@ironfang/n8n-nodes-ironfang 0.3.0 → 0.4.0

package/README.md

@@ -2,12 +2,17 @@
 
 # @ironfang/n8n-nodes-ironfang
 
-Use Renderwolf, Financewolf, Auditwolf and Ironfang's public developer tools in
-n8n. The Ironfang action node has **103 operations**, grouped by product. Ironfang
-Trigger receives signed Auditwolf and Renderwolf events.
-
-**Release: 0.3.0.** This version includes the product expansion and signed event
-trigger described below, plus the maintenance fixes from 0.2.3.
+Use Ironfang Render, Finance, Audit and Rig, and Ironfang's public developer
+tools, in n8n. The Ironfang action node has **162 operations**, grouped by
+product. Ironfang Trigger receives signed Audit, Finance and Render events.
+
+**Release: 0.4.0.** The products are named Ironfang Render, Finance and Audit
+(formerly Renderwolf, Financewolf and Auditwolf), and the node follows: requests
+go to the `/render`, `/finance` and `/audit` API prefixes and scopes are shown as
+`render:*`, `finance:*` and `audit:*`. It adds Ironfang Rig, Finance jobs,
+batches, destinations, deliveries, signed reports and PDFs, the newer Audit and
+Render lists, and paging for Audit lists. Saved workflows and credentials need no
+change; see [Compatibility with earlier names](#compatibility-with-earlier-names).
 
 ## Installation and credentials
 
@@ -18,36 +23,40 @@ npm publishing and automated checks do not establish that approval.
 
 Create an `if_live_` platform API key at [portal.ironfang.uk](https://portal.ironfang.uk)
 with the scopes your workflow needs, then select an Ironfang API credential.
-Existing `rw_live_` Renderwolf keys and both origin-only and `/renderwolf` base
+Existing `rw_live_` Render keys and both origin-only and `/renderwolf` base
 URLs remain supported. Other product bases and custom gateway prefixes work too.
 A successful credential test confirms authentication by a product, including
 an explicit scope refusal; it does not grant other operation permissions.
 
-Public tools need no credential. Financewolf validation, generation and ruleset
-reads offer an explicit **Public** mode; saved results require authentication.
-An invalid API key never falls back to public access. Public Financewolf calls
-cannot use idempotency keys or access an organisation's retained results.
+Public tools need no credential. Finance validation, generation, ruleset reads
+and signed-report verification offer an explicit **Public** mode; saved results
+require authentication. An invalid API key never falls back to public access.
+Public Finance calls cannot use idempotency keys or access an organisation's
+retained results.
 
 ## Products and operations
 
 | Resource | Operations |
 | --- | --- |
-| Renderwolf | Screenshot, PDF, template image, video clip, signed URL, usage, QR, site preview, templates, jobs, batches, capabilities, request history, destinations and deliveries |
-| Financewolf | Validate XML; generate a validated UBL invoice or credit note; list/get rulesets; list/get/delete saved results |
-| Auditwolf | Sites, audits, pages, findings and decisions, rules and rule packs, monitors, changes and comparisons, evidence, artifacts, export destinations/jobs, webhooks and deliveries, events and usage |
+| Render | Screenshot, PDF, template image, video clip, signed URL, usage, QR, site preview, templates, jobs, batches and their lists, capabilities, request history, destinations and deliveries |
+| Finance | Validate XML; generate a validated UBL invoice or credit note; async jobs and ordered batches; webhook and S3 destinations, deliveries and retries; signed reports and their verification; readable PDFs of saved generations; list/get rulesets; list/get/delete saved results; usage |
+| Audit | Sites, audits, pages, findings and decisions, rules and rule packs, monitors across the organisation or a site, changes and comparisons, evidence, artifacts, export destinations/jobs, webhooks and deliveries across the organisation or an endpoint, events and usage |
+| Rig | Projects, suites and versions; runs, holds and receipts; email, callback, mock and connector resources; mock rules; faults; the event timeline, waits, payloads and callback replay; evidence bundles; usage and environment |
 | Public Tool | Image conversion, favicon ZIP, QR generation and verification, UUID generation and inspection, free screenshot |
 
