@atom8n/n8n 2.2.0

package/dist/scaling/worker-server.js

@@ -0,0 +1,167 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkerServer = void 0;
+const backend_common_1 = require("@n8n/backend-common");
+const config_1 = require("@n8n/config");
+const db_1 = require("@n8n/db");
+const di_1 = require("@n8n/di");
+const express_1 = __importDefault(require("express"));
+const n8n_core_1 = require("n8n-core");
+const node_assert_1 = require("node:assert");
+const node_http_1 = __importDefault(require("node:http"));
+const credentials_overwrites_1 = require("../credentials-overwrites");
+const credentials_overwrites_already_set_error_1 = require("../errors/credentials-overwrites-already-set.error");
+const non_json_body_error_1 = require("../errors/non-json-body.error");
+const external_hooks_1 = require("../external-hooks");
+const prometheus_metrics_service_1 = require("../metrics/prometheus-metrics.service");
+const middlewares_1 = require("../middlewares");
+const ResponseHelper = __importStar(require("../response-helper"));
+const redis_client_service_1 = require("../services/redis-client.service");
+let WorkerServer = class WorkerServer {
+    constructor(globalConfig, logger, dbConnection, credentialsOverwrites, externalHooks, instanceSettings, prometheusMetricsService, redisClientService) {
+        this.globalConfig = globalConfig;
+        this.logger = logger;
+        this.dbConnection = dbConnection;
+        this.credentialsOverwrites = credentialsOverwrites;
+        this.externalHooks = externalHooks;
+        this.instanceSettings = instanceSettings;
+        this.prometheusMetricsService = prometheusMetricsService;
+        this.redisClientService = redisClientService;
+        this.overwritesLoaded = false;
+        (0, node_assert_1.strict)(this.instanceSettings.instanceType === 'worker');
+        this.logger = this.logger.scoped('scaling');
+        this.app = (0, express_1.default)();
+        this.app.disable('x-powered-by');
+        this.server = node_http_1.default.createServer(this.app);
+        this.port = this.globalConfig.queue.health.port;
+        this.address = this.globalConfig.queue.health.address;
+        this.server.on('error', (error) => {
+            if (error.code === 'EADDRINUSE') {
+                this.logger.error(`Port ${this.port} is already in use, possibly by the n8n main process server. Please set a different port for the worker server.`);
+                process.exit(1);
+            }
+        });
+    }
+    async init(endpointsConfig) {
+        (0, node_assert_1.strict)(Object.values(endpointsConfig).some((e) => e));
+        this.endpointsConfig = endpointsConfig;
+        await this.mountEndpoints();
+        this.logger.debug('Worker server initialized', {
+            endpoints: Object.keys(this.endpointsConfig),
+        });
+        await new Promise((resolve) => this.server.listen(this.port, this.address, resolve));
+        await this.externalHooks.run('worker.ready');
+        this.logger.info(`\nn8n worker server listening on port ${this.port}`);
+    }
+    async mountEndpoints() {
+        const { health, overwrites, metrics } = this.endpointsConfig;
+        if (health) {
+            this.app.get('/healthz', async (_, res) => {
+                res.send({ status: 'ok' });
+            });
+            this.app.get('/healthz/readiness', async (_, res) => {
+                await this.readiness(_, res);
+            });
+        }
+        if (overwrites) {
+            const { endpoint } = this.globalConfig.credentials.overwrite;
+            const overwriteEndpointMiddleware = this.credentialsOverwrites.getOverwriteEndpointMiddleware();
+            if (overwriteEndpointMiddleware) {
+                this.app.use(`/${endpoint}`, overwriteEndpointMiddleware);
+            }
+            this.app.post(`/${endpoint}`, middlewares_1.rawBodyReader, middlewares_1.bodyParser, async (req, res) => {
+                await this.handleOverwrites(req, res);
+            });
+        }
+        if (metrics) {
+            await this.prometheusMetricsService.init(this.app);
+        }
+    }
+    async readiness(_req, res) {
+        const { connectionState } = this.dbConnection;
+        const isReady = connectionState.connected &&
+            connectionState.migrated &&
+            this.redisClientService.isConnected();
+        return isReady
+            ? res.status(200).send({ status: 'ok' })
+            : res.status(503).send({ status: 'error' });
+    }
+    async handleOverwrites(req, res) {
+        try {
+            if (this.overwritesLoaded) {
+                ResponseHelper.sendErrorResponse(res, new credentials_overwrites_already_set_error_1.CredentialsOverwritesAlreadySetError());
+                return;
+            }
+            if (req.contentType !== 'application/json') {
+                ResponseHelper.sendErrorResponse(res, new non_json_body_error_1.NonJsonBodyError());
+                return;
+            }
+            await this.credentialsOverwrites.setData(req.body, true);
+            this.overwritesLoaded = true;
+            this.logger.debug('Worker loaded credentials overwrites');
+            ResponseHelper.sendSuccessResponse(res, { success: true }, true, 200);
+        }
+        catch (error) {
+            this.logger.error('Error handling credentials overwrites', { error });
+            ResponseHelper.sendErrorResponse(res, new Error('An error occurred while handling credentials overwrites, please check the logs for more details'));
+        }
+    }
+};
+exports.WorkerServer = WorkerServer;
+exports.WorkerServer = WorkerServer = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [config_1.GlobalConfig,
+        backend_common_1.Logger,
+        db_1.DbConnection,
+        credentials_overwrites_1.CredentialsOverwrites,
+        external_hooks_1.ExternalHooks,
+        n8n_core_1.InstanceSettings,
+        prometheus_metrics_service_1.PrometheusMetricsService,
+        redis_client_service_1.RedisClientService])
+], WorkerServer);
+//# sourceMappingURL=worker-server.js.map

