feat: add n8n serve node and harden remote access

- Add the n8n community node package with credentials, command mapping, direct serve TCP client, and browser-cli protocol crypto helpers.

- Cover Ed25519 signing, canonical JSON, PQ transport encryption, request mapping, and security behavior with unit tests.

- Harden serve-http with per-address rate limiting, an 8 MB request body cap, and clear warnings when binding plain HTTP beyond loopback.

- Stop one-shot --key overrides from being persisted automatically; document explicit remote trust and keep key-management behind the keys policy tier.

- Make HTML-to-Markdown conversion safer by bounding tree depth and dropping unsafe link/image URL schemes.

- Bump package and extension release metadata to 0.16.3.

This commit is contained in:

Daniel Dolezal

2026-06-19 10:00:23 +02:00

parent 7fe0e27fec

commit cea8a7e994

28 changed files with 3687 additions and 164 deletions

									
										uv.lock
									
Generated

		+1
		-1
	
												View File
												
				@@ -489,7 +489,7 @@ wheels = [

				[[package]]

				name = "real-browser-cli"

				version = "0.16.2"

				version = "0.16.3"

				source = { editable = "." }

				dependencies = [

				    { name = "click" },