n8n 2.46.4 → 2.47.1

package/dist/modules/skills/services/skill-runtime.service.js

@@ -0,0 +1,155 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SkillRuntimeService = void 0;
+const backend_services_1 = require("@n8n/backend-services");
+const di_1 = require("@n8n/di");
+const skill_repository_1 = require("../database/repositories/skill.repository");
+const skill_content_1 = require("../utils/skill-content");
+const skill_access_service_1 = require("./skill-access.service");
+let SkillRuntimeService = class SkillRuntimeService {
+    constructor(skillRepository, projectScopeService, skillAccess) {
+        this.skillRepository = skillRepository;
+        this.projectScopeService = projectScopeService;
+        this.skillAccess = skillAccess;
+    }
+    async listForAssistant(context) {
+        return await this.skillRepository.findAssistantSkillSummaries(await this.authorizedAssistantProject(context));
+    }
+    async readForAssistant(context, skillId, versionId) {
+        const projectId = await this.authorizedAssistantProject(context);
+        const row = await this.skillRepository.findAssistantSkill(skillId, projectId, versionId);
+        if (!row)
+            return null;
+        const { skill, version, files } = row;
+        if (!(await this.canReadForAssistant(context, skill, projectId)))
+            return null;
+        return {
+            id: skill.id,
+            projectId: skill.projectId,
+            name: version.name,
+            description: version.description,
+            versionId: version.id,
+            version: version.version,
+            instructions: version.instructions,
+            frontmatter: version.frontmatter,
+            files: files.map(({ path }) => ({ path })),
+        };
+    }
+    async readFileForAssistant(context, skillId, versionId, path) {
+        const projectId = await this.authorizedAssistantProject(context);
+        const row = await this.skillRepository.findAssistantSkillFile(skillId, projectId, versionId, path);
+        if (!row || !(await this.canReadForAssistant(context, row.skill, projectId)))
+            return null;
+        return { skillId, versionId, path: row.file.path, content: row.file.content };
+    }
+    async resolveForAgentDraft(refs, ctx = {}) {
+        const rows = await this.resolveRows(refs, ctx);
+        return Object.fromEntries([...rows].map(([refId, row]) => [refId, (0, skill_content_1.toAgentSkill)(row)]));
+    }
+    async findTargets(skillIds, ctx = {}) {
+        const skills = await this.skillRepository.findByIds(skillIds, ctx);
+        return new Map(skills.map(({ id, projectId }) => [id, { projectId }]));
+    }
+    async lockForEdit(skillIds, ctx) {
+        await this.skillRepository.lockForEdit(skillIds, ctx);
+    }
+    async lockForPublish(skillIds, ctx) {
+        await this.skillRepository.lockForPublish(skillIds, ctx);
+    }
+    async lockForAttach(skillIds, ctx) {
+        await this.skillRepository.lockForPublish(skillIds, ctx);
+    }
+    async resolveVersions(versionIds, ctx = {}) {
+        const rows = await this.skillRepository.findVersionsByIds(versionIds, ctx);
+        return new Map([...rows].map(([versionId, row]) => [
+            versionId,
+            { skillId: row.skill.id, skill: (0, skill_content_1.toAgentSkill)(row) },
+        ]));
+    }
+    async findVersionRefs(versionIds, ctx = {}) {
+        return await this.skillRepository.findVersionRefs(versionIds, ctx);
+    }
+    async latestNames(skillIds, ctx) {
+        const rows = await this.skillRepository.findLatestSaved(skillIds, ctx);