 The [operation reference](docs/operations.md) lists each action's endpoint,
 permission, query fields and request example. Complex API bodies use a JSON
 editor so nested fields remain available. Replace the example values before
 running a write operation. Request definitions are available in the product
-specifications: [Renderwolf](https://api.ironfang.uk/renderwolf/openapi.yaml),
-[Financewolf](https://api.ironfang.uk/financewolf/openapi.yaml),
-[Auditwolf](https://api.ironfang.uk/auditwolf/openapi.yaml).
+specifications: [Render](https://api.ironfang.uk/render/openapi.yaml),
+[Finance](https://api.ironfang.uk/finance/openapi.yaml),
+[Audit](https://api.ironfang.uk/audit/openapi.yaml),
+[Rig](https://api.ironfang.uk/rig/openapi.yaml).
 
 Screenshots support PNG/JPEG/WebP and phone/tablet device presets. Advanced
-Render Options accepts waits, blocking, selectors, request headers, cookies,
-user agent and pixel density. For PDFs it also accepts `paper_format` and
+Render Options accepts custom `css`, a page `script`, ordered `actions` (click,
+hover, wait for a selector, delay), waits, blocking, selectors, request headers,
+cookies, user agent and pixel density. For PDFs it also accepts `paper_format` and
 `margin` (numeric inches); screenshot region capture uses `clip`. For template images it accepts
 inline `qr` variables. The source and template variables have their own fields.
 The template picker loads pages without HTML and requires template-read scope;
@@ -55,26 +64,46 @@ entering a template ID directly needs only render scope.
 
 Job and batch submission require a stable idempotency key. Get the returned ID,
 use n8n's Wait node between status checks, then Download Job Result. Signed result
-URLs are validated against the configured Renderwolf endpoint and downloaded
+URLs are validated against the configured Render endpoint and downloaded
 without an API key. Site Preview returns the MP4 in the selected binary field
 and a JPEG in `poster`. A result download can return this same two-file bundle.
 
-Financewolf Validate accepts XML text or an n8n binary field, including filesystem
+Finance Validate accepts XML text or an n8n binary field, including filesystem
 and external binary storage. A standards-invalid invoice is a normal result:
 branch on `outcome`, rather than treating HTTP 200 as an invoice approval.
 Generation requires explicit ruleset/profile selectors and preserves decimal
 strings. It returns validation metadata and XML binary data after checking the
 artifact's byte count and SHA-256. Authenticated artifacts/findings are retained
-by Financewolf for 30 days; deletion does not remove n8n's own execution records.
-
-Paginated templates, jobs, deliveries, request history, Financewolf results,
-Auditwolf findings and page observations have Return All, Limit and starting
-cursor/offset controls. Each row becomes an output item with its input link.
-Other list actions retain the API's JSON envelope and API-imposed result caps.
-Pagination stops at 1,000 pages and refuses repeated cursors.
-
-S3 destination creation reads secret fields from an **Ironfang S3 Destination**
-credential. Do not put them in Request Body JSON. Its connection check validates
+by Finance for 30 days; deletion does not remove n8n's own execution records.
+
+Finance jobs and batches run validation or generation asynchronously: create one
+with a stable idempotency key, poll it with n8n's Wait node, or register a
+destination and let Ironfang Trigger receive the signed result. Download Signed
+Report and Render E-Invoice PDF return files for a saved result's
+`operation_id`; Verify Signed Report takes the report ZIP from a binary field
+and needs no key. `verified` means the report is intact, not that the invoice
+is valid: read `invoice_outcome` as well.
+
+Rig drives an integration test run from a workflow: start a run for a suite,
+allocate inboxes, callback URLs and mocks, arm faults, and use Wait For Event to
+hold until your system under test has called in. A wait that times out is an
+ordinary result with `matched: false`; continue from `next_since`. The node
+allows a wait its full 90 seconds. Export Run Evidence returns the ZIP bundle.
+Create Connector returns a one-time bootstrap token in its output.
+
+Paginated lists have Return All, Limit and a starting cursor, offset or
+sequence. Each row becomes an output item with its input link. Audit lists that
+were released without paging (audits, audit pages, finding events, rule
+revisions, exports, monitor runs and an endpoint's deliveries) page from node
+version 1.2; in workflows saved with an earlier version they keep returning the
+API's single JSON response, which now carries `next_cursor`. Re-add the node to
+move a saved workflow to paged output. Other list actions retain the API's JSON
+envelope and API-imposed result caps. Pagination stops at 1,000 pages and
+refuses repeated cursors.
+
+S3 destination creation for Render, Finance and Audit reads secret fields from
+an **Ironfang S3 Destination** credential; Finance Update Destination replaces
+stored keys the same way. Do not put them in Request Body JSON. Its connection check validates
 that fields are present; the product's Test Destination operation verifies
 actual S3 access once the bucket/region are registered. One-time webhook secrets
 returned by creation/rotation need to be saved securely; n8n execution retention
@@ -84,45 +113,53 @@ also applies to these outputs.
 
