@joshuanode/n8n-nodes-autoelevate 0.1.0 → 0.2.0-beta.1

package/README.md

@@ -18,9 +18,9 @@ An n8n community node for the [AutoElevate Partner API](https://partner-api-docs
 
 ## Features
 
-- Complete coverage of all endpoints published in the AutoElevate Partner API v1 specification
+- Operations for every endpoint in the Partner API v1 specification retrieved on 2026-10-27
 - API Token (`AE-BEARER`) and signed HMAC (`AE-HMAC-SHA256`) authentication
-- Searchable company, computer, location, elevated-session, and elevation-request selectors
+- Searchable company, computer, location, event, session, request, rule, user, role, and webhook selectors
 - Automatic offset and cursor pagination
 - Picker searches that scan all available API pages when AutoElevate has no server-side search parameter
 - Automatic `429` retries honoring `Retry-After`
@@ -49,6 +49,18 @@ npm install @joshuanode/n8n-nodes-autoelevate
 
 Restart n8n after installation if the node does not appear immediately.
 
+### Testing prereleases
+
+In a test n8n instance, open **Settings > Community Nodes > Install** and enter the exact version:
+
+```text
+@joshuanode/n8n-nodes-autoelevate@0.2.0-beta.1
+```
+
+The `next` tag selects the current testing release. n8n resolves a tag at installation time; it does not keep following that tag for later updates. Pin the exact version when reproducing a test result.
+
+Start with read operations and a narrowly scoped API key. Test changes to users, rules, and computer modes against disposable records before enabling them in scheduled workflows. Computer actions apply asynchronously, so confirm the reported state with **Computer: Get**.
+
 ## Prerequisites
 
 - An AutoElevate partner account with access to the Partner API
@@ -82,13 +94,16 @@ AutoElevate displays secrets only once. Store them securely and revoke any key t
 | --- | --- | --- |
 | Audit Log | Get Many | Entity type, action, start, end |
 | Company | Get, Get Many | — |
-| Computer | Get, Get Many | Company, location |
+| Computer | Get, Get Many, Set Elevation Mode, Set Technician Mode, Delete | Company, location |
 | Elevated Session | Get, Get Many | Company, computer, status |
-| Elevation Event | Get Many | Company, start, end |
+| Elevation Event | Get, Get Many | Company, start, end |
 | Elevation Request | Approve, Deny, Get, Get Many | Company, approval state, start, end |
-| Elevation Rule | Get Many | Company |
+| Elevation Rule | Get, Get Many, Update, Delete | Company |
 | Location | Get, Get Many | Company |
+| Role | Get, Get Many | — |
 | Usage | Get | — |
+| User | Get, Get Many, Create, Update, Delete | — |
+| Webhook | Get, Get Many, Create, Update, Delete, Get Delivery Logs, Test | — |
 