+        return new Map([...rows].map(([id, row]) => [id, row.version.name]));
+    }
+    async runtimeNames(refs, ctx) {
+        const latest = await this.latestNames(refs.map((ref) => ref.id), ctx);
+        const pinned = await this.skillRepository.findVersionsByIds(refs.flatMap((ref) => (ref.versionId ? [ref.versionId] : [])), ctx);
+        return (ref) => {
+            const pin = ref.versionId ? pinned.get(ref.versionId) : undefined;
+            return pin?.skill.id === ref.id ? pin.version.name : latest.get(ref.id);
+        };
+    }
+    async runtimeVersions(refs, ctx) {
+        const [latest, pins] = await Promise.all([
+            this.skillRepository.findLatestSummaries(refs.map((ref) => ref.id), ctx),
+            this.skillRepository.findVersionRefs(refs.flatMap((ref) => (ref.versionId ? [ref.versionId] : [])), ctx),
+        ]);
+        return (ref) => {
+            const newest = latest.get(ref.id)?.version;
+            if (newest === undefined)
+                return undefined;
+            const pin = ref.versionId ? pins.get(ref.versionId) : undefined;
+            return pin?.skillId === ref.id
+                ? { version: pin.version, pinned: true, latest: newest }
+                : { version: newest, pinned: false, latest: newest };
+        };
+    }
+    async snapshotForSave(refs, ctx) {
+        const refIds = [...new Set(refs.map((ref) => ref.id))];
+        const latest = await this.skillRepository.findLatestVersionIds(refIds, ctx);
+        const pins = await this.skillRepository.findVersionRefs(refs.flatMap((ref) => (ref.versionId ? [ref.versionId] : [])), ctx);
+        const versionByRef = new Map();
+        for (const ref of refs) {
+            const versionId = ref.versionId && pins.get(ref.versionId)?.skillId === ref.id
+                ? ref.versionId
+                : latest.get(ref.id);
+            if (versionId)
+                versionByRef.set(ref.id, versionId);
+        }
+        return versionByRef;
+    }
+    async resolveRows(refs, ctx) {
+        const latest = await this.skillRepository.findLatestSaved(refs.map((ref) => ref.id), ctx);
+        const pinnedIds = refs.flatMap((ref) => (ref.versionId ? [ref.versionId] : []));
+        const pinned = await this.skillRepository.findVersionsByIds(pinnedIds, ctx);
+        const rows = new Map();
+        for (const ref of refs) {
+            const pin = ref.versionId ? pinned.get(ref.versionId) : undefined;
+            const row = pin?.skill.id === ref.id ? pin : latest.get(ref.id);
+            if (row)
+                rows.set(ref.id, row);
+        }
+        return rows;
+    }
+    async canReadForAssistant(context, skill, projectId) {
+        return (skill.availableToAssistant &&
+            (skill.projectId === null || skill.projectId === projectId) &&
+            (await this.skillAccess.canAccess(context.user, skill, 'read')));
+    }
+    async authorizedAssistantProject({ user, projectId, }) {
+        if (!projectId)
+            return null;
+        const projects = await this.projectScopeService.getProjectIds(user, [
+            'projectSkill:list',
+            'projectSkill:read',
+        ]);
+        return projects === null || projects.includes(projectId) ? projectId : null;
+    }
+};
+exports.SkillRuntimeService = SkillRuntimeService;
+exports.SkillRuntimeService = SkillRuntimeService = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [skill_repository_1.SkillRepository, backend_services_1.ProjectScopeService, skill_access_service_1.SkillAccessService])
+], SkillRuntimeService);
+//# sourceMappingURL=skill-runtime.service.js.map

