n8n 2.36.5 → 2.37.0

package/templates/form-shell.handlebars

@@ -60,11 +60,19 @@
 			box-shadow: var(--box-shadow-card);
 			padding: 14px 18px;
 		}
-		.summary-icon { display: flex; flex-shrink: 0; color: var(--color-muted); }
+		.summary-info { position: relative; display: flex; flex-shrink: 0; }
+		.summary-icon { display: flex; background: none; border: 0; padding: 0; cursor: pointer; color: var(--color-muted); }
 		.summary-icon svg { display: block; }
 		.summary-icon .icon-ok, .req-summary.all-connected .summary-icon .icon-pending { display: none; }
 		.req-summary.all-connected .summary-icon { color: var(--color-ok); }
 		.req-summary.all-connected .summary-icon .icon-ok { display: block; }
+		/* Hover/focus for pointer + keyboard; `.open` is the tap toggle (iOS Safari
+		   doesn't focus buttons on tap, so :focus-within alone won't show it there). */
+		.summary-tooltip { display: none; position: absolute; top: 100%; left: -12px; padding-top: 8px; width: min(300px, calc(100vw - 32px)); z-index: 20; }
+		.summary-info:hover .summary-tooltip, .summary-info:focus-within .summary-tooltip, .summary-info.open .summary-tooltip { display: block; }
+		.summary-tooltip-body { display: block; background: var(--color-card-bg); border: 1px solid var(--color-card-border); border-radius: var(--border-radius-card); box-shadow: var(--box-shadow-dialog); padding: 10px 12px; font-size: 12px; line-height: 1.5; color: var(--color-label); }
+		.summary-tooltip-body a { color: var(--color-primary); font-weight: 600; text-decoration: none; white-space: nowrap; }
+		.summary-tooltip-body a:hover { text-decoration: underline; }
 		.summary-text { flex: 1; min-width: 0; font-size: 13px; color: var(--color-header); }
 
 		/* --- Credential row (shared by the single-account panel + dialog) --- */
@@ -170,9 +178,14 @@
 	<div class='shell' data-submitter-email='{{submitterEmail}}'>
 		{{#if useDialog}}
 			<div class='req-summary{{#if allConnected}} all-connected{{/if}}' id='req-summary'>
-				<span class='summary-icon'>
-					<svg class='icon-pending' width='17' height='17' viewBox='0 0 16 16' fill='none' stroke='currentColor' stroke-width='1.3' aria-hidden='true'><circle cx='8' cy='8' r='6.7' /><path d='M8 7.3v3.5' stroke-linecap='round' /><circle cx='8' cy='5.1' r='.8' fill='currentColor' stroke='none' /></svg>
-					<svg class='icon-ok' width='17' height='17' viewBox='0 0 16 16' fill='none' stroke='currentColor' stroke-width='1.3' aria-hidden='true'><circle cx='8' cy='8' r='6.7' /><path d='m5.2 8.2 1.9 1.9 3.7-4' stroke-linecap='round' stroke-linejoin='round' /></svg>
+				<span class='summary-info' id='summary-info'>
+					<button type='button' class='summary-icon' aria-describedby='summary-tooltip' aria-label='About the accounts this form uses'>
+						<svg class='icon-pending' width='17' height='17' viewBox='0 0 16 16' fill='none' stroke='currentColor' stroke-width='1.3' aria-hidden='true'><circle cx='8' cy='8' r='6.7' /><path d='M8 7.3v3.5' stroke-linecap='round' /><circle cx='8' cy='5.1' r='.8' fill='currentColor' stroke='none' /></svg>
+						<svg class='icon-ok' width='17' height='17' viewBox='0 0 16 16' fill='none' stroke='currentColor' stroke-width='1.3' aria-hidden='true'><circle cx='8' cy='8' r='6.7' /><path d='m5.2 8.2 1.9 1.9 3.7-4' stroke-linecap='round' stroke-linejoin='round' /></svg>
+					</button>
+					<span class='summary-tooltip' role='tooltip' id='summary-tooltip'>
+						<span class='summary-tooltip-body'>Submitting this form runs actions on your behalf, using accounts you connect. You can disconnect them at any time. <a href='https://docs.n8n.io/administer/manage-credentials/end-user-credentials' target='_blank' rel='noopener noreferrer'>Learn more</a></span>
+					</span>
 				</span>
 				<span class='summary-text' id='summary-text'>{{summaryText}}</span>
 				<button class='btn btn-primary' id='open-dialog'><span class='dot'></span><span class='label'>{{#if allConnected}}Manage{{else}}Connect{{/if}}</span></button>
@@ -318,6 +331,51 @@
 
 			var pendingId = null;
 