package/dist/scaling/worker-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-server.js","sourceRoot":"","sources":["../../src/scaling/worker-server.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,wDAA6C;AAC7C,wCAA2C;AAC3C,gCAAuC;AACvC,gCAAkC;AAElC,sDAA8B;AAC9B,uCAA4C;AAC5C,6CAA+C;AAC/C,0DAA6B;AAG7B,qEAAiE;AACjE,gHAAyG;AACzG,sEAAgE;AAChE,qDAAiD;AAEjD,qFAAgF;AAChF,+CAA0D;AAC1D,kEAAoD;AACpD,0EAAqE;AAiB9D,IAAM,YAAY,GAAlB,MAAM,YAAY;IAaxB,YACkB,YAA0B,EAC1B,MAAc,EACd,YAA0B,EAC1B,qBAA4C,EAC5C,aAA4B,EAC5B,gBAAkC,EAClC,wBAAkD,EAClD,kBAAsC;QAPtC,iBAAY,GAAZ,YAAY,CAAc;QAC1B,WAAM,GAAN,MAAM,CAAQ;QACd,iBAAY,GAAZ,YAAY,CAAc;QAC1B,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,kBAAa,GAAb,aAAa,CAAe;QAC5B,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,6BAAwB,GAAxB,wBAAwB,CAA0B;QAClD,uBAAkB,GAAlB,kBAAkB,CAAoB;QAVhD,qBAAgB,GAAG,KAAK,CAAC;QAYhC,IAAA,oBAAM,EAAC,IAAI,CAAC,gBAAgB,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC;QAExD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAE5C,IAAI,CAAC,GAAG,GAAG,IAAA,iBAAO,GAAE,CAAC;QAErB,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAEjC,IAAI,CAAC,MAAM,GAAG,mBAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE1C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;QAChD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC;QAEtD,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAA4B,EAAE,EAAE;YACxD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBACjC,IAAI,CAAC,MAAM,CAAC,KAAK,CAChB,QAAQ,IAAI,CAAC,IAAI,iHAAiH,CAClI,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjB,CAAC;QACF,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,eAA4C;QACtD,IAAA,oBAAM,EAAC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAEtD,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QAEvC,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAE5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE;YAC9C,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC;SAC5C,CAAC,CAAC;QAEH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;QAE3F,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAE7C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yCAAyC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACxE,CAAC;IAEO,KAAK,CAAC,cAAc;QAC3B,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC;QAE7D,IAAI,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE;gBACzC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5B,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE;gBACnD,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAC9B,CAAC,CAAC,CAAC;QACJ,CAAC;QAED,IAAI,UAAU,EAAE,CAAC;YAChB,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,SAAS,CAAC;YAE7D,MAAM,2BAA2B,GAChC,IAAI,CAAC,qBAAqB,CAAC,8BAA8B,EAAE,CAAC;YAE7D,IAAI,2BAA2B,EAAE,CAAC;gBACjC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,QAAQ,EAAE,EAAE,2BAA2B,CAAC,CAAC;YAC3D,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,QAAQ,EAAE,EAAE,2BAAa,EAAE,wBAAU,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;gBAC3E,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YACvC,CAAC,CAAC,CAAC;QACJ,CAAC;QAED,IAAI,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpD,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,IAAqB,EAAE,GAAqB;QACnE,MAAM,EAAE,eAAe,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC;QAC9C,MAAM,OAAO,GACZ,eAAe,CAAC,SAAS;YACzB,eAAe,CAAC,QAAQ;YACxB,IAAI,CAAC,kBAAkB,CAAC,WAAW,EAAE,CAAC;QAEvC,OAAO,OAAO;YACb,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACxC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9C,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC7B,GAAmD,EACnD,GAAqB;QAErB,IAAI,CAAC;YACJ,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC3B,cAAc,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,+EAAoC,EAAE,CAAC,CAAC;gBAClF,OAAO;YACR,CAAC;YAED,IAAI,GAAG,CAAC,WAAW,KAAK,kBAAkB,EAAE,CAAC;gBAC5C,cAAc,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,sCAAgB,EAAE,CAAC,CAAC;gBAC9D,OAAO;YACR,CAAC;YAED,MAAM,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAEzD,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;YAE7B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAE1D,cAAc,CAAC,mBAAmB,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACvE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACtE,cAAc,CAAC,iBAAiB,CAC/B,GAAG,EACH,IAAI,KAAK,CACR,iGAAiG,CACjG,CACD,CAAC;QACH,CAAC;IACF,CAAC;CACD,CAAA;AA5IY,oCAAY;uBAAZ,YAAY;IADxB,IAAA,YAAO,GAAE;qCAeuB,qBAAY;QAClB,uBAAM;QACA,iBAAY;QACH,8CAAqB;QAC7B,8BAAa;QACV,2BAAgB;QACR,qDAAwB;QAC9B,yCAAkB;GArB5C,YAAY,CA4IxB"}

package/dist/scaling/worker-status.service.ee.d.ts

@@ -0,0 +1,17 @@
+import { WorkerStatus } from '@n8n/api-types';
+import { InstanceSettings } from 'n8n-core';
+import { Push } from '../push';
+import { JobProcessor } from './job-processor';
+import { Publisher } from './pubsub/publisher.service';
+export declare class WorkerStatusService {
+    private readonly jobProcessor;
+    private readonly instanceSettings;
+    private readonly publisher;
+    private readonly push;
+    constructor(jobProcessor: JobProcessor, instanceSettings: InstanceSettings, publisher: Publisher, push: Push);
+    requestWorkerStatus(): Promise<void>;
+    handleWorkerStatusResponse(payload: WorkerStatus): void;
+    publishWorkerResponse(): Promise<void>;
+    private generateStatus;
+    private getOsCpuString;
+}

