@ironfang/n8n-nodes-ironfang 0.4.1 → 0.4.3

package/README.md

@@ -6,7 +6,7 @@ Use Ironfang Render, Finance, Audit and Rig, and Ironfang's public developer
 tools, in n8n. The Ironfang action node has **162 operations**, grouped by
 product. Ironfang Trigger receives signed Audit, Finance and Render events.
 
-**Release: 0.4.1.** This patch makes the package installable on n8n releases
+**Release: 0.4.3.** Credits, cache status and webhook signatures are read from the `X-Ironfang-*` and `Ironfang-*` headers; update before the API stops sending the launch-era ones. 0.4.2 moved the API to `api.ironfang.com` (credentials saved with the old `api.ironfang.uk` address keep working unchanged), and 0.4.1 made the package installable on n8n releases
 before 2.33 that use PostgreSQL; see [Installation](#installation-and-credentials).
 It includes 0.4.0, in which the products are named Ironfang Render, Finance and Audit
 (formerly Renderwolf, Financewolf and Auditwolf), and the node follows: requests
@@ -27,7 +27,7 @@ node's newest version as an integer and these packages' newest node version was
 1.1 or 1.2. Install 0.4.1 or later, or upgrade n8n. n8n Cloud installation requires n8n's manual package verification;
 npm publishing and automated checks do not establish that approval.
 
-Create an `if_live_` platform API key at [portal.ironfang.uk](https://portal.ironfang.uk)
+Create an `if_live_` platform API key at [portal.ironfang.com](https://portal.ironfang.com)
 with the scopes your workflow needs, then select an Ironfang API credential.
 Existing `rw_live_` Render keys and both origin-only and `/renderwolf` base
 URLs remain supported. Other product bases and custom gateway prefixes work too.
@@ -54,10 +54,10 @@ The [operation reference](docs/operations.md) lists each action's endpoint,
 permission, query fields and request example. Complex API bodies use a JSON
 editor so nested fields remain available. Replace the example values before
 running a write operation. Request definitions are available in the product
-specifications: [Render](https://api.ironfang.uk/render/openapi.yaml),
-[Finance](https://api.ironfang.uk/finance/openapi.yaml),
-[Audit](https://api.ironfang.uk/audit/openapi.yaml),
-[Rig](https://api.ironfang.uk/rig/openapi.yaml).
+specifications: [Render](https://api.ironfang.com/render/openapi.yaml),
+[Finance](https://api.ironfang.com/finance/openapi.yaml),
+[Audit](https://api.ironfang.com/audit/openapi.yaml),
+[Rig](https://api.ironfang.com/rig/openapi.yaml).
 
 Screenshots support PNG/JPEG/WebP and phone/tablet device presets. Advanced
 Render Options accepts custom `css`, a page `script`, ordered `actions` (click,
@@ -164,8 +164,9 @@ The trigger verifies HMAC-SHA256 over the timestamp and exact body bytes using
 constant-time comparison, accepts timestamps within five minutes, and rejects
 invalid signatures before starting a workflow. Render and Finance secrets are
 decoded from hex; Audit secrets are used as returned. Deliveries are signed in
-the `Renderwolf-`, `Financewolf-` and `Auditwolf-` headers the products launched
-with; the trigger reads the ones for the credential's product. The signed event ID, rather
+the `Ironfang-Signature` and `Ironfang-Timestamp` headers; the trigger still
+reads the `Renderwolf-`, `Financewolf-` or `Auditwolf-` headers the products
+launched with when those are all a delivery carries. The signed event ID, rather
 than the unsigned header ID, is used for duplicate detection.
 
 Duplicate state covers seven days/up to 10,000 IDs in n8n workflow static data.

package/dist/credentials/IronfangApi.credentials.js

@@ -5,7 +5,7 @@ class IronfangApi {
     name = 'ironfangApi';
     icon = { light: 'file:ironfang.svg', dark: 'file:ironfang.dark.svg' };
     displayName = 'Ironfang API';
-    documentationUrl = 'https://ironfang.uk/render/docs';
+    documentationUrl = 'https://ironfang.com/render/docs';
     properties = [
         {
             displayName: 'API Key',
@@ -20,7 +20,7 @@ class IronfangApi {
             displayName: 'Base URL',
             name: 'baseUrl',
             type: 'string',
-            default: 'https://api.ironfang.uk/render',
+            default: 'https://api.ironfang.com/render',
             description: 'API origin or product base URL. Origin-only and /renderwolf values saved by earlier versions remain valid; the node selects the requested product path.',
         },
         {