 | Actions | API key scopes |
 | --- | --- |
-| Renderwolf rendering, jobs/batches, delivery reads | `renderwolf:render` |
-| Signed URL | `renderwolf:sign` |
-| Templates | `renderwolf:templates:read` / `renderwolf:templates:write` |
-| Usage and request history | `renderwolf:usage:read` |
-| Destinations and redelivery | `renderwolf:destinations` |
-| Financewolf validation/generation/result deletion | `financewolf:einvoices:write` |
-| Financewolf saved result reads | `financewolf:einvoices:read` |
-| Financewolf authenticated ruleset reads | `financewolf:einvoices:rulesets:read` |
-| Auditwolf reads / running audits / managing resources | `auditwolf:read` / `auditwolf:run` / `auditwolf:manage` |
-| Auditwolf evidence and artifacts | `auditwolf:evidence` |
-| Auditwolf webhooks and exports | `auditwolf:integrations` |
-
-Renderwolf includes **250 free credits each month**, with no card required.
+| Render rendering, jobs/batches, delivery reads | `render:render` |
+| Signed URL | `render:sign` |
+| Templates | `render:templates:read` / `render:templates:write` |
+| Usage and request history | `render:usage:read` |
+| Destinations and redelivery | `render:destinations` |
+| Finance validation, generation, jobs, batches, result deletion | `finance:einvoices:write` |
+| Finance saved results, job/batch/delivery reads, reports and PDFs | `finance:einvoices:read` |
+| Finance authenticated ruleset reads | `finance:einvoices:rulesets:read` |
+| Finance destinations and delivery retries | `finance:einvoices:destinations:manage` |
+| Finance usage | `finance:billing:manage` |
+| Audit reads / running audits / managing resources | `audit:read` / `audit:run` / `audit:manage` |
+| Audit evidence and artifacts | `audit:evidence` |
+| Audit webhooks and exports | `audit:integrations` |
+| Rig reads, waits and evidence / projects and suites / runs, resources and faults / connectors | `rig:read` / `rig:write` / `rig:run` / `rig:connector` |
+
+Keys created with the earlier `renderwolf:*`, `financewolf:*` and `auditwolf:*`
+scopes keep working: the platform treats them as the scopes above.
+
+Render includes **250 free credits each month**, with no card required.
 A screenshot or template image costs 1 credit, a PDF 2, and QR codes 0. Clip
 costs depend on duration and output size. Cache hits consume no credits.
-Free renders can carry a Renderwolf badge; QR codes never carry one. This
-allowance belongs to Renderwolf; other products have their own usage policies.
+Free renders can carry an Ironfang Render badge; QR codes never carry one. This
+allowance belongs to Render; other products have their own usage policies.
 
 Public tools use no account credits and share a 60/minute/address limit. The
 public screenshot service also has a 20/hour/address limit and a shared daily
 ceiling. Shared n8n egress addresses share these limits. Use authenticated
-Renderwolf rendering for account-based automation.
+Render rendering for account-based automation.
 
-Billing changes, administration, unreleased Peppol transport/registration,
-Financewolf PDFs and Financial Promotions are outside this package.
+Billing changes, administration, unreleased Peppol transport/registration
+and Financial Promotions are outside this package.
 