package/dist/scaling/worker-status.service.ee.js

@@ -0,0 +1,117 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkerStatusService = void 0;
+const decorators_1 = require("@n8n/decorators");
+const di_1 = require("@n8n/di");
+const n8n_core_1 = require("n8n-core");
+const node_os_1 = __importDefault(require("node:os"));
+const node_process_1 = __importDefault(require("node:process"));
+const constants_1 = require("../constants");
+const push_1 = require("../push");
+const job_processor_1 = require("./job-processor");
+const publisher_service_1 = require("./pubsub/publisher.service");
+let WorkerStatusService = class WorkerStatusService {
+    constructor(jobProcessor, instanceSettings, publisher, push) {
+        this.jobProcessor = jobProcessor;
+        this.instanceSettings = instanceSettings;
+        this.publisher = publisher;
+        this.push = push;
+    }
+    async requestWorkerStatus() {
+        if (this.instanceSettings.instanceType !== 'main')
+            return;
+        return await this.publisher.publishCommand({ command: 'get-worker-status' });
+    }
+    handleWorkerStatusResponse(payload) {
+        this.push.broadcast({
+            type: 'sendWorkerStatusMessage',
+            data: {
+                workerId: payload.senderId,
+                status: payload,
+            },
+        });
+    }
+    async publishWorkerResponse() {
+        await this.publisher.publishWorkerResponse({
+            senderId: this.instanceSettings.hostId,
+            response: 'response-to-get-worker-status',
+            payload: this.generateStatus(),
+        });
+    }
+    generateStatus() {
+        const constrainedMemory = node_process_1.default.constrainedMemory();
+        const isInContainer = constrainedMemory > 0 && constrainedMemory < Number.MAX_SAFE_INTEGER;
+        return {
+            senderId: this.instanceSettings.hostId,
+            runningJobsSummary: this.jobProcessor.getRunningJobsSummary(),
+            isInContainer,
+            process: {
+                memory: {
+                    available: node_process_1.default.availableMemory(),
+                    constraint: node_process_1.default.constrainedMemory(),
+                    ...node_process_1.default.memoryUsage(),
+                },
+                uptime: node_process_1.default.uptime(),
+            },
+            host: {
+                memory: {
+                    total: node_os_1.default.totalmem(),
+                    free: node_os_1.default.freemem(),
+                },
+            },
+            freeMem: node_os_1.default.freemem(),
+            totalMem: node_os_1.default.totalmem(),
+            uptime: node_process_1.default.uptime(),
+            loadAvg: node_os_1.default.loadavg(),
+            cpus: this.getOsCpuString(),
+            arch: node_os_1.default.arch(),
+            platform: node_os_1.default.platform(),
+            hostname: node_os_1.default.hostname(),
+            interfaces: Object.values(node_os_1.default.networkInterfaces()).flatMap((interfaces) => (interfaces ?? [])?.map((net) => ({
+                family: net.family,
+                address: net.address,
+                internal: net.internal,
+            }))),
+            version: constants_1.N8N_VERSION,
+        };
+    }
+    getOsCpuString() {
+        const cpus = node_os_1.default.cpus();
+        if (cpus.length === 0)
+            return 'no CPU info';
+        return `${cpus.length}x ${cpus[0].model}`;
+    }
+};
+exports.WorkerStatusService = WorkerStatusService;
+__decorate([
+    (0, decorators_1.OnPubSubEvent)('response-to-get-worker-status', { instanceType: 'main' }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", void 0)
+], WorkerStatusService.prototype, "handleWorkerStatusResponse", null);
+__decorate([
+    (0, decorators_1.OnPubSubEvent)('get-worker-status', { instanceType: 'worker' }),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Promise)
+], WorkerStatusService.prototype, "publishWorkerResponse", null);
+exports.WorkerStatusService = WorkerStatusService = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [job_processor_1.JobProcessor,
+        n8n_core_1.InstanceSettings,
+        publisher_service_1.Publisher,
+        push_1.Push])
+], WorkerStatusService);
+//# sourceMappingURL=worker-status.service.ee.js.map