 ## Example Workflows
 
@@ -124,9 +139,35 @@ Company: Select from list
 Return All: true
 ```
 
+## Computer actions
+
+**Set Elevation Mode** accepts `audit`, `live`, `policy`, or `inherit`. Inherit clears the computer override and restores its location, company, or MSP setting. **Set Technician Mode** turns technician mode on or off on supported Windows computers. Activity is attributed to the API token owner; use individual technician tokens when individual attribution is required.
+
+Changes apply on the next agent configuration check-in (4.5 minutes by default). The node returns the API response, including its pending state. An accepted response does not confirm activation. Use **Computer: Get** to confirm the reported `elevationMode`; technician mode reports `technicianBypass`.
+
+**Delete** queues agent uninstall and hides the computer record. It can reappear if the agent checks in before uninstalling. Elevation history and audit entries remain. Delete operations require **Confirm Deletion**.
+
+## Rule and user updates
+
+**Update Fields** sends only selected fields. Omitted fields stay unchanged, and boolean `false` is preserved. For elevation rules, an empty Friendly Name or Notes clears that field with `null`. Identification Criteria accepts a JSON object using the structure returned by **Get**; its internal shape is not part of the public API contract. Rule scope cannot be edited. New rules can be created through **Elevation Request: Approve/Deny** with **Create Rule**, but there is no standalone rule-create endpoint.
+
+**User: Create** creates human users. Service users must be created in the Admin Portal. Select a role and company access: all, none, selected companies only, or all except selected companies. On update, Company Access defaults to **Leave Unchanged**. Choosing another value replaces the complete access setting. Email and user kind cannot be changed through this API.
+
+For elevated-session approvals, set Duration to 1–60 minutes; Addigy-managed Macs require at least 10. Leaving Duration at 0 omits it, which is only suitable for other request types. **Deny** supports a reason shown to the end user. Just-in-Time Log In approvals still require the mobile app.
+
+## Webhooks
+
+**Webhook: Create** registers an HTTPS destination and event subscriptions. Native JSON deliveries carry HMAC signatures. Verify the timestamp and signature against the raw request body before processing, then deduplicate by `deliveryId`. Teams and Slack formats are unsigned. User events require a webhook scoped to all companies.
+
+Creation returns the signing secret once. Save it securely and account for n8n execution-data retention, because the creation response is node output. Later reads return only the destination URL origin and omit the secret. When updating, omit URL to preserve it; do not copy the redacted URL from Get. Adding an empty Company field to an update explicitly restores all-company scope.
+
+**Get Delivery Logs** returns the most recent attempts (up to 50). **Test** sends a real test delivery even if the webhook is disabled. A newly created webhook may briefly return 404 on subsequent calls; retry after it becomes visible. This package manages webhook subscriptions; use n8n's Webhook node to receive events.
+
 ## API Limits
 
-During beta, AutoElevate documents a default limit of 100 requests per hour for each MSP, HTTP method, and route path. **Get Many** uses pages of up to 200 records, so large result sets consume multiple requests. A `429` response includes a `Retry-After` value.
+The [Partner API reference](https://partner-api-docs.autoelevate.com/) documents a default limit of **20 requests per minute per MSP, HTTP method, and route path** (checked 2026-10-27). Capacity refills continuously, roughly one request every three seconds. Limits may change during beta; honor the server's `Retry-After` response.
+
+**Get Many** uses pages of up to 200 records, so large result sets consume multiple requests. A `429` response includes a `Retry-After` value.
 
 ## Error Handling and Troubleshooting
 
@@ -136,7 +177,9 @@ During beta, AutoElevate documents a default limit of 100 requests per hour for
 | `401 Unauthorized` | Invalid, expired, or incorrectly configured API credentials | Confirm the selected authentication scheme and rotate the API key if needed |
 | `403 Forbidden` | The service user or API key lacks permission for the operation | Add the required API permission in AutoElevate or use a properly scoped service user |
 | `404 Not Found` | The record does not exist or is outside the partner account | Verify the selected company, computer, location, session, request, or rule |
-| `429 Too Many Requests` | The route-specific API limit has been reached | The node retries twice using `Retry-After`; reduce polling frequency if the limit persists |
+| `409 Conflict` | The resource state prevents this operation | Re-read the record; requests may already be resolved or multiple users may be signed in |
+| `422 Unprocessable Entity` | The target cannot apply the operation | Check platform support, agent state, session duration, and rule constraints |
+| `429 Too Many Requests` | The API rate limit has been reached | The node retries twice using `Retry-After`; reduce polling frequency or batch size if the limit persists |
 