package/dist/modules/skills/services/skill-runtime.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-runtime.service.js","sourceRoot":"","sources":["../../../../src/modules/skills/services/skill-runtime.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,4DAA4D;AAE5D,gCAAkC;AAElC,gFAGmD;AACnD,0DAUgC;AAChC,iEAA4D;AAQrD,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAC/B,YACkB,eAAgC,EAChC,mBAAwC,EACxC,WAA+B;+BAF/B,eAAe;mCACf,mBAAmB;2BACnB,WAAW;IAC1B,CAAC;IAEJ,KAAK,CAAC,gBAAgB,CAAC,OAA8B;QACpD,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,2BAA2B,CAC5D,MAAM,IAAI,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAC9C,CAAC;IACH,CAAC;IAGD,KAAK,CAAC,gBAAgB,CACrB,OAA8B,EAC9B,OAAe,EACf,SAAkB;QAElB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC;QACjE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,kBAAkB,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACzF,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC;QACtC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9E,OAAO;YACN,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;SAC1C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,oBAAoB,CACzB,OAA8B,EAC9B,OAAe,EACf,SAAiB,EACjB,IAAY;QAEZ,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAAC;QACjE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,sBAAsB,CAC5D,OAAO,EACP,SAAS,EACT,SAAS,EACT,IAAI,CACJ,CAAC;QACF,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1F,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;IAC/E,CAAC;IAMD,KAAK,CAAC,oBAAoB,CACzB,IAAgB,EAChB,GAAG,GAAqB,EAAE;QAE1B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAA,4BAAY,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxF,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,QAAkB,EAAE,GAAG,GAAqB,EAAE;QAC/D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACnE,OAAO,IAAI,GAAG,CAAsB,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7F,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,QAAkB,EAAE,GAAqB;QAC1D,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,QAAkB,EAAE,GAAqB;QAC7D,MAAM,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,QAAkB,EAAE,GAAqB;QAC5D,MAAM,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,UAAoB,EAAE,GAAG,GAAqB,EAAE;QACrE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,iBAAiB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAC3E,OAAO,IAAI,GAAG,CACb,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;YACnC,SAAS;YACT,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,IAAA,4BAAY,EAAC,GAAG,CAAC,EAAE;SACnD,CAAC,CACF,CAAC;IACH,CAAC;IAGD,KAAK,CAAC,eAAe,CAAC,UAAoB,EAAE,GAAG,GAAqB,EAAE;QACrE,OAAO,MAAM,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACpE,CAAC;IAGD,KAAK,CAAC,WAAW,CAAC,QAAkB,EAAE,GAAqB;QAC1D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACvE,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtE,CAAC;IAMD,KAAK,CAAC,YAAY,CACjB,IAAsD,EACtD,GAAqB;QAErB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CACpC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EACzB,GAAG,CACH,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,iBAAiB,CAC1D,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAC7D,GAAG,CACH,CAAC;QACF,OAAO,CAAC,GAAG,EAAE,EAAE;YACd,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,OAAO,GAAG,EAAE,KAAK,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC,CAAC;IACH,CAAC;IAMD,KAAK,CAAC,eAAe,CACpB,IAAsD,EACtD,GAAqB;QAErB,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACxC,IAAI,CAAC,eAAe,CAAC,mBAAmB,CACvC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EACzB,GAAG,CACH;YACD,IAAI,CAAC,eAAe,CAAC,eAAe,CACnC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAC7D,GAAG,CACH;SACD,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,EAAE,EAAE;YACd,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC;YAC3C,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAC3C,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,OAAO,GAAG,EAAE,OAAO,KAAK,GAAG,CAAC,EAAE;gBAC7B,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE;gBACxD,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QACvD,CAAC,CAAC;IACH,CAAC;IAGD,KAAK,CAAC,eAAe,CAAC,IAAgB,EAAE,GAAqB;QAC5D,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAEvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,oBAAoB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC5E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,eAAe,CACtD,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAC7D,GAAG,CACH,CAAC;QACF,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC/C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,MAAM,SAAS,GACd,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,OAAO,KAAK,GAAG,CAAC,EAAE;gBAC3D,CAAC,CAAC,GAAG,CAAC,SAAS;gBACf,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACvB,IAAI,SAAS;gBAAE,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,YAAY,CAAC;IACrB,CAAC;IAEO,KAAK,CAAC,WAAW,CACxB,IAAgB,EAChB,GAAqB;QAErB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,eAAe,CACxD,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EACzB,GAAG,CACH,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAChF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,iBAAiB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC5E,MAAM,IAAI,GAAG,IAAI,GAAG,EAA4B,CAAC;QACjD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,MAAM,GAAG,GAAG,GAAG,EAAE,KAAK,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChE,IAAI,GAAG;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAChC,CAAC;QACD,OAAO,IAAI,CAAC;IACb,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAChC,OAA8B,EAC9B,KAA2B,EAC3B,SAAwB;QAExB,OAAO,CACN,KAAK,CAAC,oBAAoB;YAC1B,CAAC,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC;YAC3D,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAC/D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,0BAA0B,CAAC,EACxC,IAAI,EACJ,SAAS,GACc;QACvB,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,aAAa,CAAC,IAAI,EAAE;YACnE,mBAAmB;YACnB,mBAAmB;SACnB,CAAC,CAAC;QACH,OAAO,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7E,CAAC;CACD,CAAA;;8BAxNY,mBAAmB;IAD/B,IAAA,YAAO,GAAE;qCAG0B,kCAAe,EACX,sCAAmB,EAC3B,yCAAkB;GAJrC,mBAAmB,CAwN/B"}