package/dist/scaling/worker-status.service.ee.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-status.service.ee.js","sourceRoot":"","sources":["../../src/scaling/worker-status.service.ee.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AACA,gDAAgD;AAChD,gCAAkC;AAClC,uCAA4C;AAC5C,sDAAyB;AACzB,gEAAmC;AAEnC,2CAA0C;AAC1C,iCAA8B;AAE9B,mDAA+C;AAC/C,kEAAuD;AAGhD,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAC/B,YACkB,YAA0B,EAC1B,gBAAkC,EAClC,SAAoB,EACpB,IAAU;QAHV,iBAAY,GAAZ,YAAY,CAAc;QAC1B,qBAAgB,GAAhB,gBAAgB,CAAkB;QAClC,cAAS,GAAT,SAAS,CAAW;QACpB,SAAI,GAAJ,IAAI,CAAM;IACzB,CAAC;IAEJ,KAAK,CAAC,mBAAmB;QACxB,IAAI,IAAI,CAAC,gBAAgB,CAAC,YAAY,KAAK,MAAM;YAAE,OAAO;QAE1D,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAC9E,CAAC;IAGD,0BAA0B,CAAC,OAAqB;QAC/C,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;YACnB,IAAI,EAAE,yBAAyB;YAC/B,IAAI,EAAE;gBACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,OAAO;aACf;SACD,CAAC,CAAC;IACJ,CAAC;IAGK,AAAN,KAAK,CAAC,qBAAqB;QAC1B,MAAM,IAAI,CAAC,SAAS,CAAC,qBAAqB,CAAC;YAC1C,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM;YACtC,QAAQ,EAAE,+BAA+B;YACzC,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE;SAC9B,CAAC,CAAC;IACJ,CAAC;IAEO,cAAc;QACrB,MAAM,iBAAiB,GAAG,sBAAO,CAAC,iBAAiB,EAAE,CAAC;QAItD,MAAM,aAAa,GAAG,iBAAiB,GAAG,CAAC,IAAI,iBAAiB,GAAG,MAAM,CAAC,gBAAgB,CAAC;QAC3F,OAAO;YACN,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,MAAM;YACtC,kBAAkB,EAAE,IAAI,CAAC,YAAY,CAAC,qBAAqB,EAAE;YAC7D,aAAa;YACb,OAAO,EAAE;gBACR,MAAM,EAAE;oBACP,SAAS,EAAE,sBAAO,CAAC,eAAe,EAAE;oBACpC,UAAU,EAAE,sBAAO,CAAC,iBAAiB,EAAE;oBACvC,GAAG,sBAAO,CAAC,WAAW,EAAE;iBACxB;gBACD,MAAM,EAAE,sBAAO,CAAC,MAAM,EAAE;aACxB;YACD,IAAI,EAAE;gBACL,MAAM,EAAE;oBACP,KAAK,EAAE,iBAAE,CAAC,QAAQ,EAAE;oBACpB,IAAI,EAAE,iBAAE,CAAC,OAAO,EAAE;iBAClB;aACD;YACD,OAAO,EAAE,iBAAE,CAAC,OAAO,EAAE;YACrB,QAAQ,EAAE,iBAAE,CAAC,QAAQ,EAAE;YACvB,MAAM,EAAE,sBAAO,CAAC,MAAM,EAAE;YACxB,OAAO,EAAE,iBAAE,CAAC,OAAO,EAAE;YACrB,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE;YAC3B,IAAI,EAAE,iBAAE,CAAC,IAAI,EAAE;YACf,QAAQ,EAAE,iBAAE,CAAC,QAAQ,EAAE;YACvB,QAAQ,EAAE,iBAAE,CAAC,QAAQ,EAAE;YACvB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAE,CAAC,iBAAiB,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CACxE,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACjC,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,QAAQ,EAAE,GAAG,CAAC,QAAQ;aACtB,CAAC,CAAC,CACH;YACD,OAAO,EAAE,uBAAW;SACpB,CAAC;IACH,CAAC;IAEO,cAAc;QACrB,MAAM,IAAI,GAAG,iBAAE,CAAC,IAAI,EAAE,CAAC;QAEvB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,aAAa,CAAC;QAE5C,OAAO,GAAG,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;IAC3C,CAAC;CACD,CAAA;AApFY,kDAAmB;AAe/B;IADC,IAAA,0BAAa,EAAC,+BAA+B,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC;;;;qEASxE;AAGK;IADL,IAAA,0BAAa,EAAC,mBAAmB,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;;;;gEAO9D;8BAhCW,mBAAmB;IAD/B,IAAA,YAAO,GAAE;qCAGuB,4BAAY;QACR,2BAAgB;QACvB,6BAAS;QACd,WAAI;GALhB,mBAAmB,CAoF/B"}

package/dist/security-audit/constants.d.ts

@@ -0,0 +1,50 @@
+import type { Risk } from '../security-audit/types';
+export declare const RISK_CATEGORIES: Risk.Category[];
+export declare const SQL_NODE_TYPES_WITH_QUERY_PARAMS: Set<string>;
+export declare const SQL_NODE_TYPES: Set<string>;
+export declare const WEBHOOK_NODE_TYPE = "n8n-nodes-base.webhook";
+export declare const WEBHOOK_VALIDATOR_NODE_TYPES: Set<string>;
+export declare const FILESYSTEM_INTERACTION_NODE_TYPES: Set<string>;
+export declare const OFFICIAL_RISKY_NODE_TYPES: Set<string>;
+export declare const DATABASE_REPORT: {
+    readonly RISK: "database";
+    readonly SECTIONS: {
+        readonly EXPRESSIONS_IN_QUERIES: "Expressions in \"Execute Query\" fields in SQL nodes";
+        readonly EXPRESSIONS_IN_QUERY_PARAMS: "Expressions in \"Query Parameters\" fields in SQL nodes";
+        readonly UNUSED_QUERY_PARAMS: "Unused \"Query Parameters\" fields in SQL nodes";
+    };
+};
+export declare const CREDENTIALS_REPORT: {
+    readonly RISK: "credentials";
+    readonly SECTIONS: {
+        readonly CREDS_NOT_IN_ANY_USE: "Credentials not used in any workflow";
+        readonly CREDS_NOT_IN_ACTIVE_USE: "Credentials not used in any active workflow";
+        readonly CREDS_NOT_RECENTLY_EXECUTED: "Credentials not used in recently executed workflows";
+    };
+};
+export declare const FILESYSTEM_REPORT: {
+    readonly RISK: "filesystem";
+    readonly SECTIONS: {
+        readonly FILESYSTEM_INTERACTION_NODES: "Nodes that interact with the filesystem";
+    };
+};
+export declare const NODES_REPORT: {
+    readonly RISK: "nodes";
+    readonly SECTIONS: {
+        readonly OFFICIAL_RISKY_NODES: "Official risky nodes";
+        readonly COMMUNITY_NODES: "Community nodes";
+        readonly CUSTOM_NODES: "Custom nodes";
+    };
+};
+export declare const INSTANCE_REPORT: {
+    readonly RISK: "instance";
+    readonly SECTIONS: {
+        readonly UNPROTECTED_WEBHOOKS: "Unprotected webhooks in instance";
+        readonly OUTDATED_INSTANCE: "Outdated instance";
+        readonly SECURITY_SETTINGS: "Security settings";
+    };
+};
+export declare const ENV_VARS_DOCS_URL = "https://docs.n8n.io/hosting/configuration/environment-variables/";
+export declare const DB_QUERY_PARAMS_DOCS_URL = "https://docs.n8n.io/integrations/builtin/app-nodes/n8n-nodes-base.postgres#use-query-parameters";
+export declare const COMMUNITY_NODES_RISKS_URL = "https://docs.n8n.io/integrations/community-nodes/risks";
+export declare const NPM_PACKAGE_URL = "https://www.npmjs.com/package";