 ## Signed event trigger
 
 1. Add **Ironfang Trigger** and copy its production webhook URL.
-2. Use Auditwolf Create Webhook or Renderwolf Create Destination to register
-   that URL and the events you want.
+2. Use Audit Create Webhook, or Finance or Render Create Destination, to
+   register that URL and the events you want.
 3. Save the returned secret in an **Ironfang Webhook API** credential. Select
    its product, attach it to the trigger, and activate the workflow.
 4. Run Test Webhook/Test Destination to send a signed test event.
 
 The trigger verifies HMAC-SHA256 over the timestamp and exact body bytes using
 constant-time comparison, accepts timestamps within five minutes, and rejects
-invalid signatures before starting a workflow. Renderwolf secrets are decoded
-from hex; Auditwolf secrets are used as returned. The signed event ID, rather
+invalid signatures before starting a workflow. Render and Finance secrets are
+decoded from hex; Audit secrets are used as returned. Deliveries are signed in
+the `Renderwolf-`, `Financewolf-` and `Auditwolf-` headers the products launched
+with; the trigger reads the ones for the credential's product. The signed event ID, rather
 than the unsigned header ID, is used for duplicate detection.
 
 Duplicate state covers seven days/up to 10,000 IDs in n8n workflow static data.
@@ -136,30 +173,49 @@ deleting the n8n workflow removes its local listener; disable/delete the product
 endpoint separately to stop deliveries. Rotating an endpoint secret requires
 updating the n8n credential.
 
+The required `checkExists`, `create` and `delete` lifecycle hooks acknowledge
+this external setup. They do not call the product management API or verify
+remote registration. Use Test Webhook/Test Destination to check delivery.
+
+## Compatibility with earlier names
+
+Nothing saved needs editing. Workflows store the resource as `renderwolf`,
+`financewolf` or `auditwolf`, and webhook credentials store the same product
+values; these identifiers are unchanged and only their labels are new. A
+credential whose base URL is an origin, `/renderwolf` or any other product path
+is routed to the current prefix for the operation. The API still answers the
+earlier prefixes, but its own links (for example a job result's signed download
+location) use the current ones, which is why 0.3.1 and earlier fail Download Job
+Result against the current API: upgrade to fix it.
+
 ## Outputs, examples and compatibility
 
-Existing Renderwolf version 1 workflows retain string `bytes` and `error`
-fields. Version 1.1 uses numeric `bytes` and structured errors. Both expose exact
+Existing version 1 workflows retain string `bytes` and `error`
+fields. Version 1.1 uses numeric `bytes` and structured errors; version 1.2 adds
+paging to the Audit lists named above and is otherwise identical. All expose exact
 `byteLength`, item links and `_ironfang` response metadata when available:
 request ID, HTTP status, cache status and charged credits. Continued errors
 include available problem codes and retry information. New file operations use
 numeric sizes; the output binary field defaults to `data`.
 
-Requests have explicit timeouts: 30 seconds for JSON and 120 seconds for binary
-rendering. The node does not automatically repeat a paid operation. Reuse the
+Requests have explicit timeouts: 30 seconds for JSON (100 for a Rig wait) and
+120 seconds for binary rendering. The node does not automatically repeat a paid operation. Reuse the
 same idempotency key only for an identical business operation and respect
 returned retry information when configuring n8n retries.
 
 Import the [template render](examples/template-image.json),
 [invoice validation](examples/invoice-validation.json),
-[invoice generation to storage](examples/invoice-generation-storage.json), or
-[audit status polling](examples/audit-polling.json) workflow. Select credentials
+[invoice generation to storage](examples/invoice-generation-storage.json),
+[invoice job and signed report](examples/invoice-job-report.json) (one pause
+before reading the job; loop as the audit example does for larger documents),
+[audit status polling](examples/audit-polling.json), or
+[Rig run with a callback wait](examples/rig-callback-wait.json) workflow. Select credentials
 and replace placeholder IDs, bucket names and example invoice data before running.
 All examples are inactive on import.
 