package/dist/credentials/IronfangS3.credentials.js

@@ -5,7 +5,7 @@ class IronfangS3 {
     name = 'ironfangS3';
     displayName = 'Ironfang S3 Destination';
     icon = { light: 'file:ironfang.svg', dark: 'file:ironfang.dark.svg' };
-    documentationUrl = 'https://ironfang.uk/renderwolf/docs';
+    documentationUrl = 'https://ironfang.com/renderwolf/docs';
     properties = [
         { displayName: 'Access Key', name: 'accessKey', type: 'string', default: '', required: true },
         { displayName: 'Secret Key', name: 'secretKey', type: 'string', typeOptions: { password: true }, default: '', required: true },

package/dist/credentials/IronfangWebhookApi.credentials.js

@@ -5,7 +5,7 @@ class IronfangWebhookApi {
     name = 'ironfangWebhookApi';
     displayName = 'Ironfang Webhook API';
     icon = { light: 'file:ironfang.svg', dark: 'file:ironfang.dark.svg' };
-    documentationUrl = 'https://ironfang.uk/audit/docs';
+    documentationUrl = 'https://ironfang.com/audit/docs';
     properties = [
         { displayName: 'Product', name: 'product', type: 'options', default: 'auditwolf', options: [{ name: 'Audit', value: 'auditwolf' }, { name: 'Finance', value: 'financewolf' }, { name: 'Render', value: 'renderwolf' }] },
         { displayName: 'Signing Secret', name: 'signingSecret', type: 'string', typeOptions: { password: true }, default: '', required: true, description: 'The one-time secret returned when creating the webhook endpoint or destination. This is not an API key.' },

package/dist/lib/renderwolf.d.ts

@@ -2,7 +2,7 @@ import type { IExecuteFunctions, INodeExecutionData, INodeTypeDescription } from
 import { credentialTest } from '../nodes/Ironfang/credentialTest';
 /**
  * Ironfang node. One node per vendor: pick a product with Resource, then an
- * operation within it. Ironfang Render (https://ironfang.uk/render/docs) was the
+ * operation within it. Ironfang Render (https://ironfang.com/render/docs) was the
  * first product, and its saved resource value keeps the name it launched under; later ones are added as further resources rather than as
  * separate nodes.
  *

package/dist/lib/renderwolf.js

@@ -6,7 +6,7 @@ const transport_1 = require("../nodes/Ironfang/transport");
 const credentialTest_1 = require("../nodes/Ironfang/credentialTest");
 /**
  * Ironfang node. One node per vendor: pick a product with Resource, then an
- * operation within it. Ironfang Render (https://ironfang.uk/render/docs) was the
+ * operation within it. Ironfang Render (https://ironfang.com/render/docs) was the
  * first product, and its saved resource value keeps the name it launched under; later ones are added as further resources rather than as
  * separate nodes.
  *

package/dist/nodes/Ironfang/execute.js

@@ -43,7 +43,7 @@ async function runOperation(context, item, op) {
     const publicMode = op.product === 'tools' || (op.product === 'financewolf' && parameter(context, 'authentication', item, 'apiKey') === 'public');
     if (publicMode && !op.public)
         throw new Error('This operation requires an API key; public mode cannot access saved results');
-    const base = publicMode ? parameter(context, 'publicBaseUrl', item, 'https://api.ironfang.uk') : (await context.getCredentials('ironfangApi')).baseUrl;
+    const base = publicMode ? parameter(context, 'publicBaseUrl', item, 'https://api.ironfang.com') : (await context.getCredentials('ironfangApi')).baseUrl;
     const path = op.path.replace(/\{(\w+)\}/g, (_, name) => (0, transport_1.identifier)(context, parameter(context, name, item), item));
     const url = (0, transport_1.productBase)(base, op.product) + path;
     const qs = { ...parameter(context, 'query', item, {}) };