 AutoElevate error messages and error codes are preserved in n8n when the API returns them. For example, a missing audit-log permission should surface AutoElevate's original authorization message rather than a generic request failure.
 
@@ -192,10 +235,20 @@ Bug reports, feature requests, and pull requests are welcome in the [GitHub repo
 
 ## Version History
 
+### 0.2.0-beta.1
+
+- Added computer elevation-mode and technician-mode controls, plus agent uninstall and deletion
+- Added user management, company access settings, and role lookup
+- Added elevation rule get, update, and delete operations
+- Added webhook management, test deliveries, and delivery logs
+- Added individual elevation event lookup, denial reasons, withdrawn-request filtering, and rule audit filtering
+- Updated API limits and session-duration guidance
+- Added offline execution tests against the API contract retrieved on 2026-10-27
+
 ### 0.1.0
 
 - Initial public release
-- Complete coverage of the currently published AutoElevate Partner API v1 beta endpoints
+- Covered the AutoElevate Partner API v1 beta endpoints available at the initial release
 - Bearer and HMAC authentication
 - Searchable resource selectors, pagination, filtering, rate-limit retries, and preserved API errors
 

package/dist/nodes/AutoElevate/AutoElevate.node.d.ts

@@ -10,6 +10,11 @@ export declare class AutoElevate implements INodeType {
             searchComputers(this: ILoadOptionsFunctions, filter?: string, paginationToken?: string): Promise<INodeListSearchResult>;
             searchElevatedSessions(this: ILoadOptionsFunctions, filter?: string, paginationToken?: string): Promise<INodeListSearchResult>;
             searchElevationRequests(this: ILoadOptionsFunctions, filter?: string, paginationToken?: string): Promise<INodeListSearchResult>;
+            searchElevationEvents(this: ILoadOptionsFunctions, filter?: string, paginationToken?: string): Promise<INodeListSearchResult>;
+            searchElevationRules(this: ILoadOptionsFunctions, filter?: string, paginationToken?: string): Promise<INodeListSearchResult>;
+            searchUsers(this: ILoadOptionsFunctions, filter?: string, paginationToken?: string): Promise<INodeListSearchResult>;
+            searchRoles(this: ILoadOptionsFunctions, filter?: string, paginationToken?: string): Promise<INodeListSearchResult>;
+            searchWebhooks(this: ILoadOptionsFunctions, filter?: string, paginationToken?: string): Promise<INodeListSearchResult>;
             searchLocations(this: ILoadOptionsFunctions, filter?: string, paginationToken?: string): Promise<INodeListSearchResult>;
         };
     };

package/dist/nodes/AutoElevate/AutoElevate.node.js

@@ -4,6 +4,7 @@ exports.AutoElevate = void 0;
 const n8n_workflow_1 = require("n8n-workflow");
 const GenericFunctions_1 = require("./GenericFunctions");
 const descriptions_1 = require("./descriptions");
+const ManagementFunctions_1 = require("./ManagementFunctions");
 function dateToEpoch(value) {
     if (!value)
         return undefined;
@@ -35,7 +36,11 @@ async function searchResource(resource, filter, paginationToken) {
     const normalizedFilter = filter?.trim().toLowerCase();
     let items;
     let hasMore = false;
-    if (normalizedFilter) {
+    if (resource === 'roles') {
+        const response = await GenericFunctions_1.autoElevateApiRequest.call(this, 'GET', '/api/v1/roles');
+        items = response.items;
+    }
+    else if (normalizedFilter) {
         items = await GenericFunctions_1.autoElevateApiRequestAllItems.call(this, `/api/v1/${resource}`, resource === 'elevation-requests' ? { approvalState: 'PENDING' } : {});
     }
     else {
@@ -52,7 +57,15 @@ async function searchResource(resource, filter, paginationToken) {
     });
     const results = items.map((item) => {
         const id = String(item.id);
-        let name = String(item.name ?? item.machineName ?? item.targetDescription ?? id);
+        let name = String(item.name ??
+            item.friendlyName ??
+            item.machineName ??
+            item.targetDescription ??
+            item.email ??
+            id);
+        if (resource === 'users')
+            name =
+                `${String(item.firstName ?? '')} ${String(item.lastName ?? '')} (${String(item.email ?? id)})`.trim();
         if (resource === 'elevated-sessions') {
             name = `${String(item.userName ?? 'Unknown user')} — ${String(item.status ?? '')} (${id})`;
         }
@@ -78,7 +91,7 @@ class AutoElevate {
             group: ['transform'],
             version: 1,
             subtitle: '={{$parameter["operation"] + ": " + $parameter["resource"]}}',
-            description: 'Access inventory, security events, elevation requests, and usage in AutoElevate',
+            description: 'Manage computers, elevation rules, users, webhooks, and security activity in AutoElevate',
             defaults: { name: 'AutoElevate' },
             inputs: [n8n_workflow_1.NodeConnectionTypes.Main],
             outputs: [n8n_workflow_1.NodeConnectionTypes.Main],
@@ -111,7 +124,10 @@ class AutoElevate {
                         { name: 'Elevation Request', value: 'elevationRequest' },
                         { name: 'Elevation Rule', value: 'elevationRule' },
                         { name: 'Location', value: 'location' },