package/dist/modules/skills/services/skill-security-scanner.service.d.ts

@@ -0,0 +1,8 @@
+import type { SkillScanResult } from '@n8n/api-types';
+import type { SkillParseError } from '../errors/skill-parse.error';
+import type { SkillContent } from '../utils/skill-content-hash';
+import type { FetchedSkill } from '../sources/skill-source-client';
+export declare class SkillSecurityScanner {
+    scan(fetched: Pick<FetchedSkill, 'content' | 'skippedFiles' | 'fidelity'>, previous?: SkillContent | null): SkillScanResult;
+    scanUnreadable(error: SkillParseError): SkillScanResult;
+}

package/dist/modules/skills/services/skill-security-scanner.service.js

@@ -0,0 +1,45 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SkillSecurityScanner = void 0;
+const di_1 = require("@n8n/di");
+const skill_md_1 = require("../utils/skill-md");
+const skill_security_rules_1 = require("../utils/skill-security-rules");
+const RULES = [
+    skill_security_rules_1.checkShape,
+    skill_security_rules_1.listSkippedFiles,
+    skill_security_rules_1.findHiddenUnicode,
+    skill_security_rules_1.findNewUrls,
+    skill_security_rules_1.findPermissionChanges,
+    skill_security_rules_1.findSuspiciousPhrases,
+    skill_security_rules_1.listFidelityWarnings,
+];
+let SkillSecurityScanner = class SkillSecurityScanner {
+    scan(fetched, previous = null) {
+        const input = { ...fetched, previous };
+        return toResult(RULES.flatMap((rule) => rule(input)));
+    }
+    scanUnreadable(error) {
+        return toResult([
+            { rule: 'invalid_skill', severity: 'blocked', file: skill_md_1.SKILL_MD, detail: error.message },
+        ]);
+    }
+};
+exports.SkillSecurityScanner = SkillSecurityScanner;
+exports.SkillSecurityScanner = SkillSecurityScanner = __decorate([
+    (0, di_1.Service)()
+], SkillSecurityScanner);
+function toResult(findings) {
+    const verdict = findings.some((finding) => finding.severity === 'blocked')
+        ? 'blocked'
+        : findings.some((finding) => finding.severity === 'needs_review')
+            ? 'needs_review'
+            : 'pass';
+    return { verdict, findings };
+}
+//# sourceMappingURL=skill-security-scanner.service.js.map

package/dist/modules/skills/services/skill-security-scanner.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-security-scanner.service.js","sourceRoot":"","sources":["../../../../src/modules/skills/services/skill-security-scanner.service.ts"],"names":[],"mappings":";;;;;;;;;AACA,gCAAkC;AAIlC,gDAA6C;AAC7C,wEASuC;AAGvC,MAAM,KAAK,GAAG;IACb,iCAAU;IACV,uCAAgB;IAChB,wCAAiB;IACjB,kCAAW;IACX,4CAAqB;IACrB,4CAAqB;IACrB,2CAAoB;CACpB,CAAC;AAQK,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAEhC,IAAI,CACH,OAAoE,EACpE,QAAQ,GAAwB,IAAI;QAEpC,MAAM,KAAK,GAAmB,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,CAAC;QACvD,OAAO,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvD,CAAC;IAGD,cAAc,CAAC,KAAsB;QACpC,OAAO,QAAQ,CAAC;YACf,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,mBAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE;SACrF,CAAC,CAAC;IACJ,CAAC;CACD,CAAA;;+BAhBY,oBAAoB;IADhC,IAAA,YAAO,GAAE;GACG,oBAAoB,CAgBhC;AAED,SAAS,QAAQ,CAAC,QAA4B;IAC7C,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC;QACzE,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,cAAc,CAAC;YAChE,CAAC,CAAC,cAAc;YAChB,CAAC,CAAC,MAAM,CAAC;IACX,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC9B,CAAC"}

package/dist/modules/skills/services/skill-source-check.task.d.ts

@@ -0,0 +1,12 @@
+import { SystemTask } from '@n8n/decorators';
+import type { SystemTaskSchedule } from '@n8n/decorators';
+import { SkillSyncService } from './skill-sync.service';
+import { SkillSyncConfig } from '../skill-sync.config';
+export declare class SkillSourceCheckTask implements SystemTask {
+    private readonly skillSync;
+    readonly name = "skill-source-check";
+    readonly schedule: SystemTaskSchedule;
+    readonly target: import("@n8n/decorators").ClusterTarget;
+    constructor(config: SkillSyncConfig, skillSync: SkillSyncService);
+    run(signal: AbortSignal): Promise<void>;
+}