+			// The frame is sandboxed to an opaque origin, so its own navigations are
+			// treated as cross-site and lose the form's auth cookie. It asks the shell to
+			// move it instead, and the shell — on the real origin — sets `src`, which is a
+			// same-origin navigation that keeps the cookie. Narrowed to this form's own
+			// follow-up pages: the frame is author-scriptable, so this must not become a
+			// way to point it at arbitrary n8n pages. Returns null when the target isn't
+			// one of them.
+			//
+			// The flag tells the page it is rendering inside this shell, which is what
+			// makes it hand its own next navigation back here instead of doing it itself.
+			var FORM_WAITING_PATH = '{{formWaitingPath}}';
+			function resolveFrameNavigation(target) {
+				if (typeof target !== 'string' || !target || !FORM_WAITING_PATH) return null;
+				try {
+					var here = new URL(window.location.href);
+					var resolved = new URL(target, here);
+					if (resolved.origin !== here.origin) return null;
+					if (
+						resolved.pathname !== FORM_WAITING_PATH &&
+						resolved.pathname.indexOf(FORM_WAITING_PATH + '/') !== 0
+					) {
+						return null;
+					}
+					resolved.searchParams.set('n8nShellHosted', '1');
+					return resolved.toString();
+				} catch (e) {
+					return null;
+				}
+			}
+
+			// The author's own redirect target, once the form is done. Any http(s) URL is
+			// allowed — this is where the author said to send the submitter, and a form
+			// outside the shell goes there too — but the scheme has to be one of those two.
+			// Returns null otherwise.
+			function resolveExternalRedirect(target) {
+				if (typeof target !== 'string' || !target) return null;
+				try {
+					var resolved = new URL(target, window.location.href);
+					if (resolved.protocol !== 'http:' && resolved.protocol !== 'https:') return null;
+					return resolved.toString();
+				} catch (e) {
+					return null;
+				}
+			}
+
 			// Connected only on the oauth-callback success signal — never on popup close,
 			// which also happens on provider-side failures.
 			function onSuccessSignal() { if (pendingId) markConnected(pendingId); }
@@ -328,10 +386,25 @@
 				});
 			} catch (e) {}
 			window.addEventListener('message', function (event) {
-				// The sandboxed form iframe can't spoof a connect: its only accepted message is
-				// the POST gate's rejection, which carries ids and moves rows one way only, so
-				// the worst author script can do is degrade its own form's UX.
+				// The sandboxed form iframe can't spoof a connect: it is only ever answered
+				// with a page move inside this form, the author's own end-of-form redirect,
+				// or the POST gate's rejection, which carries ids and moves rows one way only
+				// — so the worst author script can do is degrade its own form's UX.
+				// `event.origin` is the string 'null' for an opaque-origin frame and cannot be
+				// checked; `event.source` identifies it.
 				if (frame && event.source === frame.contentWindow) {
+					if (event.data && event.data.type === 'n8n-form-navigate') {
+						var next = resolveFrameNavigation(event.data.url);
+						if (next) frame.src = next;
+						return;
+					}
+					if (event.data && event.data.type === 'n8n-form-redirect') {
+						// The form is finished, so the author's redirect takes the whole tab —
+						// the same place a form rendered without this shell would end up.
+						var away = resolveExternalRedirect(event.data.url);
+						if (away) window.location.replace(away);
+						return;
+					}
 					handleGateRejection(event.data);
 					return;
 				}
@@ -455,6 +528,18 @@
 				document.querySelectorAll('.cred-menu.open').forEach(function (m) { m.classList.remove('open'); });
 			});
 
+			// Tap fallback for the info tooltip: hover/focus don't fire on touch
+			// (iOS Safari doesn't focus buttons on tap), so the button toggles it.
+			var summaryInfo = document.getElementById('summary-info');
+			if (summaryInfo) {
+				summaryInfo.querySelector('.summary-icon').addEventListener('click', function () {
+					summaryInfo.classList.toggle('open');
+				});
+				document.addEventListener('click', function (e) {
+					if (!summaryInfo.contains(e.target)) summaryInfo.classList.remove('open');
+				});
+			}
+
 			// Dialog (two or more accounts)
 			var overlay = document.getElementById('overlay');
 			var open = document.getElementById('open-dialog');

package/templates/form-trigger-completion.handlebars

@@ -162,6 +162,8 @@
 		const url = new URL(window.location.href);
 		const formSignature = url.searchParams.get('signature');
 
+		{{> formHostNavigation path=hostNavigationPath withRedirect=true}}
+
 		let interval = 1000;
 		let timeoutId;
 		const checkExecutionStatus = async () => {
@@ -183,7 +185,7 @@
 					if (formSignature) {
 						redirectUrl.searchParams.set('signature', formSignature);
 					}
-					window.location.replace(redirectUrl.toString());
+					navigateTo(redirectUrl.toString());
 					return;
 				}
 
@@ -250,7 +252,7 @@
 					if (response.status === 200) {
 						const redirectUrl = document.getElementById("redirectUrl");
 						if (redirectUrl) {
-							window.location.replace(redirectUrl.href);
+							redirectTo(redirectUrl.href);
 						}
 					}
 