 The tested n8n runtime is **2.38.1**, using its filesystem binary storage.
-Compilation/lint/unit checks run under Node.js 22 and 24. Saved version 1 and
-1.1 workflows are exercised; older n8n host releases are not certified by this
+Compilation/lint/unit checks run under Node.js 22 and 24. Saved version 1, 1.1
+and 1.2 workflows are exercised; older n8n host releases are not certified by this
 matrix. The published node has no external runtime dependencies.
 
 ## Development and releases
@@ -168,9 +224,13 @@ Run `npm ci --ignore-scripts` and `npm run check`. With Docker, run
 `bash scripts/check-runtime.sh` and `bash scripts/check-webhook-runtime.sh`.
 These execute local fixtures, including multipart/file handling and signed
 webhooks; they make no paid API calls. CI requires both before release.
+Lint runs with inline configuration disabled, matching the submission scanner's
+handling of suppression comments. Shared code in `lib/` is also linted and packaged.
 
 To refresh the catalogue from an Ironfang source checkout, use
 `python3 scripts/sync-contracts.py /path/to/ironfang` (development-only PyYAML).
+Catalogue `product` values are the saved resource identifiers; the script maps
+each to its API prefix and scope family.
 Review endpoint handlers alongside OpenAPI changes. See [RELEASING.md](RELEASING.md)
 and the [validation record](docs/validation.md) for the release procedure and
 qualification of automated checks. License: MIT.

package/dist/credentials/IronfangApi.credentials.js

@@ -5,7 +5,7 @@ class IronfangApi {
     name = 'ironfangApi';
     icon = { light: 'file:ironfang.svg', dark: 'file:ironfang.dark.svg' };
     displayName = 'Ironfang API';
-    documentationUrl = 'https://ironfang.uk/renderwolf/docs';
+    documentationUrl = 'https://ironfang.uk/render/docs';
     properties = [
         {
             displayName: 'API Key',
@@ -14,18 +14,18 @@ class IronfangApi {
             typeOptions: { password: true },
             default: '',
             required: true,
-            description: 'An if_live_ platform API key from the Ironfang portal. Existing rw_live_ Renderwolf keys remain supported.',
+            description: 'An if_live_ platform API key from the Ironfang portal. Existing rw_live_ Render keys remain supported.',
         },
         {
             displayName: 'Base URL',
             name: 'baseUrl',
             type: 'string',
-            default: 'https://api.ironfang.uk/renderwolf',
-            description: 'API origin or product base URL. Both legacy origin-only and /renderwolf credentials remain valid; the node selects the requested product path.',
+            default: 'https://api.ironfang.uk/render',
+            description: 'API origin or product base URL. Origin-only and /renderwolf values saved by earlier versions remain valid; the node selects the requested product path.',
         },
         {
             displayName: 'Test Product', name: 'testProduct', type: 'options', default: 'auto',
-            options: [{ name: 'Auto', value: 'auto' }, { name: 'Auditwolf', value: 'auditwolf' }, { name: 'Financewolf', value: 'financewolf' }, { name: 'Renderwolf', value: 'renderwolf' }],
+            options: [{ name: 'Auto', value: 'auto' }, { name: 'Audit', value: 'auditwolf' }, { name: 'Finance', value: 'financewolf' }, { name: 'Render', value: 'renderwolf' }, { name: 'Rig', value: 'rig' }],
             description: 'Choose a product for the read-only connection check, or discover which product accepts the key',
         },
     ];

package/dist/credentials/IronfangWebhookApi.credentials.js

@@ -5,9 +5,9 @@ class IronfangWebhookApi {
     name = 'ironfangWebhookApi';
     displayName = 'Ironfang Webhook API';
     icon = { light: 'file:ironfang.svg', dark: 'file:ironfang.dark.svg' };
-    documentationUrl = 'https://ironfang.uk/auditwolf/docs';
+    documentationUrl = 'https://ironfang.uk/audit/docs';
     properties = [
-        { displayName: 'Product', name: 'product', type: 'options', default: 'auditwolf', options: [{ name: 'Auditwolf', value: 'auditwolf' }, { name: 'Renderwolf', value: 'renderwolf' }] },
+        { displayName: 'Product', name: 'product', type: 'options', default: 'auditwolf', options: [{ name: 'Audit', value: 'auditwolf' }, { name: 'Finance', value: 'financewolf' }, { name: 'Render', value: 'renderwolf' }] },
         { displayName: 'Signing Secret', name: 'signingSecret', type: 'string', typeOptions: { password: true }, default: '', required: true, description: 'The one-time secret returned when creating the webhook endpoint or destination. This is not an API key.' },
     ];
 }

