACF,IAAI,CAAC,SAAS;YAAE,MAAM,KAAK,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,UAAkB;QAC1C,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;QACjD,IAAI,CAAC;YACJ,MAAM,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC,kBAAkB,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;QACrE,CAAC;QAAC,MAAM,CAAC;YACR,MAAM,IAAI,mCAAe,CAAC,4BAA4B,UAAU,EAAE,CAAC,CAAC;QACrE,CAAC;IACF,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,OAA4B;QACpD,OAAO,MAAM,IAAA,8CAAkB,EAAC,OAAO,EAAE,2BAAe,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,EACX,UAAU,EACV,WAAW,EACX,UAAU,EACV,UAAU,GAMV;QACA,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,IAAA,gBAAK,EAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,gBAAgB,GAAG,mBAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;QAC7D,MAAM,oBAAoB,GAAG,mBAAI,CAAC,IAAI,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;QACtE,MAAM,IAAA,aAAE,EAAC,oBAAoB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAEjE,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;gBAClF,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,UAAU,CAAC;oBACvC,SAAS;oBACT,UAAU,CAAC,aAAa;oBACxB,cAAc,UAAU,EAAE;iBAC1B,CAAC,CAAC;gBACH,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC;oBACxB,MAAM,IAAI,mCAAe,CAAC,iCAAiC,UAAU,EAAE,CAAC,CAAC;gBAC1E,CAAC;gBACD,MAAM,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,EAAE,oBAAoB,EAAE;oBAC/D,UAAU;oBACV,UAAU;oBACV,iBAAiB;oBACjB,WAAW;oBAGX,YAAY;iBACZ,CAAC,CAAC;gBACH,MAAM,IAAA,aAAE,EAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7D,MAAM,IAAA,iBAAM,EAAC,oBAAoB,EAAE,gBAAgB,CAAC,CAAC;YACtD,CAAC,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAA,aAAE,EAAC,oBAAoB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACjE,IAAI,KAAK,YAAY,mCAAe;gBAAE,MAAM,KAAK,CAAC;YAGlD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE;gBACvD,YAAY,EAAE,UAAU,CAAC,EAAE;gBAC3B,UAAU;aACV,CAAC,CAAC;YACH,MAAM,IAAI,mCAAe,CAAC,yCAAyC,CAAC,CAAC;QACtE,CAAC;IACF,CAAC;IAOD,KAAK,CAAC,gBAAgB,CAAC,UAAkB;QACxC,MAAM,IAAA,aAAE,EAAC,mBAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAChF,MAAM,IAAA,aAAE,EAAC,mBAAI,CAAC,IAAI,CAAC,UAAU,EAAE,iBAAiB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtF,CAAC;IAGD,KAAK,CAAC,OAAO,CAAC,UAAkB;QAC/B,MAAM,IAAA,aAAE,EAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;IASO,KAAK,CAAC,OAAO,CACpB,EACC,UAAU,EACV,WAAW,EACX,OAAO,GAKP,EACD,SAAyC;QAEzC,MAAM,IAAA,gBAAK,EAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,OAAO,GAA8B;YAC1C,OAAO;YACP,MAAM,EAAE,KAAK;YACb,sBAAsB,EAAE,CAAC;YACzB,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,EAAE,KAAK,EAAE,wCAA4B,EAAE;SAChD,CAAC;QACF,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;QACjD,IAAI,eAAmC,CAAC;QAExC,IAAI,CAAC;YACJ,IAAI,GAAc,CAAC;YACnB,IAAI,WAAW,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAClC,MAAM,MAAM,GAAG,IAAA,+CAAmB,EAAC,UAAU,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;gBAE1E,GAAG,GAAG,SAAS,CAAC;oBACf,GAAG,OAAO;oBACV,MAAM;oBACN,MAAM,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE;iBAC7C,CAAC,CAAC,GAAG,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;YACpC,CAAC;iBAAM,CAAC;gBACP,eAAe,GAAG,MAAM,IAAA,kBAAO,EAAC,mBAAI,CAAC,IAAI,CAAC,IAAA,gBAAM,GAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;gBAC5E,MAAM,cAAc,GAAG,mBAAI,CAAC,IAAI,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;gBACjE,MAAM,IAAA,oBAAS,EAAC,cAAc,EAAE,WAAW,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACzE,MAAM,IAAA,gBAAK,EAAC,cAAc,EAAE,KAAK,CAAC,CAAC;gBACnC,MAAM,SAAS,GAAG,mBAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAC7C,MAAM,IAAA,gBAAK,EAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC5C,MAAM,UAAU,GAAG,IAAA,2CAAe,EAAC;oBAClC,cAAc;oBACd,cAAc,EAAE,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC;iBACnD,CAAC,CAAC;gBACH,GAAG,GAAG,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE,EAAE,CAAC;qBACtE,GAAG,CAAC,iBAAiB,EAAE,UAAU,CAAC;qBAClC,GAAG,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;YACnC,CAAC;YACD,OAAO,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;gBAAS,CAAC;YACV,IAAI,eAAe;gBAAE,MAAM,IAAA,aAAE,EAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;IACF,CAAC;CACD,CAAA;;mCAlOY,wBAAwB;IADpC,IAAA,YAAO,GAAE;qCAE4B,uBAAM;GAD/B,wBAAwB,CAkOpC"}