@@ -262,7 +264,7 @@
 					} catch (e) {}
 
 					if (json?.redirectURL) {
-							window.location.replace(json.redirectURL);
+							redirectTo(json.redirectURL);
 					}
 			})
 			.catch(function (error) {

package/templates/form-trigger.handlebars

@@ -736,6 +736,8 @@
 			const url = new URL(window.location.href);
 			let formSignature = url.searchParams.get('signature');
 
+			{{> formHostNavigation path=hostNavigationPath withRedirect=true}}
+
 			function updateError(errorElement, action = 'add', message = '') {
 				if(action === 'add') {
 					errorElement.textContent = message;
@@ -999,7 +1001,7 @@
 						if (formSignature) {
 							redirectUrl.searchParams.set('signature', formSignature);
 						}
-						window.location.replace(redirectUrl.toString());
+						navigateTo(redirectUrl.toString());
 						return;
 					}
 
@@ -1143,7 +1145,9 @@
 								}
 
 								if (json?.redirectURL) {
-									window.location.replace(json.redirectURL);
+									// The author's end-of-form redirect leaves the form, so inside the
+									// hosting shell it must take the whole tab, not the sandboxed frame.
+									redirectTo(json.redirectURL);
 									return;
 								}
 
@@ -1169,12 +1173,15 @@
 
 							if (response.status === 200) {
 								if(response.redirected) {
-									window.location.replace(response.url);
+									// Another page of this form moves the frame; anything else is a
+									// redirect out of the form and takes the tab.
+									if (isHostNavigable(response.url)) navigateTo(response.url);
+									else redirectTo(response.url);
 									return;
 								}
 								const redirectUrl = document.getElementById("redirectUrl");
 								if (redirectUrl) {
-									window.location.replace(redirectUrl.href);
+									redirectTo(redirectUrl.href);
 								} else {
 									form.style.display = 'none';
 									document.querySelector('#submitted-form').style.display = 'block';

package/templates/partials/formHostNavigation.handlebars

@@ -0,0 +1,44 @@
+// Set only inside the n8n hosting shell's frame: the path prefix whose pages this
+// page may hand to the host to navigate to. Empty everywhere else.
+const hostNavigationPath = '{{path}}';
+const isShellHosted = window.parent !== window && !!hostNavigationPath;
+
+// True for this form's own follow-up pages, the only ones the shell will move to.
+function isHostNavigable(target) {
+	if (!hostNavigationPath) return false;
+	try {
+		const here = new URL(window.location.href);
+		const resolved = new URL(target, here);
+		if (resolved.origin !== here.origin) return false;
+		return resolved.pathname === hostNavigationPath
+			|| resolved.pathname.startsWith(hostNavigationPath + '/');
+	} catch (e) {
+		return false;
+	}
+}
+
+// Ask the host for a move this document can't make itself: inside the shell it is
+// sandboxed to an opaque origin, so a navigation it starts counts as cross-site and
+// the browser withholds the form's own auth cookie. The shell runs on the real
+// origin, so the move it makes for us keeps the cookie. `type` says which move —
+// another page of this form inside the frame, or the author's redirect for the tab.
+function requestHostNavigation(type, target) {
+	// targetOrigin '*': an opaque-origin document cannot name its parent's origin,
+	// and the payload is only a URL the parent can already read.
+	window.parent.postMessage({ type, url: String(target) }, '*');
+}
+
+// Move to another page of this form.
+function navigateTo(target) {
+	if (isShellHosted && isHostNavigable(target)) requestHostNavigation('n8n-form-navigate', target);
+	else window.location.replace(target);
+}
+{{#if withRedirect}}
+
+// Leave for the redirect the form's author configured. The form is finished, so this
+// takes the whole tab, which is where a form rendered without the shell ends up too.
+function redirectTo(target) {
+	if (isShellHosted) requestHostNavigation('n8n-form-redirect', target);
+	else window.location.replace(target);
+}
+{{/if}}

package/dist/modules/agents/builder/agents-builder-settings.controller.d.ts

@@ -1,10 +0,0 @@
-import { type AgentBuilderAdminSettingsResponse } from '@n8n/api-types';
-import { AuthenticatedRequest } from '@n8n/db';
-import type { Response } from 'express';
-import { AgentsBuilderSettingsService } from './agents-builder-settings.service';
-export declare class AgentsBuilderSettingsController {
-    private readonly settingsService;
-    constructor(settingsService: AgentsBuilderSettingsService);
-    getAdminSettings(_req: AuthenticatedRequest): Promise<AgentBuilderAdminSettingsResponse>;
-    updateAdminSettings(req: AuthenticatedRequest, _res: Response): Promise<AgentBuilderAdminSettingsResponse>;
-}