package/dist/{nodes/Ironfang → lib}/renderwolf.d.ts

@@ -1,9 +1,9 @@
 import type { IExecuteFunctions, INodeExecutionData, INodeTypeDescription } from 'n8n-workflow';
-import { credentialTest } from './credentialTest';
+import { credentialTest } from '../nodes/Ironfang/credentialTest';
 /**
  * Ironfang node. One node per vendor: pick a product with Resource, then an
- * operation within it. Renderwolf (https://ironfang.uk/renderwolf/docs) is the
- * first product; later ones are added as further resources rather than as
+ * operation within it. Ironfang Render (https://ironfang.uk/render/docs) was the
+ * first product, and its saved resource value keeps the name it launched under; later ones are added as further resources rather than as
  * separate nodes.
  *
  * Render operations return binary data; sign and usage return JSON.

package/dist/{nodes/Ironfang → lib}/renderwolf.js

@@ -2,12 +2,12 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.renderwolf = void 0;
 const n8n_workflow_1 = require("n8n-workflow");
-const transport_1 = require("./transport");
-const credentialTest_1 = require("./credentialTest");
+const transport_1 = require("../nodes/Ironfang/transport");
+const credentialTest_1 = require("../nodes/Ironfang/credentialTest");
 /**
  * Ironfang node. One node per vendor: pick a product with Resource, then an
- * operation within it. Renderwolf (https://ironfang.uk/renderwolf/docs) is the
- * first product; later ones are added as further resources rather than as
+ * operation within it. Ironfang Render (https://ironfang.uk/render/docs) was the
+ * first product, and its saved resource value keeps the name it launched under; later ones are added as further resources rather than as
  * separate nodes.
  *
  * Render operations return binary data; sign and usage return JSON.
@@ -19,7 +19,7 @@ exports.renderwolf = {
         icon: { light: 'file:ironfang.svg', dark: 'file:ironfang.dark.svg' },
         usableAsTool: true,
         group: ['transform'],
-        version: [1, 1.1],
+        version: [1, 1.1, 1.2],
         subtitle: '={{$parameter["operation"] + ": " + $parameter["resource"]}}',
         description: 'Rendering and developer APIs from Ironfang',
         defaults: { name: 'Ironfang' },
@@ -35,7 +35,7 @@ exports.renderwolf = {
                 default: 'renderwolf',
                 options: [
                     {
-                        name: 'Renderwolf',
+                        name: 'Render',
                         value: 'renderwolf',
                         description: 'Screenshots, PDFs and templated images',
                     },