package/dist/modules/git-connections.ee/git-connections-git.utils.d.ts

@@ -0,0 +1,13 @@
+import type { GitKeyGeneratorType } from '@n8n/api-types';
+export declare function buildHttpsGitConfig(repositoryUrl: string, credentials: {
+    username: string;
+    password: string;
+}): string[];
+export declare function buildSshCommand(paths: {
+    privateKeyPath: string;
+    knownHostsPath: string;
+}): string;
+export declare function generateSshKeyPair(keyType: GitKeyGeneratorType, comment: string): Promise<{
+    publicKey: string;
+    privateKey: string;
+}>;

package/dist/modules/git-connections.ee/git-connections-git.utils.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildHttpsGitConfig = buildHttpsGitConfig;
+exports.buildSshCommand = buildSshCommand;
+exports.generateSshKeyPair = generateSshKeyPair;
+const backend_network_1 = require("@n8n/backend-network");
+const node_crypto_1 = require("node:crypto");
+const constants_1 = require("./constants");
+const quoteShellArg = (value) => `'${value.replace(/'/g, "'\"'\"'")}'`;
+function buildHttpsGitConfig(repositoryUrl, credentials) {
+    const helper = `!f() { echo username=${quoteShellArg(credentials.username)}; echo password=${quoteShellArg(credentials.password)}; }; f`;
+    const config = [
+        `credential.helper=${helper}`,
+        'credential.useHttpPath=true',
+        `http.lowSpeedLimit=${constants_1.HTTP_LOW_SPEED_LIMIT_BYTES}`,
+        `http.lowSpeedTime=${constants_1.HTTP_LOW_SPEED_TIME_SECONDS}`,
+    ];
+    const proxyUrl = (0, backend_network_1.resolveProxyUrl)(repositoryUrl);
+    if (proxyUrl)
+        config.push(`http.proxy=${proxyUrl}`);
+    return config;
+}
+function buildSshCommand(paths) {
+    const normalizeAndQuote = (value) => quoteShellArg(value.split(/[/\\]/).join('/'));
+    const timeouts = `-o ConnectTimeout=${constants_1.SSH_CONNECT_TIMEOUT_SECONDS} -o ServerAliveInterval=${constants_1.SSH_SERVER_ALIVE_INTERVAL_SECONDS} -o ServerAliveCountMax=${constants_1.SSH_SERVER_ALIVE_COUNT_MAX}`;
+    return `ssh ${timeouts} -o UserKnownHostsFile=${normalizeAndQuote(paths.knownHostsPath)} -o StrictHostKeyChecking=accept-new -i ${normalizeAndQuote(paths.privateKeyPath)}`;
+}
+async function generateSshKeyPair(keyType, comment) {
+    const { default: sshpk } = await import('sshpk');
+    const generated = keyType === 'ed25519'
+        ? (0, node_crypto_1.generateKeyPairSync)('ed25519', {
+            privateKeyEncoding: { format: 'pem', type: 'pkcs8' },
+            publicKeyEncoding: { format: 'pem', type: 'spki' },
+        })
+        : (0, node_crypto_1.generateKeyPairSync)('rsa', {
+            modulusLength: 4096,
+            privateKeyEncoding: { format: 'pem', type: 'pkcs8' },
+            publicKeyEncoding: { format: 'pem', type: 'spki' },
+        });
+    const publicKey = sshpk.parseKey(generated.publicKey, 'pem');
+    publicKey.comment = comment;
+    const privateKey = sshpk.parsePrivateKey(generated.privateKey, 'pem');
+    privateKey.comment = comment;
+    return {
+        publicKey: publicKey.toString('ssh'),
+        privateKey: privateKey.toString('ssh-private'),
+    };
+}
+//# sourceMappingURL=git-connections-git.utils.js.map