package/dist/modules/agents/builder/agents-builder-settings.controller.js

@@ -1,52 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AgentsBuilderSettingsController = void 0;
-const api_types_1 = require("@n8n/api-types");
-const decorators_1 = require("@n8n/decorators");
-const bad_request_error_1 = require("../../../errors/response-errors/bad-request.error");
-const agents_builder_settings_service_1 = require("./agents-builder-settings.service");
-let AgentsBuilderSettingsController = class AgentsBuilderSettingsController {
-    constructor(settingsService) {
-        this.settingsService = settingsService;
-    }
-    async getAdminSettings(_req) {
-        return await this.settingsService.getAdminSettings();
-    }
-    async updateAdminSettings(req, _res) {
-        const parseResult = api_types_1.AgentBuilderAdminSettingsUpdateDto.safeParse(req.body);
-        if (!parseResult.success) {
-            throw new bad_request_error_1.BadRequestError(parseResult.error.errors[0]?.message ?? 'Invalid request body');
-        }
-        await this.settingsService.updateAdminSettings(parseResult.data);
-        return await this.settingsService.getAdminSettings();
-    }
-};
-exports.AgentsBuilderSettingsController = AgentsBuilderSettingsController;
-__decorate([
-    (0, decorators_1.Get)('/settings'),
-    (0, decorators_1.GlobalScope)('agent:manage'),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object]),
-    __metadata("design:returntype", Promise)
-], AgentsBuilderSettingsController.prototype, "getAdminSettings", null);
-__decorate([
-    (0, decorators_1.Patch)('/settings'),
-    (0, decorators_1.GlobalScope)('agent:manage'),
-    __metadata("design:type", Function),
-    __metadata("design:paramtypes", [Object, Object]),
-    __metadata("design:returntype", Promise)
-], AgentsBuilderSettingsController.prototype, "updateAdminSettings", null);
-exports.AgentsBuilderSettingsController = AgentsBuilderSettingsController = __decorate([
-    (0, decorators_1.RestController)('/agent-builder'),
-    __metadata("design:paramtypes", [agents_builder_settings_service_1.AgentsBuilderSettingsService])
-], AgentsBuilderSettingsController);
-//# sourceMappingURL=agents-builder-settings.controller.js.map

package/dist/modules/agents/builder/agents-builder-settings.controller.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"agents-builder-settings.controller.js","sourceRoot":"","sources":["../../../../src/modules/agents/builder/agents-builder-settings.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,8CAGwB;AAExB,gDAA0E;AAG1E,kFAA6E;AAE7E,uFAAiF;AAG1E,IAAM,+BAA+B,GAArC,MAAM,+BAA+B;IAC3C,YAA6B,eAA6C;+BAA7C,eAAe;IAAiC,CAAC;IAIxE,AAAN,KAAK,CAAC,gBAAgB,CAAC,IAA0B;QAChD,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,gBAAgB,EAAE,CAAC;IACtD,CAAC;IAIK,AAAN,KAAK,CAAC,mBAAmB,CACxB,GAAyB,EACzB,IAAc;QAMd,MAAM,WAAW,GAAG,8CAAkC,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3E,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,mCAAe,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,sBAAsB,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,IAAI,CAAC,eAAe,CAAC,mBAAmB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QACjE,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,gBAAgB,EAAE,CAAC;IACtD,CAAC;CACD,CAAA;;AArBM;IAFL,IAAA,gBAAG,EAAC,WAAW,CAAC;IAChB,IAAA,wBAAW,EAAC,cAAc,CAAC;;;;uEAG3B;AAIK;IAFL,IAAA,kBAAK,EAAC,WAAW,CAAC;IAClB,IAAA,wBAAW,EAAC,cAAc,CAAC;;;;0EAe3B;0CAzBW,+BAA+B;IAD3C,IAAA,2BAAc,EAAC,gBAAgB,CAAC;qCAEc,8DAA4B;GAD9D,+BAA+B,CA0B3C"}

package/dist/modules/agents/builder/agents-builder-settings.service.d.ts

@@ -1,38 +0,0 @@
-import type { ModelConfig } from '@n8n/agents';
-import { type AgentBuilderAdminSettingsResponse, type AgentBuilderAdminSettingsUpdateRequest } from '@n8n/api-types';
-import { Logger } from '@n8n/backend-common';
-import { OutboundHttp } from '@n8n/backend-network';
-import { GlobalConfig } from '@n8n/config';
-import type { User } from '@n8n/db';
-import { SettingsRepository } from '@n8n/db';
-import { CredentialsFinderService } from '../../../credentials/credentials-finder.service';
-import { CredentialsService } from '../../../credentials/credentials.service';
-import { AiService } from '../../../services/ai.service';
-interface BuilderTelemetryProxyConfig {
-    apiUrl: string;
-    getAuthHeaders: () => Promise<Record<string, string>>;
-}
-interface ResolvedBuilderModelConfig {
-    config: ModelConfig;
-    isProxied: boolean;
-    tracingProxyConfig?: BuilderTelemetryProxyConfig;
-}
-export declare class AgentsBuilderSettingsService {
-    private readonly logger;
-    private readonly settingsRepository;
-    private readonly aiService;
-    private readonly globalConfig;
-    private readonly credentialsService;
-    private readonly credentialsFinderService;
-    private readonly outboundHttp;
-    private cached;
-    constructor(logger: Logger, settingsRepository: SettingsRepository, aiService: AiService, globalConfig: GlobalConfig, credentialsService: CredentialsService, credentialsFinderService: CredentialsFinderService, outboundHttp: OutboundHttp);
-    private loadSettings;
-    private persist;
-    getAdminSettings(): Promise<AgentBuilderAdminSettingsResponse>;
-    updateAdminSettings(payload: AgentBuilderAdminSettingsUpdateRequest): Promise<void>;
-    resolveModelConfig(user: User): Promise<ResolvedBuilderModelConfig>;
-    private tryResolveCustomCredential;
-    private resolveProxyModel;
-}
-export {};