package/dist/nodes/Ironfang/Ironfang.node.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.Ironfang = void 0;
-const renderwolf_1 = require("./renderwolf");
+const renderwolf_1 = require("../../lib/renderwolf");
 const catalog_1 = require("./catalog");
 const parameters_1 = require("./parameters");
 const execute_1 = require("./execute");
@@ -10,28 +10,49 @@ const templates_1 = require("./templates");
 const destinationCredentialTest_1 = require("./destinationCredentialTest");
 const legacy = renderwolf_1.renderwolf;
 const legacyOperations = (legacy.description.properties[1].options ?? []);
-const products = ['auditwolf', 'financewolf', 'renderwolf', 'tools'];
-// Resource-specific defaults are selected from the checked-in catalogue.
-// eslint-disable-next-line n8n-nodes-base/node-param-default-missing
-const operationParameters = products.map(product => ({
-    displayName: 'Operation', name: 'operation', type: 'options', noDataExpression: true,
-    default: product === 'renderwolf' ? 'screenshot' : catalog_1.operations.find(op => op.product === product).id,
-    displayOptions: { show: { resource: [product] } },
-    options: [...(product === 'renderwolf' ? legacyOperations : []), ...catalog_1.operations.filter(op => op.product === product).map(op => ({ name: op.name, value: op.id, description: op.description, action: op.description }))].sort((a, b) => a.name.localeCompare(b.name)),
-}));
+function operationOptions(product) {
+    return [...(product === 'renderwolf' ? legacyOperations : []), ...catalog_1.operations.filter(op => op.product === product).map(op => ({ name: op.name, value: op.id, description: op.description, action: op.description }))].sort((a, b) => a.name.localeCompare(b.name));
+}
+const operationParameters = [
+    {
+        displayName: 'Operation', name: 'operation', type: 'options', noDataExpression: true,
+        default: 'archiveMonitorsByMonitorId', displayOptions: { show: { resource: ['auditwolf'] } },
+        options: operationOptions('auditwolf'),
+    },
+    {
+        displayName: 'Operation', name: 'operation', type: 'options', noDataExpression: true,
+        default: 'deleteValidationResult', displayOptions: { show: { resource: ['financewolf'] } },
+        options: operationOptions('financewolf'),
+    },
+    {
+        displayName: 'Operation', name: 'operation', type: 'options', noDataExpression: true,
+        default: 'screenshot', displayOptions: { show: { resource: ['renderwolf'] } },
+        options: operationOptions('renderwolf'),
+    },
+    {
+        displayName: 'Operation', name: 'operation', type: 'options', noDataExpression: true,
+        default: 'listRuns', displayOptions: { show: { resource: ['rig'] } },
+        options: operationOptions('rig'),
+    },
+    {
+        displayName: 'Operation', name: 'operation', type: 'options', noDataExpression: true,
+        default: 'convertImage', displayOptions: { show: { resource: ['tools'] } },
+        options: operationOptions('tools'),
+    },
+];
 class Ironfang {
     description = {
         ...legacy.description,
         usableAsTool: true,
         icon: { light: 'file:ironfang.svg', dark: 'file:ironfang.dark.svg' },
-        subtitle: '={{$parameter["operation"] + ": " + $parameter["resource"]}}',
-        description: 'Renderwolf, Financewolf, Auditwolf and public developer tools',
+        subtitle: '={{$parameter["operation"] + ": " + $parameter["resource"].replace("wolf", "")}}',
+        description: 'Ironfang Render, Finance, Audit and Rig, and public developer tools',
         credentials: [
-            { name: 'ironfangS3', required: true, testedBy: 'ironfangS3Test', displayOptions: { show: { operation: ['createDestination', 'createExportDestinations'] }, hide: { destinationType: ['webhook'] } } },
-            { name: 'ironfangApi', required: true, testedBy: 'ironfangApiTest', displayOptions: { show: { resource: ['renderwolf', 'auditwolf', 'financewolf'] }, hide: { authentication: ['public'] } } },
+            { name: 'ironfangS3', required: true, testedBy: 'ironfangS3Test', displayOptions: { show: { operation: ['createDestination', 'createExportDestinations', 'createEinvoiceDestination', 'updateEinvoiceDestination'] }, hide: { destinationType: ['webhook'] } } },
+            { name: 'ironfangApi', required: true, testedBy: 'ironfangApiTest', displayOptions: { show: { resource: ['renderwolf', 'auditwolf', 'financewolf', 'rig'] }, hide: { authentication: ['public'] } } },
         ],
         properties: [
-            { displayName: 'Resource', name: 'resource', type: 'options', noDataExpression: true, default: 'renderwolf', options: [{ name: 'Auditwolf', value: 'auditwolf' }, { name: 'Financewolf', value: 'financewolf' }, { name: 'Renderwolf', value: 'renderwolf' }, { name: 'Public Tool', value: 'tools' }] },
+            { displayName: 'Resource', name: 'resource', type: 'options', noDataExpression: true, default: 'renderwolf', options: [{ name: 'Audit', value: 'auditwolf', description: 'Site audits, findings, monitors and evidence' }, { name: 'Finance', value: 'financewolf', description: 'E-invoice generation, validation, jobs and delivery' }, { name: 'Public Tool', value: 'tools', description: 'Free developer tools that need no account' }, { name: 'Render', value: 'renderwolf', description: 'Screenshots, PDFs, video clips and templated images' }, { name: 'Rig', value: 'rig', description: 'Integration test runs, mocks, faults and evidence' }] },
             ...operationParameters,
             ...legacy.description.properties.slice(2).map(field => ({ ...field, displayOptions: { ...field.displayOptions, show: { ...field.displayOptions?.show, resource: ['renderwolf'] } } })),
             ...renderOptions_1.renderOptions,