package/dist/modules/skills/services/skill-source-check.task.js

@@ -0,0 +1,36 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SkillSourceCheckTask = void 0;
+const constants_1 = require("@n8n/constants");
+const decorators_1 = require("@n8n/decorators");
+const skill_sync_service_1 = require("./skill-sync.service");
+const skill_sync_config_1 = require("../skill-sync.config");
+let SkillSourceCheckTask = class SkillSourceCheckTask {
+    constructor(config, skillSync) {
+        this.skillSync = skillSync;
+        this.name = 'skill-source-check';
+        this.target = (0, decorators_1.clusterTarget)({
+            scheduler: { retryOnFailure: false, timeoutSeconds: 30 * constants_1.Time.minutes.toSeconds },
+            leaderTimer: {},
+        });
+        this.schedule = (0, decorators_1.intervalFromSeconds)(config.checkIntervalSeconds);
+    }
+    async run(signal) {
+        await this.skillSync.checkAll(signal);
+    }
+};
+exports.SkillSourceCheckTask = SkillSourceCheckTask;
+exports.SkillSourceCheckTask = SkillSourceCheckTask = __decorate([
+    (0, decorators_1.SystemTask)(),
+    __metadata("design:paramtypes", [skill_sync_config_1.SkillSyncConfig, skill_sync_service_1.SkillSyncService])
+], SkillSourceCheckTask);
+//# sourceMappingURL=skill-source-check.task.js.map

package/dist/modules/skills/services/skill-source-check.task.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-source-check.task.js","sourceRoot":"","sources":["../../../../src/modules/skills/services/skill-source-check.task.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,8CAAsC;AACtC,gDAAiF;AAGjF,6DAAwD;AACxD,4DAAuD;AAOhD,IAAM,oBAAoB,GAA1B,MAAM,oBAAoB;IAYhC,YACC,MAAuB,EACN,SAA2B;QAA3B,cAAS,GAAT,SAAS,CAAkB;QAbpC,SAAI,GAAG,oBAAoB,CAAC;QAI5B,WAAM,GAAG,IAAA,0BAAa,EAAC;YAG/B,SAAS,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,gBAAI,CAAC,OAAO,CAAC,SAAS,EAAE;YACjF,WAAW,EAAE,EAAE;SACf,CAAC,CAAC;QAMF,IAAI,CAAC,QAAQ,GAAG,IAAA,gCAAmB,EAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,MAAmB;QAC5B,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;CACD,CAAA;;+BAtBY,oBAAoB;IADhC,IAAA,uBAAU,GAAE;qCAcH,mCAAe,EACK,qCAAgB;GAdjC,oBAAoB,CAsBhC"}

package/dist/modules/skills/services/skill-source-credentials-proxy.service.d.ts

@@ -0,0 +1,12 @@
+import type { SkillSourceCredentialOption } from '@n8n/api-types';
+import type { User } from '@n8n/db';
+import { SkillSourceCredentials, type ResolvedSkillSourceCredential, type SkillSourceCredentialScope } from './skill-source-credentials.contracts';
+export declare class SkillSourceCredentialsProxy extends SkillSourceCredentials {
+    private factory;
+    private created;
+    register(factory: () => SkillSourceCredentials): void;
+    get isRegistered(): boolean;
+    private get impl();
+    listUsable(user: User, projectId: string | null, types: readonly string[]): Promise<SkillSourceCredentialOption[]>;
+    resolve(credentialId: string, scope: SkillSourceCredentialScope): Promise<ResolvedSkillSourceCredential | null>;
+}