package/dist/modules/agents/builder/agents-builder-settings.service.js

@@ -1,174 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AgentsBuilderSettingsService = void 0;
-const api_types_1 = require("@n8n/api-types");
-const backend_common_1 = require("@n8n/backend-common");
-const backend_network_1 = require("@n8n/backend-network");
-const config_1 = require("@n8n/config");
-const db_1 = require("@n8n/db");
-const di_1 = require("@n8n/di");
-const n8n_workflow_1 = require("n8n-workflow");
-const nanoid_1 = require("nanoid");
-const constants_1 = require("../../../constants");
-const credentials_finder_service_1 = require("../../../credentials/credentials-finder.service");
-const credentials_service_1 = require("../../../credentials/credentials.service");
-const unprocessable_error_1 = require("../../../errors/response-errors/unprocessable.error");
-const ai_service_1 = require("../../../services/ai.service");
-const proxy_token_manager_1 = require("../../../services/proxy-token-manager");
-const ai_proxy_language_model_1 = require("../../../utils/ai-proxy-language-model");
-const errors_1 = require("./errors");
-const credential_field_mapping_1 = require("../json-config/credential-field-mapping");
-const SETTINGS_KEY = 'agentBuilder.settings';
-const DEFAULT_SETTINGS = { mode: 'default' };
-function readEnvAnthropicKey() {
-    const key = process.env.N8N_AI_ANTHROPIC_KEY ?? process.env.ANTHROPIC_API_KEY;
-    return key && key.length > 0 ? key : null;
-}
-function readEnvInstanceAiModelConfig() {
-    const model = process.env.N8N_INSTANCE_AI_MODEL?.trim();
-    const apiKey = process.env.N8N_INSTANCE_AI_MODEL_API_KEY?.trim();
-    if (!model || !model.includes('/') || !apiKey)
-        return null;
-    const modelUrl = process.env.N8N_INSTANCE_AI_MODEL_URL?.trim();
-    const id = model;
-    if (modelUrl) {
-        return { id, url: modelUrl, apiKey };
-    }
-    return { id, apiKey };
-}
-let AgentsBuilderSettingsService = class AgentsBuilderSettingsService {
-    constructor(logger, settingsRepository, aiService, globalConfig, credentialsService, credentialsFinderService, outboundHttp) {
-        this.logger = logger;
-        this.settingsRepository = settingsRepository;
-        this.aiService = aiService;
-        this.globalConfig = globalConfig;
-        this.credentialsService = credentialsService;
-        this.credentialsFinderService = credentialsFinderService;
-        this.outboundHttp = outboundHttp;
-        this.cached = null;
-    }
-    async loadSettings() {
-        if (this.cached)
-            return this.cached;
-        const row = await this.settingsRepository.findByKey(SETTINGS_KEY);
-        if (!row) {
-            this.cached = DEFAULT_SETTINGS;
-            return this.cached;
-        }
-        const raw = (0, n8n_workflow_1.jsonParse)(row.value, { fallbackValue: undefined });
-        const parseResult = api_types_1.agentBuilderAdminSettingsSchema.safeParse(raw);
-        this.cached = parseResult.success ? parseResult.data : DEFAULT_SETTINGS;
-        return this.cached;
-    }
-    async persist(settings) {
-        await this.settingsRepository.upsert({
-            key: SETTINGS_KEY,
-            value: JSON.stringify(settings),
-            loadOnStartup: true,
-        }, ['key']);
-        this.cached = settings;
-    }
-    async getAdminSettings() {
-        const settings = await this.loadSettings();
-        return { settings };
-    }
-    async updateAdminSettings(payload) {
-        if (payload.mode === 'custom' && !(0, credential_field_mapping_1.isSupportedAgentProvider)(payload.provider)) {
-            throw new unprocessable_error_1.UnprocessableRequestError(`Unsupported provider "${payload.provider}". Supported: ${credential_field_mapping_1.SUPPORTED_AGENT_PROVIDERS.join(', ')}`);
-        }
-        await this.persist(payload);
-    }
-    async resolveModelConfig(user) {
-        const settings = await this.loadSettings();
-        if (settings.mode === 'custom') {