package/dist/security-audit/constants.js

@@ -0,0 +1,89 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NPM_PACKAGE_URL = exports.COMMUNITY_NODES_RISKS_URL = exports.DB_QUERY_PARAMS_DOCS_URL = exports.ENV_VARS_DOCS_URL = exports.INSTANCE_REPORT = exports.NODES_REPORT = exports.FILESYSTEM_REPORT = exports.CREDENTIALS_REPORT = exports.DATABASE_REPORT = exports.OFFICIAL_RISKY_NODE_TYPES = exports.FILESYSTEM_INTERACTION_NODE_TYPES = exports.WEBHOOK_VALIDATOR_NODE_TYPES = exports.WEBHOOK_NODE_TYPE = exports.SQL_NODE_TYPES = exports.SQL_NODE_TYPES_WITH_QUERY_PARAMS = exports.RISK_CATEGORIES = void 0;
+exports.RISK_CATEGORIES = [
+    'credentials',
+    'database',
+    'nodes',
+    'instance',
+    'filesystem',
+];
+exports.SQL_NODE_TYPES_WITH_QUERY_PARAMS = new Set([
+    'n8n-nodes-base.postgres',
+    'n8n-nodes-base.crateDb',
+    'n8n-nodes-base.questDb',
+    'n8n-nodes-base.timescaleDb',
+]);
+exports.SQL_NODE_TYPES = new Set([
+    ...exports.SQL_NODE_TYPES_WITH_QUERY_PARAMS,
+    'n8n-nodes-base.mySql',
+    'n8n-nodes-base.microsoftSql',
+    'n8n-nodes-base.snowflake',
+]);
+exports.WEBHOOK_NODE_TYPE = 'n8n-nodes-base.webhook';
+exports.WEBHOOK_VALIDATOR_NODE_TYPES = new Set([
+    'n8n-nodes-base.if',
+    'n8n-nodes-base.switch',
+    'n8n-nodes-base.code',
+    'n8n-nodes-base.function',
+    'n8n-nodes-base.functionItem',
+]);
+exports.FILESYSTEM_INTERACTION_NODE_TYPES = new Set([
+    'n8n-nodes-base.readPdf',
+    'n8n-nodes-base.readBinaryFile',
+    'n8n-nodes-base.readBinaryFiles',
+    'n8n-nodes-base.spreadsheetFile',
+    'n8n-nodes-base.writeBinaryFile',
+]);
+exports.OFFICIAL_RISKY_NODE_TYPES = new Set([
+    'n8n-nodes-base.executeCommand',
+    'n8n-nodes-base.code',
+    'n8n-nodes-base.function',
+    'n8n-nodes-base.functionItem',
+    'n8n-nodes-base.httpRequest',
+    'n8n-nodes-base.ssh',
+    'n8n-nodes-base.ftp',
+]);
+exports.DATABASE_REPORT = {
+    RISK: 'database',
+    SECTIONS: {
+        EXPRESSIONS_IN_QUERIES: 'Expressions in "Execute Query" fields in SQL nodes',
+        EXPRESSIONS_IN_QUERY_PARAMS: 'Expressions in "Query Parameters" fields in SQL nodes',
+        UNUSED_QUERY_PARAMS: 'Unused "Query Parameters" fields in SQL nodes',
+    },
+};
+exports.CREDENTIALS_REPORT = {
+    RISK: 'credentials',
+    SECTIONS: {
+        CREDS_NOT_IN_ANY_USE: 'Credentials not used in any workflow',
+        CREDS_NOT_IN_ACTIVE_USE: 'Credentials not used in any active workflow',
+        CREDS_NOT_RECENTLY_EXECUTED: 'Credentials not used in recently executed workflows',
+    },
+};
+exports.FILESYSTEM_REPORT = {
+    RISK: 'filesystem',
+    SECTIONS: {
+        FILESYSTEM_INTERACTION_NODES: 'Nodes that interact with the filesystem',
+    },
+};
+exports.NODES_REPORT = {
+    RISK: 'nodes',
+    SECTIONS: {
+        OFFICIAL_RISKY_NODES: 'Official risky nodes',
+        COMMUNITY_NODES: 'Community nodes',
+        CUSTOM_NODES: 'Custom nodes',
+    },
+};
+exports.INSTANCE_REPORT = {
+    RISK: 'instance',
+    SECTIONS: {
+        UNPROTECTED_WEBHOOKS: 'Unprotected webhooks in instance',
+        OUTDATED_INSTANCE: 'Outdated instance',
+        SECURITY_SETTINGS: 'Security settings',
+    },
+};
+exports.ENV_VARS_DOCS_URL = 'https://docs.n8n.io/hosting/configuration/environment-variables/';
+exports.DB_QUERY_PARAMS_DOCS_URL = 'https://docs.n8n.io/integrations/builtin/app-nodes/n8n-nodes-base.postgres#use-query-parameters';
+exports.COMMUNITY_NODES_RISKS_URL = 'https://docs.n8n.io/integrations/community-nodes/risks';
+exports.NPM_PACKAGE_URL = 'https://www.npmjs.com/package';
+//# sourceMappingURL=constants.js.map