package/dist/modules/skills/services/skill-source-credentials-proxy.service.js

@@ -0,0 +1,45 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SkillSourceCredentialsProxy = void 0;
+const di_1 = require("@n8n/di");
+const skill_source_credentials_contracts_1 = require("./skill-source-credentials.contracts");
+let SkillSourceCredentialsProxy = class SkillSourceCredentialsProxy extends skill_source_credentials_contracts_1.SkillSourceCredentials {
+    constructor() {
+        super(...arguments);
+        this.factory = null;
+        this.created = null;
+    }
+    register(factory) {
+        this.factory = factory;
+        this.created = null;
+    }
+    get isRegistered() {
+        return this.factory !== null;
+    }
+    get impl() {
+        if (!this.created && this.factory)
+            this.created = this.factory();
+        return this.created;
+    }
+    async listUsable(user, projectId, types) {
+        if (!this.impl || types.length === 0)
+            return [];
+        return await this.impl.listUsable(user, projectId, types);
+    }
+    async resolve(credentialId, scope) {
+        if (!this.impl)
+            return null;
+        return await this.impl.resolve(credentialId, scope);
+    }
+};
+exports.SkillSourceCredentialsProxy = SkillSourceCredentialsProxy;
+exports.SkillSourceCredentialsProxy = SkillSourceCredentialsProxy = __decorate([
+    (0, di_1.Service)()
+], SkillSourceCredentialsProxy);
+//# sourceMappingURL=skill-source-credentials-proxy.service.js.map

package/dist/modules/skills/services/skill-source-credentials-proxy.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-source-credentials-proxy.service.js","sourceRoot":"","sources":["../../../../src/modules/skills/services/skill-source-credentials-proxy.service.ts"],"names":[],"mappings":";;;;;;;;;AAEA,gCAAkC;AAElC,6FAI8C;AAQvC,IAAM,2BAA2B,GAAjC,MAAM,2BAA4B,SAAQ,2DAAsB;IAAhE;;QACE,YAAO,GAA0C,IAAI,CAAC;QAEtD,YAAO,GAAkC,IAAI,CAAC;IAgCvD,CAAC;IA9BA,QAAQ,CAAC,OAAqC;QAC7C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,IAAI,YAAY;QACf,OAAO,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC;IAC9B,CAAC;IAED,IAAY,IAAI;QACf,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC,OAAO,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,UAAU,CACf,IAAU,EACV,SAAwB,EACxB,KAAwB;QAExB,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAChD,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,OAAO,CACZ,YAAoB,EACpB,KAAiC;QAEjC,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAC5B,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;CACD,CAAA;;sCAnCY,2BAA2B;IADvC,IAAA,YAAO,GAAE;GACG,2BAA2B,CAmCvC"}

package/dist/modules/skills/services/skill-source-credentials.contracts.d.ts

@@ -0,0 +1,17 @@
+import type { SkillSourceCredentialOption } from '@n8n/api-types';
+import type { User } from '@n8n/db';
+export type ResolvedSkillSourceCredential = {
+    id: string;
+    type: string;
+    data: Record<string, unknown>;
+};
+export type SkillSourceCredentialScope = {
+    projectId: string | null;
+    user?: User;
+    types: readonly string[];
+    check?: (credential: ResolvedSkillSourceCredential) => void;
+};
+export declare abstract class SkillSourceCredentials {
+    abstract listUsable(user: User, projectId: string | null, types: readonly string[]): Promise<SkillSourceCredentialOption[]>;
+    abstract resolve(credentialId: string, scope: SkillSourceCredentialScope): Promise<ResolvedSkillSourceCredential | null>;
+}

package/dist/modules/skills/services/skill-source-credentials.contracts.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SkillSourceCredentials = void 0;
+class SkillSourceCredentials {
+}
+exports.SkillSourceCredentials = SkillSourceCredentials;
+//# sourceMappingURL=skill-source-credentials.contracts.js.map

package/dist/modules/skills/services/skill-source-credentials.contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-source-credentials.contracts.js","sourceRoot":"","sources":["../../../../src/modules/skills/services/skill-source-credentials.contracts.ts"],"names":[],"mappings":";;;AAiCA;CAkBC"}

package/dist/modules/skills/services/skill-source.policy.d.ts

@@ -0,0 +1,4 @@
+import type { Scope } from '@n8n/permissions';
+export type SkillSourceAction = 'view' | 'viewCredential' | 'connect' | 'addSkills' | 'review' | 'checkNow' | 'stopSyncing' | 'replaceCredential' | 'disconnect' | 'deleteSkill';
+export type SkillSourceScopeKind = 'global' | 'project';
+export declare function requiredSourceScope(action: SkillSourceAction, kind: SkillSourceScopeKind): Scope | null;