-            const fromCredential = await this.tryResolveCustomCredential(settings);
-            if (fromCredential) {
-                return { config: fromCredential, isProxied: false };
-            }
-            this.logger.warn('Agent builder custom credential could not be resolved; falling back to default', { credentialId: settings.credentialId });
-        }
-        if (this.aiService.isProxyEnabled()) {
-            return await this.resolveProxyModel(user);
-        }
-        const instanceAiEnv = readEnvInstanceAiModelConfig();
-        if (instanceAiEnv) {
-            return { config: instanceAiEnv, isProxied: false };
-        }
-        const envKey = readEnvAnthropicKey();
-        if (envKey) {
-            return {
-                config: {
-                    id: `anthropic/${api_types_1.AGENT_BUILDER_DEFAULT_MODEL}`,
-                    apiKey: envKey,
-                },
-                isProxied: false,
-            };
-        }
-        throw new errors_1.BuilderNotConfiguredError();
-    }
-    async tryResolveCustomCredential(settings) {
-        if (!(0, credential_field_mapping_1.isSupportedAgentProvider)(settings.provider)) {
-            this.logger.warn('Agent builder provider is not supported by the runtime', {
-                provider: settings.provider,
-                credentialId: settings.credentialId,
-            });
-            return null;
-        }
-        const credential = await this.credentialsFinderService.findById(settings.credentialId);
-        if (!credential)
-            return null;
-        const data = await this.credentialsService.decrypt(credential, true);
-        const mapped = (0, credential_field_mapping_1.mapCredentialForProvider)(settings.provider, data);
-        const id = `${settings.provider}/${settings.modelName}`;
-        return { id, ...mapped };
-    }
-    async resolveProxyModel(user) {
-        const client = await this.aiService.getClient();
-        const proxyBaseUrl = client.getApiProxyBaseUrl().replace(/\/$/, '');
-        const configuredModelId = this.globalConfig.instanceAi.model.trim();
-        const isExactKimi = (0, api_types_1.isMoonshotaiKimiK3ModelId)(configuredModelId);
-        const modelId = isExactKimi ? configuredModelId : api_types_1.AGENT_BUILDER_DEFAULT_MODEL;
-        const tokenManager = new proxy_token_manager_1.ProxyTokenManager(async () => {
-            return await client.getBuilderApiProxyToken({ id: user.id }, { userMessageId: (0, nanoid_1.nanoid)() });
-        });
-        const proxyHeaders = {
-            feature: 'agent-builder',
-            n8nVersion: constants_1.N8N_VERSION,
-        };
-        const model = await (0, ai_proxy_language_model_1.createProxyLanguageModel)({
-            proxyBaseUrl,
-            modelId,
-            tokenManager,
-            feature: proxyHeaders.feature,
-            n8nVersion: proxyHeaders.n8nVersion,
-            outboundHttp: this.outboundHttp,
-        });
-        const tracingHeaders = (0, api_types_1.buildProxyHeaders)(proxyHeaders);
-        return {
-            config: model,
-            isProxied: true,
-            tracingProxyConfig: {
-                apiUrl: proxyBaseUrl + '/langsmith',
-                getAuthHeaders: async () => ({
-                    ...(await tokenManager.getAuthHeaders()),
-                    ...tracingHeaders,
-                }),
-            },
-        };
-    }
-};
-exports.AgentsBuilderSettingsService = AgentsBuilderSettingsService;
-exports.AgentsBuilderSettingsService = AgentsBuilderSettingsService = __decorate([
-    (0, di_1.Service)(),
-    __metadata("design:paramtypes", [backend_common_1.Logger, db_1.SettingsRepository, ai_service_1.AiService, config_1.GlobalConfig, credentials_service_1.CredentialsService, credentials_finder_service_1.CredentialsFinderService, backend_network_1.OutboundHttp])
-], AgentsBuilderSettingsService);
-//# sourceMappingURL=agents-builder-settings.service.js.map