+                        { name: 'Role', value: 'role' },
                         { name: 'Usage', value: 'usage' },
+                        { name: 'User', value: 'user' },
+                        { name: 'Webhook', value: 'webhook' },
                     ],
                     default: 'elevationRequest',
                 },
@@ -123,7 +139,10 @@ class AutoElevate {
                 async autoElevateApiCredentialTest(credential) {
                     const credentials = credential.data;
                     if (!credentials) {
-                        return { status: 'Error', message: 'AutoElevate credentials are incomplete' };
+                        return {
+                            status: 'Error',
+                            message: 'AutoElevate credentials are incomplete',
+                        };
                     }
                     const url = `${String(credentials.baseUrl).replace(/\/+$/, '')}/api/v1/usage`;
                     const headers = {
@@ -170,6 +189,21 @@ class AutoElevate {
                 searchElevationRequests(filter, paginationToken) {
                     return searchResource.call(this, 'elevation-requests', filter, paginationToken);
                 },
+                searchElevationEvents(filter, paginationToken) {
+                    return searchResource.call(this, 'elevation-events', filter, paginationToken);
+                },
+                searchElevationRules(filter, paginationToken) {
+                    return searchResource.call(this, 'elevation-rules', filter, paginationToken);
+                },
+                searchUsers(filter, paginationToken) {
+                    return searchResource.call(this, 'users', filter, paginationToken);
+                },
+                searchRoles(filter, paginationToken) {
+                    return searchResource.call(this, 'roles', filter, paginationToken);
+                },
+                searchWebhooks(filter, paginationToken) {
+                    return searchResource.call(this, 'webhooks', filter, paginationToken);
+                },
                 searchLocations(filter, paginationToken) {
                     return searchResource.call(this, 'locations', filter, paginationToken);
                 },
@@ -184,7 +218,14 @@ class AutoElevate {
                 const resource = this.getNodeParameter('resource', itemIndex);
                 const operation = this.getNodeParameter('operation', itemIndex);
                 let response;
-                if (resource === 'auditLog') {
+                if (['user', 'role', 'webhook'].includes(resource) ||
+                    (resource === 'computer' &&
+                        ['delete', 'setElevationMode', 'setTechnicianMode'].includes(operation)) ||
+                    (resource === 'elevationRule' && operation !== 'getMany') ||
+                    (resource === 'elevationEvent' && operation === 'get')) {
+                    response = await (0, ManagementFunctions_1.executeManagement)(this, itemIndex, resource, operation);
+                }
+                else if (resource === 'auditLog') {
                     const query = {
                         entityType: this.getNodeParameter('entityType', itemIndex, ''),
                         action: this.getNodeParameter('auditAction', itemIndex, ''),
@@ -246,6 +287,11 @@ class AutoElevate {
                         if (createRule) {
                             body.ruleLevel = this.getNodeParameter('ruleLevel', itemIndex);
                         }
+                        if (operation === 'deny') {
+                            const reason = this.getNodeParameter('denialReason', itemIndex, '');
+                            if (reason)
+                                body.denialReason = reason;
+                        }
                         if (operation === 'approve') {
                             const elevationType = this.getNodeParameter('elevationType', itemIndex, '');
                             const duration = this.getNodeParameter('durationInMinutes', itemIndex, 0);
@@ -296,7 +342,9 @@ class AutoElevate {
             catch (error) {
                 if (this.continueOnFail()) {
                     returnData.push({
-                        json: { error: error instanceof Error ? error.message : String(error) },
+                        json: {
+                            error: error instanceof Error ? error.message : String(error),
+                        },
                         pairedItem: { item: itemIndex },
                     });
                     continue;
@@ -306,7 +354,9 @@ class AutoElevate {
                     // eslint-disable-next-line @n8n/community-nodes/require-node-api-error
                     throw error;
                 }
-                throw new n8n_workflow_1.NodeOperationError(this.getNode(), error, { itemIndex });
+                throw new n8n_workflow_1.NodeOperationError(this.getNode(), error, {
+                    itemIndex,
+                });
             }
         }
         return [returnData];

package/dist/nodes/AutoElevate/ManagementFunctions.d.ts

@@ -0,0 +1,2 @@
+import type { IDataObject, IExecuteFunctions } from 'n8n-workflow';
+export declare function executeManagement(context: IExecuteFunctions, index: number, resource: string, operation: string): Promise<IDataObject | IDataObject[]>;