package/dist/security-audit/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/security-audit/constants.ts"],"names":[],"mappings":";;;AAMa,QAAA,eAAe,GAAoB;IAC/C,aAAa;IACb,UAAU;IACV,OAAO;IACP,UAAU;IACV,YAAY;CACZ,CAAC;AAMW,QAAA,gCAAgC,GAAG,IAAI,GAAG,CAAC;IACvD,yBAAyB;IACzB,wBAAwB;IACxB,wBAAwB;IACxB,4BAA4B;CAC5B,CAAC,CAAC;AAEU,QAAA,cAAc,GAAG,IAAI,GAAG,CAAC;IACrC,GAAG,wCAAgC;IACnC,sBAAsB;IACtB,6BAA6B;IAC7B,0BAA0B;CAC1B,CAAC,CAAC;AAEU,QAAA,iBAAiB,GAAG,wBAAwB,CAAC;AAE7C,QAAA,4BAA4B,GAAG,IAAI,GAAG,CAAC;IACnD,mBAAmB;IACnB,uBAAuB;IACvB,qBAAqB;IACrB,yBAAyB;IACzB,6BAA6B;CAC7B,CAAC,CAAC;AAEU,QAAA,iCAAiC,GAAG,IAAI,GAAG,CAAC;IACxD,wBAAwB;IACxB,+BAA+B;IAC/B,gCAAgC;IAChC,gCAAgC;IAChC,gCAAgC;CAChC,CAAC,CAAC;AAEU,QAAA,yBAAyB,GAAG,IAAI,GAAG,CAAC;IAChD,+BAA+B;IAC/B,qBAAqB;IACrB,yBAAyB;IACzB,6BAA6B;IAC7B,4BAA4B;IAC5B,oBAAoB;IACpB,oBAAoB;CACpB,CAAC,CAAC;AAMU,QAAA,eAAe,GAAG;IAC9B,IAAI,EAAE,UAAU;IAChB,QAAQ,EAAE;QACT,sBAAsB,EAAE,oDAAoD;QAC5E,2BAA2B,EAAE,uDAAuD;QACpF,mBAAmB,EAAE,+CAA+C;KACpE;CACQ,CAAC;AAEE,QAAA,kBAAkB,GAAG;IACjC,IAAI,EAAE,aAAa;IACnB,QAAQ,EAAE;QACT,oBAAoB,EAAE,sCAAsC;QAC5D,uBAAuB,EAAE,6CAA6C;QACtE,2BAA2B,EAAE,qDAAqD;KAClF;CACQ,CAAC;AAEE,QAAA,iBAAiB,GAAG;IAChC,IAAI,EAAE,YAAY;IAClB,QAAQ,EAAE;QACT,4BAA4B,EAAE,yCAAyC;KACvE;CACQ,CAAC;AAEE,QAAA,YAAY,GAAG;IAC3B,IAAI,EAAE,OAAO;IACb,QAAQ,EAAE;QACT,oBAAoB,EAAE,sBAAsB;QAC5C,eAAe,EAAE,iBAAiB;QAClC,YAAY,EAAE,cAAc;KAC5B;CACQ,CAAC;AAEE,QAAA,eAAe,GAAG;IAC9B,IAAI,EAAE,UAAU;IAChB,QAAQ,EAAE;QACT,oBAAoB,EAAE,kCAAkC;QACxD,iBAAiB,EAAE,mBAAmB;QACtC,iBAAiB,EAAE,mBAAmB;KACtC;CACQ,CAAC;AAME,QAAA,iBAAiB,GAAG,kEAAkE,CAAC;AAEvF,QAAA,wBAAwB,GACpC,iGAAiG,CAAC;AAEtF,QAAA,yBAAyB,GAAG,wDAAwD,CAAC;AAErF,QAAA,eAAe,GAAG,+BAA+B,CAAC"}

package/dist/security-audit/risk-reporters/credentials-risk-reporter.d.ts

@@ -0,0 +1,16 @@
+import { SecurityConfig } from '@n8n/config';
+import { CredentialsRepository, ExecutionDataRepository, ExecutionRepository } from '@n8n/db';
+import type { IWorkflowBase } from 'n8n-workflow';
+import type { RiskReporter, Risk } from '../../security-audit/types';
+export declare class CredentialsRiskReporter implements RiskReporter {
+    private readonly credentialsRepository;
+    private readonly executionRepository;
+    private readonly executionDataRepository;
+    private readonly securityConfig;
+    constructor(credentialsRepository: CredentialsRepository, executionRepository: ExecutionRepository, executionDataRepository: ExecutionDataRepository, securityConfig: SecurityConfig);
+    report(workflows: IWorkflowBase[]): Promise<Risk.StandardReport | null>;
+    private getAllCredsInUse;
+    private getAllExistingCreds;
+    private getExecutedWorkflowsInPastDays;
+    private getCredsInRecentlyExecutedWorkflows;
+}