package/dist/modules/agents/builder/agents-builder-settings.service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"agents-builder-settings.service.js","sourceRoot":"","sources":["../../../../src/modules/agents/builder/agents-builder-settings.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,8CAQwB;AACxB,wDAA6C;AAC7C,0DAAoD;AACpD,wCAA2C;AAE3C,gCAA6C;AAC7C,gCAAkC;AAClC,+CAAyC;AACzC,mCAAgC;AAEhC,2CAA0C;AAC1C,yFAAoF;AACpF,2EAAuE;AACvE,sFAAyF;AACzF,sDAAkD;AAClD,wEAAmE;AACnE,6EAA2E;AAE3E,qCAAqD;AACrD,sFAIiD;AAEjD,MAAM,YAAY,GAAG,uBAAuB,CAAC;AAE7C,MAAM,gBAAgB,GAA8B,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AAGxE,SAAS,mBAAmB;IAC3B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC9E,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3C,CAAC;AAOD,SAAS,4BAA4B;IACpC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,CAAC;IACxD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,IAAI,EAAE,CAAC;IACjE,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAE3D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,IAAI,EAAE,CAAC;IAC/D,MAAM,EAAE,GAAG,KAA8B,CAAC;IAC1C,IAAI,QAAQ,EAAE,CAAC;QACd,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACtC,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC;AACvB,CAAC;AAyBM,IAAM,4BAA4B,GAAlC,MAAM,4BAA4B;IAIxC,YACkB,MAAc,EACd,kBAAsC,EACtC,SAAoB,EACpB,YAA0B,EAC1B,kBAAsC,EACtC,wBAAkD,EAClD,YAA0B;QAN1B,WAAM,GAAN,MAAM,CAAQ;QACd,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,cAAS,GAAT,SAAS,CAAW;QACpB,iBAAY,GAAZ,YAAY,CAAc;QAC1B,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,6BAAwB,GAAxB,wBAAwB,CAA0B;QAClD,iBAAY,GAAZ,YAAY,CAAc;QATpC,WAAM,GAAqC,IAAI,CAAC;IAUrD,CAAC;IAGI,KAAK,CAAC,YAAY;QACzB,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QACpC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAClE,IAAI,CAAC,GAAG,EAAE,CAAC;YACV,IAAI,CAAC,MAAM,GAAG,gBAAgB,CAAC;YAC/B,OAAO,IAAI,CAAC,MAAM,CAAC;QACpB,CAAC;QAGD,MAAM,GAAG,GAAG,IAAA,wBAAS,EAAU,GAAG,CAAC,KAAK,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,CAAC;QACxE,MAAM,WAAW,GAAG,2CAA+B,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC;QACxE,OAAO,IAAI,CAAC,MAAM,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,QAAmC;QACxD,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CACnC;YACC,GAAG,EAAE,YAAY;YACjB,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;YAC/B,aAAa,EAAE,IAAI;SACnB,EACD,CAAC,KAAK,CAAC,CACP,CAAC;QACF,IAAI,CAAC,MAAM,GAAG,QAAQ,CAAC;IACxB,CAAC;IAGD,KAAK,CAAC,gBAAgB;QACrB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC3C,OAAO,EAAE,QAAQ,EAAE,CAAC;IACrB,CAAC;IAWD,KAAK,CAAC,mBAAmB,CAAC,OAA+C;QACxE,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAA,mDAAwB,EAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,+CAAyB,CAClC,yBAAyB,OAAO,CAAC,QAAQ,iBAAiB,oDAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChG,CAAC;QACH,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAYD,KAAK,CAAC,kBAAkB,CAAC,IAAU;QAClC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAE3C,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAChC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,QAAQ,CAAC,CAAC;YACvE,IAAI,cAAc,EAAE,CAAC;gBACpB,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;YACrD,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CACf,gFAAgF,EAChF,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CACvC,CAAC;QACH,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,EAAE,CAAC;YACrC,OAAO,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;QAED,MAAM,aAAa,GAAG,4BAA4B,EAAE,CAAC;QACrD,IAAI,aAAa,EAAE,CAAC;YACnB,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACpD,CAAC;QAED,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACrC,IAAI,MAAM,EAAE,CAAC;YACZ,OAAO;gBACN,MAAM,EAAE;oBACP,EAAE,EAAE,aAAa,uCAA2B,EAAE;oBAC9C,MAAM,EAAE,MAAM;iBACd;gBACD,SAAS,EAAE,KAAK;aAChB,CAAC;QACH,CAAC;QAED,MAAM,IAAI,kCAAyB,EAAE,CAAC;IACvC,CAAC;IAEO,KAAK,CAAC,0BAA0B,CACvC,QAAgE;QAEhE,IAAI,CAAC,IAAA,mDAAwB,EAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wDAAwD,EAAE;gBAC1E,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,YAAY,EAAE,QAAQ,CAAC,YAAY;aACnC,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACvF,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAE7B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAIrE,MAAM,MAAM,GAAG,IAAA,mDAAwB,EAAC,QAAQ,CAAC,QAAQ,EAAE,IAA0B,CAAC,CAAC;QAEvF,MAAM,EAAE,GAAG,GAAG,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QACxD,OAAO,EAAE,EAAE,EAAE,GAAG,MAAM,EAAiB,CAAC;IACzC,CAAC;IAOO,KAAK,CAAC,iBAAiB,CAAC,IAAU;QACzC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;QAChD,MAAM,YAAY,GAAG,MAAM,CAAC,kBAAkB,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACpE,MAAM,iBAAiB,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACpE,MAAM,WAAW,GAAG,IAAA,qCAAyB,EAAC,iBAAiB,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,uCAA2B,CAAC;QAE9E,MAAM,YAAY,GAAG,IAAI,uCAAiB,CAAC,KAAK,IAAI,EAAE;YACrD,OAAO,MAAM,MAAM,CAAC,uBAAuB,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,aAAa,EAAE,IAAA,eAAM,GAAE,EAAE,CAAC,CAAC;QAC3F,CAAC,CAAC,CAAC;QACH,MAAM,YAAY,GAAG;YACpB,OAAO,EAAE,eAAwB;YACjC,UAAU,EAAE,uBAAW;SACvB,CAAC;QAEF,MAAM,KAAK,GAAG,MAAM,IAAA,kDAAwB,EAAC;YAC5C,YAAY;YACZ,OAAO;YACP,YAAY;YACZ,OAAO,EAAE,YAAY,CAAC,OAAO;YAC7B,UAAU,EAAE,YAAY,CAAC,UAAU;YACnC,YAAY,EAAE,IAAI,CAAC,YAAY;SAC/B,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,IAAA,6BAAiB,EAAC,YAAY,CAAC,CAAC;QACvD,OAAO;YACN,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,IAAI;YACf,kBAAkB,EAAE;gBACnB,MAAM,EAAE,YAAY,GAAG,YAAY;gBACnC,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;oBAC5B,GAAG,CAAC,MAAM,YAAY,CAAC,cAAc,EAAE,CAAC;oBACxC,GAAG,cAAc;iBACjB,CAAC;aACF;SACD,CAAC;IACH,CAAC;CACD,CAAA;;uCAlLY,4BAA4B;IADxC,IAAA,YAAO,GAAE;qCAMiB,uBAAM,EACM,uBAAkB,EAC3B,sBAAS,EACN,qBAAY,EACN,wCAAkB,EACZ,qDAAwB,EACpC,8BAAY;GAXhC,4BAA4B,CAkLxC"}