package/dist/modules/skills/services/skill-source.policy.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.requiredSourceScope = requiredSourceScope;
+const OPERATION = {
+    view: 'list',
+    viewCredential: 'update',
+    connect: 'create',
+    addSkills: 'create',
+    review: 'update',
+    checkNow: 'update',
+    stopSyncing: 'update',
+    replaceCredential: 'update',
+    disconnect: 'delete',
+    deleteSkill: 'delete',
+};
+function requiredSourceScope(action, kind) {
+    if (kind === 'global')
+        return action === 'view' ? null : `skill:${OPERATION[action]}`;
+    return `projectSkill:${OPERATION[action]}`;
+}
+//# sourceMappingURL=skill-source.policy.js.map

package/dist/modules/skills/services/skill-source.policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-source.policy.js","sourceRoot":"","sources":["../../../../src/modules/skills/services/skill-source.policy.ts"],"names":[],"mappings":";;;AAwBA,MAAM,SAAS,GAAuE;IACrF,IAAI,EAAE,MAAM;IACZ,cAAc,EAAE,QAAQ;IACxB,OAAO,EAAE,QAAQ;IACjB,SAAS,EAAE,QAAQ;IACnB,MAAM,EAAE,QAAQ;IAChB,QAAQ,EAAE,QAAQ;IAClB,WAAW,EAAE,QAAQ;IACrB,iBAAiB,EAAE,QAAQ;IAC3B,UAAU,EAAE,QAAQ;IACpB,WAAW,EAAE,QAAQ;CACrB,CAAC;AAOF,6BACC,MAAyB,EACzB,IAA0B;IAE1B,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;IACtF,OAAO,gBAAgB,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;AAC5C,CAAC"}

package/dist/modules/skills/services/skill-source.service.d.ts

@@ -0,0 +1,40 @@
+import { type ConnectSkillSourceDto, type DiscoverSkillSourceDto, type SkillSourceConnectResponse, type SkillSourceDiscovery, type ListSkillSourceCredentialsQueryDto, type ListSkillSourceRepositoriesQueryDto, type SkillSourceCredentialOption, type SkillSourceRepositoryList } from '@n8n/api-types';
+import { TransactionRunner, type User } from '@n8n/db';
+import { SkillSourceRepository } from '../database/repositories/skill-source.repository';
+import { SkillRepository } from '../database/repositories/skill.repository';
+import { SkillSourceClientRegistry } from '../sources/skill-source-client-registry.service';
+import { SkillAccessService } from './skill-access.service';
+import { SkillSourceCredentialsProxy } from './skill-source-credentials-proxy.service';
+import { SkillSecurityScanner } from './skill-security-scanner.service';
+import { SkillService } from './skill.service';
+import { SkillSyncFlagGate } from './skill-sync-flag-gate';
+import { SkillsTelemetry } from './skills-telemetry.service';
+export declare class SkillSourceService {
+    private readonly flagGate;
+    private readonly skillAccess;
+    private readonly skillService;
+    private readonly skillRepository;
+    private readonly sourceRepository;
+    private readonly clients;
+    private readonly txRunner;
+    private readonly skillsTelemetry;
+    private readonly scanner;
+    private readonly credentials;
+    constructor(flagGate: SkillSyncFlagGate, skillAccess: SkillAccessService, skillService: SkillService, skillRepository: SkillRepository, sourceRepository: SkillSourceRepository, clients: SkillSourceClientRegistry, txRunner: TransactionRunner, skillsTelemetry: SkillsTelemetry, scanner: SkillSecurityScanner, credentials: SkillSourceCredentialsProxy);
+    discover(user: User, payload: DiscoverSkillSourceDto): Promise<SkillSourceDiscovery>;
+    connect(user: User, payload: ConnectSkillSourceDto): Promise<SkillSourceConnectResponse>;
+    private importSkills;
+    private trackFlagged;
+    private resolveScope;
+    listCredentials(user: User, query: ListSkillSourceCredentialsQueryDto): Promise<SkillSourceCredentialOption[]>;
+    listRepositories(user: User, query: ListSkillSourceRepositoriesQueryDto): Promise<SkillSourceRepositoryList>;
+    private resolveCredential;
+    private allClients;
+    private clientFor;
+    private credentialTypes;
+    private parse;
+    private duplicateOf;
+    private discoverAll;
+    private readAll;
+    private read;
+}