package/dist/modules/git-connections.ee/git-connections-git.utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-connections-git.utils.js","sourceRoot":"","sources":["../../../src/modules/git-connections.ee/git-connections-git.utils.ts"],"names":[],"mappings":";;;;;AACA,0DAAuD;AACvD,6CAAkD;AAElD,2CAMqB;AAGrB,MAAM,aAAa,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC;AAQ/E,6BACC,aAAqB,EACrB,WAAmD;IAEnD,MAAM,MAAM,GAAG,wBAAwB,aAAa,CAAC,WAAW,CAAC,QAAQ,CAAC,mBAAmB,aAAa,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC;IACzI,MAAM,MAAM,GAAG;QACd,qBAAqB,MAAM,EAAE;QAC7B,6BAA6B;QAC7B,sBAAsB,sCAA0B,EAAE;QAClD,qBAAqB,uCAA2B,EAAE;KAClD,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAA,iCAAe,EAAC,aAAa,CAAC,CAAC;IAChD,IAAI,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,cAAc,QAAQ,EAAE,CAAC,CAAC;IACpD,OAAO,MAAM,CAAC;AACf,CAAC;AAGD,yBAAgC,KAAyD;IACxF,MAAM,iBAAiB,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3F,MAAM,QAAQ,GAAG,qBAAqB,uCAA2B,2BAA2B,6CAAiC,2BAA2B,sCAA0B,EAAE,CAAC;IACrL,OAAO,OAAO,QAAQ,0BAA0B,iBAAiB,CAAC,KAAK,CAAC,cAAc,CAAC,2CAA2C,iBAAiB,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC;AAC7K,CAAC;AAGM,KAAK,6BAA6B,OAA4B,EAAE,OAAe;IAErF,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,SAAS,GACd,OAAO,KAAK,SAAS;QACpB,CAAC,CAAC,IAAA,iCAAmB,EAAC,SAAS,EAAE;YAC/B,kBAAkB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE;YACpD,iBAAiB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE;SAClD,CAAC;QACH,CAAC,CAAC,IAAA,iCAAmB,EAAC,KAAK,EAAE;YAC3B,aAAa,EAAE,IAAI;YACnB,kBAAkB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE;YACpD,iBAAiB,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE;SAClD,CAAC,CAAC;IACN,MAAM,SAAS,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC7D,SAAS,CAAC,OAAO,GAAG,OAAO,CAAC;IAC5B,MAAM,UAAU,GAAG,KAAK,CAAC,eAAe,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACtE,UAAU,CAAC,OAAO,GAAG,OAAO,CAAC;IAC7B,OAAO;QACN,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC;QACpC,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC;KAC9C,CAAC;AACH,CAAC"}

package/dist/modules/git-connections.ee/git-connections.module.d.ts

@@ -0,0 +1,5 @@
+import type { ModuleInterface } from '@n8n/decorators';
+export declare class GitConnectionsModule implements ModuleInterface {
+    init(): Promise<void>;
+    entities(): Promise<(typeof import("./database/entities/git-connection.entity.js").GitConnection | typeof import("./database/entities/git-connection-project.entity.js").GitConnectionProject)[]>;
+}

package/dist/modules/git-connections.ee/git-connections.module.js

@@ -0,0 +1,32 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GitConnectionsModule = void 0;
+const constants_1 = require("@n8n/constants");
+const decorators_1 = require("@n8n/decorators");
+const di_1 = require("@n8n/di");
+let GitConnectionsModule = class GitConnectionsModule {
+    async init() {
+        const { GitConnectionsService } = await import('./git-connections.service.js');
+        di_1.Container.get(GitConnectionsService);
+    }
+    async entities() {
+        const { GitConnection } = await import('./database/entities/git-connection.entity.js');
+        const { GitConnectionProject } = await import('./database/entities/git-connection-project.entity.js');
+        return [GitConnection, GitConnectionProject];
+    }
+};
+exports.GitConnectionsModule = GitConnectionsModule;
+exports.GitConnectionsModule = GitConnectionsModule = __decorate([
+    (0, decorators_1.BackendModule)({
+        name: 'git-connections',
+        licenseFlag: constants_1.LICENSE_FEATURES.GIT_CONNECTIONS,
+        instanceTypes: ['main'],
+    })
+], GitConnectionsModule);
+//# sourceMappingURL=git-connections.module.js.map