package/dist/security-audit/risk-reporters/credentials-risk-reporter.js

@@ -0,0 +1,131 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CredentialsRiskReporter = void 0;
+const config_1 = require("@n8n/config");
+const db_1 = require("@n8n/db");
+const di_1 = require("@n8n/di");
+const constants_1 = require("../../security-audit/constants");
+let CredentialsRiskReporter = class CredentialsRiskReporter {
+    constructor(credentialsRepository, executionRepository, executionDataRepository, securityConfig) {
+        this.credentialsRepository = credentialsRepository;
+        this.executionRepository = executionRepository;
+        this.executionDataRepository = executionDataRepository;
+        this.securityConfig = securityConfig;
+    }
+    async report(workflows) {
+        const days = this.securityConfig.daysAbandonedWorkflow;
+        const allExistingCreds = await this.getAllExistingCreds();
+        const { credsInAnyUse, credsInActiveUse } = this.getAllCredsInUse(workflows);
+        const recentlyExecutedCreds = await this.getCredsInRecentlyExecutedWorkflows(days);
+        const credsNotInAnyUse = allExistingCreds.filter((c) => !credsInAnyUse.has(c.id));
+        const credsNotInActiveUse = allExistingCreds.filter((c) => !credsInActiveUse.has(c.id));
+        const credsNotRecentlyExecuted = allExistingCreds.filter((c) => !recentlyExecutedCreds.has(c.id));
+        const issues = [credsNotInAnyUse, credsNotInActiveUse, credsNotRecentlyExecuted];
+        if (issues.every((i) => i.length === 0))
+            return null;
+        const report = {
+            risk: constants_1.CREDENTIALS_REPORT.RISK,
+            sections: [],
+        };
+        const hint = 'Keeping unused credentials in your instance is an unneeded security risk.';
+        const recommendation = 'Consider deleting these credentials if you no longer need them.';
+        const sentenceStart = ({ length }) => length > 1 ? 'These credentials are' : 'This credential is';
+        if (credsNotInAnyUse.length > 0) {
+            report.sections.push({
+                title: constants_1.CREDENTIALS_REPORT.SECTIONS.CREDS_NOT_IN_ANY_USE,
+                description: [sentenceStart(credsNotInAnyUse), 'not used in any workflow.', hint].join(' '),
+                recommendation,
+                location: credsNotInAnyUse,
+            });
+        }
+        if (credsNotInActiveUse.length > 0) {
+            report.sections.push({
+                title: constants_1.CREDENTIALS_REPORT.SECTIONS.CREDS_NOT_IN_ACTIVE_USE,
+                description: [
+                    sentenceStart(credsNotInActiveUse),
+                    'not used in active workflows.',
+                    hint,
+                ].join(' '),
+                recommendation,
+                location: credsNotInActiveUse,
+            });
+        }
+        if (credsNotRecentlyExecuted.length > 0) {
+            report.sections.push({
+                title: constants_1.CREDENTIALS_REPORT.SECTIONS.CREDS_NOT_RECENTLY_EXECUTED,
+                description: [
+                    sentenceStart(credsNotRecentlyExecuted),
+                    `not used in recently executed workflows, i.e. workflows executed in the past ${days} days.`,
+                    hint,
+                ].join(' '),
+                recommendation,
+                location: credsNotRecentlyExecuted,
+            });
+        }
+        return report;
+    }
+    getAllCredsInUse(workflows) {
+        const credsInAnyUse = new Set();
+        const credsInActiveUse = new Set();
+        workflows.forEach((workflow) => {
+            workflow.nodes.forEach((node) => {
+                if (!node.credentials)
+                    return;
+                Object.values(node.credentials).forEach((cred) => {
+                    if (!cred?.id)
+                        return;
+                    credsInAnyUse.add(cred.id);
+                    if (workflow.activeVersionId !== null) {
+                        credsInActiveUse.add(cred.id);
+                    }
+                });
+            });
+        });
+        return {
+            credsInAnyUse,
+            credsInActiveUse,
+        };
+    }
+    async getAllExistingCreds() {
+        const credentials = await this.credentialsRepository.find({ select: ['id', 'name'] });
+        return credentials.map(({ id, name }) => ({ kind: 'credential', id, name }));
+    }
+    async getExecutedWorkflowsInPastDays(days) {
+        const date = new Date();
+        date.setDate(date.getDate() - days);
+        const executionIds = await this.executionRepository.getIdsSince(date);
+        return await this.executionDataRepository.findByExecutionIds(executionIds);
+    }
+    async getCredsInRecentlyExecutedWorkflows(days) {
+        const executedWorkflows = await this.getExecutedWorkflowsInPastDays(days);
+        return executedWorkflows.reduce((acc, { nodes }) => {
+            nodes.forEach((node) => {
+                if (node.credentials) {
+                    Object.values(node.credentials).forEach((c) => {
+                        if (c.id)
+                            acc.add(c.id);
+                    });
+                }
+            });
+            return acc;
+        }, new Set());
+    }
+};
+exports.CredentialsRiskReporter = CredentialsRiskReporter;
+exports.CredentialsRiskReporter = CredentialsRiskReporter = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [db_1.CredentialsRepository,
+        db_1.ExecutionRepository,
+        db_1.ExecutionDataRepository,
+        config_1.SecurityConfig])
+], CredentialsRiskReporter);
+//# sourceMappingURL=credentials-risk-reporter.js.map