package/dist/nodes/Ironfang/IronfangTrigger.node.d.ts

@@ -1,4 +1,4 @@
-import type { INodeType, INodeTypeDescription, IWebhookFunctions, IWebhookResponseData } from 'n8n-workflow';
+import type { IHookFunctions, INodeType, INodeTypeDescription, IWebhookFunctions, IWebhookResponseData } from 'n8n-workflow';
 import { webhookCredentialTest } from './webhook';
 export declare class IronfangTrigger implements INodeType {
     description: INodeTypeDescription;
@@ -7,5 +7,12 @@ export declare class IronfangTrigger implements INodeType {
             ironfangWebhookTest: typeof webhookCredentialTest;
         };
     };
+    webhookMethods: {
+        default: {
+            checkExists(this: IHookFunctions): Promise<boolean>;
+            create(this: IHookFunctions): Promise<boolean>;
+            delete(this: IHookFunctions): Promise<boolean>;
+        };
+    };
     webhook(this: IWebhookFunctions): Promise<IWebhookResponseData>;
 }

package/dist/nodes/Ironfang/IronfangTrigger.node.js

@@ -3,21 +3,38 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.IronfangTrigger = void 0;
 const n8n_workflow_1 = require("n8n-workflow");
 const webhook_1 = require("./webhook");
-// Endpoints are registered explicitly and remain customer-owned; n8n owns its local route.
-// eslint-disable-next-line @n8n/community-nodes/webhook-lifecycle-complete
 class IronfangTrigger {
     description = {
         displayName: 'Ironfang Trigger', name: 'ironfangTrigger', group: ['trigger'], version: 1,
         icon: { light: 'file:ironfang.svg', dark: 'file:ironfang.dark.svg' },
-        subtitle: 'Signed product events', description: 'Receive signed Auditwolf and Renderwolf events', defaults: { name: 'Ironfang Trigger' },
+        subtitle: 'Signed product events', description: 'Receive signed Ironfang Audit, Finance and Render events', defaults: { name: 'Ironfang Trigger' },
         inputs: [], outputs: [n8n_workflow_1.NodeConnectionTypes.Main],
         credentials: [{ name: 'ironfangWebhookApi', required: true, testedBy: 'ironfangWebhookTest' }],
         webhooks: [{ name: 'default', httpMethod: 'POST', responseMode: 'onReceived', path: 'events' }],
         properties: [
-            { displayName: 'Register this node’s production webhook URL using Create Webhooks (Auditwolf) or Create Destination (Renderwolf), save the returned signing secret in its credential, then activate the workflow and test the endpoint. Signatures and timestamps are checked before execution.', name: 'setupNotice', type: 'notice', default: '' },
+            { displayName: 'Register this node’s production webhook URL using Create Webhook (Audit) or Create Destination (Finance or Render), save the returned signing secret in its credential, then activate the workflow and test the endpoint. Signatures and timestamps are checked before execution.', name: 'setupNotice', type: 'notice', default: '' },
         ],
     };
     methods = { credentialTest: { ironfangWebhookTest: webhook_1.webhookCredentialTest } };
+    webhookMethods = {
+        default: {
+            async checkExists() {
+                // External registration is required. True skips n8n-managed remote
+                // creation; it does not assert that a product endpoint exists.
+                return true;
+            },
+            async create() {
+                // The customer registers the URL and stores its signing secret.
+                // n8n creates the local route independently of this hook.
+                return true;
+            },
+            async delete() {
+                // n8n removes its local route. Leave customer-owned endpoints and
+                // duplicate state intact for later reactivation or shared use.
+                return true;
+            },
+        },
+    };
     async webhook() {
         const req = this.getRequestObject();
         const res = this.getResponseObject();