package/dist/modules/git-connections.ee/git-connections.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-connections.module.js","sourceRoot":"","sources":["../../../src/modules/git-connections.ee/git-connections.module.ts"],"names":[],"mappings":";;;;;;;;;AAAA,8CAAkD;AAElD,gDAAgD;AAChD,gCAAoC;AAO7B,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAChC,KAAK,CAAC,IAAI;QACT,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;QAC/E,cAAS,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,QAAQ;QACb,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,8CAA8C,CAAC,CAAC;QACvF,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAC5C,sDAAsD,CACtD,CAAC;QACF,OAAO,CAAC,aAAa,EAAE,oBAAoB,CAAC,CAAC;IAC9C,CAAC;CACD,CAAA;;+BAbY,oBAAoB;IALhC,IAAA,0BAAa,EAAC;QACd,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,4BAAgB,CAAC,eAAe;QAC7C,aAAa,EAAE,CAAC,MAAM,CAAC;KACvB,CAAC;GACW,oBAAoB,CAahC"}

package/dist/modules/git-connections.ee/git-connections.service.d.ts

@@ -0,0 +1,64 @@
+import { type CreateGitConnectionDto, GitConnectionProjectListPublicDto, GitConnectionProjectPublicDto, type GitConnectionPublicDto, type GitConnectionPushResultDto, type UpdateGitConnectionDto } from '@n8n/api-types';
+import { Logger } from '@n8n/backend-common';
+import type { User } from '@n8n/db';
+import { ProjectRepository } from '@n8n/db';
+import { Cipher, InstanceSettings } from 'n8n-core';
+import { N8nPackagesService } from '../../modules/n8n-packages/n8n-packages.service';
+import { GitConnectionProjectRepository } from './database/repositories/git-connection-project.repository';
+import { GitConnectionRepository } from './database/repositories/git-connection.repository';
+import { GitConnectionsGitService } from './git-connections-git.service';
+type ManageProjectLinkOptions = {
+    user: User;
+    connectionId: string;
+    projectId: string;
+};
+export declare class GitConnectionsService {
+    private readonly repository;
+    private readonly gitConnectionProjectRepository;
+    private readonly projectRepository;
+    private readonly gitService;
+    private readonly n8nPackagesService;
+    private readonly cipher;
+    private readonly instanceSettings;
+    private readonly logger;
+    constructor(repository: GitConnectionRepository, gitConnectionProjectRepository: GitConnectionProjectRepository, projectRepository: ProjectRepository, gitService: GitConnectionsGitService, n8nPackagesService: N8nPackagesService, cipher: Cipher, instanceSettings: InstanceSettings, logger: Logger);
+    create(input: CreateGitConnectionDto): Promise<GitConnectionPublicDto>;
+    findOne(id: string): Promise<GitConnectionPublicDto>;
+    list(offset: number, limit: number): Promise<{
+        count: number;
+        data: {
+            id: string;
+            name: string;
+            repositoryUrl: string;
+            branchName: string | null;
+            connectionType: "https" | "ssh";
+            keyGeneratorType: "ed25519" | "rsa" | null;
+            baseCommit: string | null;
+            createdAt: string;
+            updatedAt: string;
+        }[];
+    }>;
+    update(id: string, input: UpdateGitConnectionDto): Promise<GitConnectionPublicDto>;
+    clone(id: string, branchName?: string): Promise<GitConnectionPublicDto>;
+    disconnect(id: string): Promise<GitConnectionPublicDto>;
+    delete(id: string): Promise<void>;
+    push(connectionId: string, actor: User): Promise<GitConnectionPushResultDto>;
+    private exportProjectsToRepository;
+    addProject({ user, connectionId, projectId, }: ManageProjectLinkOptions): Promise<GitConnectionProjectPublicDto>;
+    removeProject({ user, connectionId, projectId }: ManageProjectLinkOptions): Promise<void>;
+    listProjects(id: string): Promise<GitConnectionProjectListPublicDto>;
+    private assertProjectAccess;
+    private assertProjectCanBeAdded;
+    private toLinkPublic;
+    private applyNewAuthentication;
+    private applyUpdatedAuthentication;
+    private validateHttpsCredentials;
+    private decryptCredentials;
+    private getEntity;
+    private rootFolder;
+    private resetWorkingCopy;
+    private purge;
+    private toPublic;
+    private toSummary;
+}
+export {};