package/dist/nodes/Ironfang/parameters.js

@@ -20,7 +20,7 @@ function queryField(field) {
 }
 exports.productParameters = [
     { displayName: 'Authentication', name: 'authentication', type: 'options', noDataExpression: true, default: 'apiKey', displayOptions: { show: { resource: ['financewolf'] } }, options: [{ name: 'API Key', value: 'apiKey' }, { name: 'Public (No Saved Results)', value: 'public' }], description: 'Public validation, generation, ruleset reads and report verification only. An invalid key never falls back to public access.' },
-    { displayName: 'Public API Base URL', name: 'publicBaseUrl', type: 'string', default: 'https://api.ironfang.uk', displayOptions: { show: { resource: ['tools', 'financewolf'] } }, description: 'Used by public requests only; authenticated requests use the credential base URL' },
+    { displayName: 'Public API Base URL', name: 'publicBaseUrl', type: 'string', default: 'https://api.ironfang.com', displayOptions: { show: { resource: ['tools', 'financewolf'] } }, description: 'Used by public requests only; authenticated requests use the credential base URL' },
     { displayName: 'Public tools share per-address limits. Screenshot is limited to 20/hour/address and a shared daily ceiling. Render Screenshot is the account-based automation service.', name: 'toolsNotice', type: 'notice', default: '', displayOptions: { show: { resource: ['tools'] } } },
     ...catalog_1.operations.flatMap((op) => {
         const fields = [{ displayName: `Permission: ${op.scope}. ${op.description}.`, name: 'operationNotice', type: 'notice', default: '', displayOptions: show(op) }];

package/dist/nodes/Ironfang/transport.js

@@ -13,10 +13,16 @@ exports.productBase = productBase;
 exports.renderwolfBase = renderwolfBase;
 const n8n_workflow_1 = require("n8n-workflow");
 function apiBase(value) {
-    const url = new URL(String(value || 'https://api.ironfang.uk/render'));
+    const url = new URL(String(value || 'https://api.ironfang.com/render'));
     if (!['http:', 'https:'].includes(url.protocol) || url.username || url.password || url.search || url.hash) {
         throw new Error('Base URL must be an HTTP(S) URL without credentials, a query or fragment');
     }
+    // The API moved from ironfang.uk to ironfang.com on 28 Sep 2026. The old
+    // names redirect, but a redirect to another domain drops the API key, so
+    // credentials saved with an ironfang.uk address are sent to .com directly.
+    if (url.hostname === 'ironfang.uk' || url.hostname.endsWith('.ironfang.uk')) {
+        url.hostname = url.hostname.slice(0, -'uk'.length) + 'com';
+    }
     return url.toString().replace(/\/+$/, '');
 }
 function identifier(context, value, itemIndex) {
@@ -30,9 +36,9 @@ function responseMetadata(headers, statusCode) {
     const result = { statusCode };
     if (headers['x-ironfang-request-id'])
         result.requestId = headers['x-ironfang-request-id'];
-    if (headers['x-renderwolf-cache'])
-        result.cacheStatus = headers['x-renderwolf-cache'];
-    const credits = headers['x-renderwolf-credits'];
+    if (headers['x-ironfang-cache'])
+        result.cacheStatus = headers['x-ironfang-cache'];
+    const credits = headers['x-ironfang-credits'];
     if (credits !== undefined && credits !== '' && Number.isFinite(Number(credits)))
         result.creditsCharged = Number(credits);
     return result;

package/dist/nodes/Ironfang/webhook.js

@@ -4,8 +4,10 @@ exports.signingKey = signingKey;
 exports.verifyEvent = verifyEvent;
 exports.webhookCredentialTest = webhookCredentialTest;
 const crypto_1 = require("crypto");
-// Signature headers keep the launch names (Renderwolf-Signature and so on), which
-// are also the saved product values. Render and Finance issue hex secrets.
+// Every product signs with Ironfang-Signature and Ironfang-Timestamp. The saved
+// product values keep the launch names (renderwolf and so on), and deliveries
+// from before the Ironfang-* headers carried only <Launch name>-Signature, which
+// is still read when the new header is absent. Render and Finance issue hex secrets.
 function signingKey(product, secret) {
     if (['renderwolf', 'financewolf'].includes(product) && /^[a-f0-9]{64}$/i.test(secret))
         return Buffer.from(secret, 'hex');
@@ -16,8 +18,8 @@ function signingKey(product, secret) {
 function verifyEvent(raw, headers, product, secret, now) {
     if (!raw.length || raw.length > 65_536)
         throw new Error('Webhook payload size is invalid');
-    const timestamp = headers[`${product}-timestamp`];
-    const signature = headers[`${product}-signature`];
+    const timestamp = headers['ironfang-timestamp'] ?? headers[`${product}-timestamp`];
+    const signature = headers['ironfang-signature'] ?? headers[`${product}-signature`];
     if (typeof timestamp !== 'string' || !/^\d{10,11}$/.test(timestamp) || Math.abs(now / 1000 - Number(timestamp)) > 300)
         throw new Error('Webhook timestamp is invalid or expired');
     if (typeof signature !== 'string' || !/^v1=[a-f0-9]{64}$/.test(signature))