package/dist/security-audit/risk-reporters/credentials-risk-reporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credentials-risk-reporter.js","sourceRoot":"","sources":["../../../src/security-audit/risk-reporters/credentials-risk-reporter.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAA6C;AAC7C,gCAA8F;AAC9F,gCAAkC;AAGlC,0DAAgE;AAIzD,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IACnC,YACkB,qBAA4C,EAC5C,mBAAwC,EACxC,uBAAgD,EAChD,cAA8B;QAH9B,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,wBAAmB,GAAnB,mBAAmB,CAAqB;QACxC,4BAAuB,GAAvB,uBAAuB,CAAyB;QAChD,mBAAc,GAAd,cAAc,CAAgB;IAC7C,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,SAA0B;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,qBAAqB,CAAC;QAEvD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC1D,MAAM,EAAE,aAAa,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC7E,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,mCAAmC,CAAC,IAAI,CAAC,CAAC;QAEnF,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAClF,MAAM,mBAAmB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACxF,MAAM,wBAAwB,GAAG,gBAAgB,CAAC,MAAM,CACvD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CACvC,CAAC;QAEF,MAAM,MAAM,GAAG,CAAC,gBAAgB,EAAE,mBAAmB,EAAE,wBAAwB,CAAC,CAAC;QAEjF,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAErD,MAAM,MAAM,GAAwB;YACnC,IAAI,EAAE,8BAAkB,CAAC,IAAI;YAC7B,QAAQ,EAAE,EAAE;SACZ,CAAC;QAEF,MAAM,IAAI,GAAG,2EAA2E,CAAC;QACzF,MAAM,cAAc,GAAG,iEAAiE,CAAC;QAEzF,MAAM,aAAa,GAAG,CAAC,EAAE,MAAM,EAAsB,EAAE,EAAE,CACxD,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,oBAAoB,CAAC;QAE7D,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACpB,KAAK,EAAE,8BAAkB,CAAC,QAAQ,CAAC,oBAAoB;gBACvD,WAAW,EAAE,CAAC,aAAa,CAAC,gBAAgB,CAAC,EAAE,2BAA2B,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;gBAC3F,cAAc;gBACd,QAAQ,EAAE,gBAAgB;aAC1B,CAAC,CAAC;QACJ,CAAC;QAED,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACpB,KAAK,EAAE,8BAAkB,CAAC,QAAQ,CAAC,uBAAuB;gBAC1D,WAAW,EAAE;oBACZ,aAAa,CAAC,mBAAmB,CAAC;oBAClC,+BAA+B;oBAC/B,IAAI;iBACJ,CAAC,IAAI,CAAC,GAAG,CAAC;gBACX,cAAc;gBACd,QAAQ,EAAE,mBAAmB;aAC7B,CAAC,CAAC;QACJ,CAAC;QAED,IAAI,wBAAwB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACpB,KAAK,EAAE,8BAAkB,CAAC,QAAQ,CAAC,2BAA2B;gBAC9D,WAAW,EAAE;oBACZ,aAAa,CAAC,wBAAwB,CAAC;oBACvC,gFAAgF,IAAI,QAAQ;oBAC5F,IAAI;iBACJ,CAAC,IAAI,CAAC,GAAG,CAAC;gBACX,cAAc;gBACd,QAAQ,EAAE,wBAAwB;aAClC,CAAC,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IACf,CAAC;IAEO,gBAAgB,CAAC,SAA0B;QAClD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;QACxC,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;QAE3C,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;YAC9B,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC/B,IAAI,CAAC,IAAI,CAAC,WAAW;oBAAE,OAAO;gBAE9B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;oBAChD,IAAI,CAAC,IAAI,EAAE,EAAE;wBAAE,OAAO;oBAEtB,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAE3B,IAAI,QAAQ,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;wBACvC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAC/B,CAAC;gBACF,CAAC,CAAC,CAAC;YACJ,CAAC,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,OAAO;YACN,aAAa;YACb,gBAAgB;SAChB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,mBAAmB;QAChC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAEtF,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAqB,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACvF,CAAC;IAEO,KAAK,CAAC,8BAA8B,CAAC,IAAY;QACxD,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAExB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;QAEpC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAEtE,OAAO,MAAM,IAAI,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAC5E,CAAC;IAKO,KAAK,CAAC,mCAAmC,CAAC,IAAY;QAC7D,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,CAAC;QAE1E,OAAO,iBAAiB,CAAC,MAAM,CAAc,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;YAC/D,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;gBACtB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBACtB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;wBAC7C,IAAI,CAAC,CAAC,EAAE;4BAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACzB,CAAC,CAAC,CAAC;gBACJ,CAAC;YACF,CAAC,CAAC,CAAC;YAEH,OAAO,GAAG,CAAC;QACZ,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;IACf,CAAC;CACD,CAAA;AAtIY,0DAAuB;kCAAvB,uBAAuB;IADnC,IAAA,YAAO,GAAE;qCAGgC,0BAAqB;QACvB,wBAAmB;QACf,4BAAuB;QAChC,uBAAc;GALpC,uBAAuB,CAsInC"}

package/dist/security-audit/risk-reporters/database-risk-reporter.d.ts

@@ -0,0 +1,6 @@
+import type { IWorkflowBase } from 'n8n-workflow';
+import type { RiskReporter, Risk } from '../../security-audit/types';
+export declare class DatabaseRiskReporter implements RiskReporter {
+    report(workflows: IWorkflowBase[]): Promise<Risk.StandardReport | null>;
+    private getIssues;
+}