package/dist/modules/data-table/utils/size-utils.d.ts

@@ -1,2 +0,0 @@
-export declare function toMb(sizeInBytes: number): number;
-export declare function formatBytes(sizeInBytes: number): string;

package/dist/modules/data-table/utils/size-utils.js

@@ -1,19 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.toMb = toMb;
-exports.formatBytes = formatBytes;
-function toMb(sizeInBytes) {
-    return Math.round(sizeInBytes / (1024 * 1024));
-}
-function formatBytes(sizeInBytes) {
-    if (sizeInBytes < 1024) {
-        return `${sizeInBytes}B`;
-    }
-    else if (sizeInBytes < 1024 * 1024) {
-        return `${Math.round(sizeInBytes / 1024)}KB`;
-    }
-    else {
-        return `${Math.round(sizeInBytes / (1024 * 1024))}MB`;
-    }
-}
-//# sourceMappingURL=size-utils.js.map

package/dist/modules/data-table/utils/size-utils.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"size-utils.js","sourceRoot":"","sources":["../../../../src/modules/data-table/utils/size-utils.ts"],"names":[],"mappings":";;;;AAGA,cAAqB,WAAmB;IACvC,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;AAChD,CAAC;AAKD,qBAA4B,WAAmB;IAC9C,IAAI,WAAW,GAAG,IAAI,EAAE,CAAC;QACxB,OAAO,GAAG,WAAW,GAAG,CAAC;IAC1B,CAAC;SAAM,IAAI,WAAW,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;QACtC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC;IAC9C,CAAC;SAAM,CAAC;QACP,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC;IACvD,CAAC;AACF,CAAC"}

package/dist/modules/workflow-reviews.ee/workflow-review-auto-close.service.d.ts

@@ -1,18 +0,0 @@
-import { Logger } from '@n8n/backend-common';
-import { DbLockService, WorkflowReviewActivityRepository, WorkflowReviewRequestRepository } from '@n8n/db';
-import { CollaborationService } from '../../collaboration/collaboration.service';
-import type { WorkflowMutationHooks } from '../../workflows/workflow-mutation-hooks-proxy.service';
-export declare class WorkflowReviewAutoCloseService implements WorkflowMutationHooks {
-    private readonly logger;
-    private readonly workflowReviewRequestRepository;
-    private readonly activityRepository;
-    private readonly dbLockService;
-    private readonly collaborationService;
-    constructor(logger: Logger, workflowReviewRequestRepository: WorkflowReviewRequestRepository, activityRepository: WorkflowReviewActivityRepository, dbLockService: DbLockService, collaborationService: CollaborationService);
-    afterWorkflowArchived(workflowId: string): Promise<void>;
-    afterWorkflowsTransferred(workflowIds: string[]): Promise<void>;
-    beforeWorkflowDeleted(workflowId: string): Promise<void>;
-    afterWorkflowsDeleted(workflowIds: string[]): Promise<void>;
-    private reconcileUnreviewableOpenRequests;
-    private closeOpenRequestsForWorkflows;
-}