package/dist/nodes/AutoElevate/ManagementFunctions.js

@@ -0,0 +1,205 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.executeManagement = executeManagement;
+const n8n_workflow_1 = require("n8n-workflow");
+const GenericFunctions_1 = require("./GenericFunctions");
+async function executeManagement(context, index, resource, operation) {
+    const parameter = (name, fallback = '') => context.getNodeParameter(name, index, fallback);
+    const fail = (message) => {
+        throw new n8n_workflow_1.NodeOperationError(context.getNode(), message, {
+            itemIndex: index,
+        });
+    };
+    const id = (name) => {
+        const value = (0, GenericFunctions_1.unwrapLocator)(parameter(name));
+        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(value))
+            fail(`${name} must be a UUID`);
+        return value;
+    };
+    const request = (method, path, body = {}) => GenericFunctions_1.autoElevateApiRequest.call(context, method, path, body);
+    const list = (path) => GenericFunctions_1.autoElevateApiRequestAllItems.call(context, path, {}, false, parameter('returnAll', false) ? Number.POSITIVE_INFINITY : Number(parameter('limit', 50)));
+    const selectedFields = (name, allowed) => {
+        const value = parameter(name, {});
+        if (!value || typeof value !== 'object' || Array.isArray(value))
+            fail(`${name} must be an object`);
+        for (const key of Object.keys(value))
+            if (!allowed.includes(key))
+                fail(`Unsupported field: ${key}`);
+        return { ...value };
+    };
+    if (operation === 'delete' && parameter('confirmDeletion', false) !== true)
+        fail('Enable Confirm Deletion to delete this record');
+    if (resource === 'computer') {
+        const path = `/api/v1/computers/${id('computerId')}`;
+        if (operation === 'delete')
+            return request('DELETE', path);
+        if (operation === 'setTechnicianMode')
+            return request('POST', `${path}/technician-mode`, {
+                enabled: parameter('enabled', false),
+            });
+        if (operation === 'setElevationMode')
+            return request('POST', `${path}/elevation-mode`, {
+                mode: parameter('mode'),
+            });
+    }
+    if (resource === 'elevationEvent' && operation === 'get')
+        return request('GET', `/api/v1/elevation-events/${id('elevationEventId')}`);
+    if (resource === 'elevationRule') {
+        const path = `/api/v1/elevation-rules/${id('elevationRuleId')}`;
+        if (operation === 'get')
+            return request('GET', path);
+        if (operation === 'delete')
+            return request('DELETE', path);
+        if (operation === 'update') {
+            const body = selectedFields('updateFields', [
+                'approved',
+                'elevationType',
+                'shouldIgnore',
+                'friendlyName',
+                'notes',
+                'identificationCriteria',
+            ]);
+            for (const key of ['friendlyName', 'notes'])
+                if (body[key] === '')
+                    body[key] = null;
+            if (body.identificationCriteria !== undefined) {
+                let criteria = body.identificationCriteria;
+                if (typeof criteria === 'string') {
+                    try {
+                        criteria = JSON.parse(criteria);
+                    }
+                    catch {
+                        fail('Identification Criteria must be valid JSON');
+                    }
+                }
+                if (!criteria || typeof criteria !== 'object' || Array.isArray(criteria))
+                    fail('Identification Criteria must be a JSON object');
+                body.identificationCriteria = criteria;
+            }
+            if (Object.keys(body).length === 0)
+                fail('Select at least one field to update');
+            return request('PATCH', path, body);
+        }
+    }
+    if (resource === 'role') {
+        if (operation === 'get')
+            return request('GET', `/api/v1/roles/${id('roleId')}`);
+        if (operation === 'getMany') {
+            const response = await request('GET', '/api/v1/roles');
+            return response.items;
+        }
+    }
+    if (resource === 'user') {
+        if (operation === 'getMany')
+            return list('/api/v1/users');
+        if (operation === 'get')
+            return request('GET', `/api/v1/users/${id('userId')}`);
+        if (operation === 'delete')
+            return request('DELETE', `/api/v1/users/${id('userId')}`);
+        if (operation === 'create' || operation === 'update') {
+            const body = operation === 'create'
+                ? {
+                    ...selectedFields('additionalFields', [
+                        'lastName',
+                        'technicianModeTicketingEnabled',
+                        'sendInvitationEmail',
+                    ]),
+                    firstName: parameter('firstName'),
+                    email: parameter('email'),
+                    roleId: id('roleId'),
+                }
+                : selectedFields('updateFields', [
+                    'firstName',
+                    'lastName',
+                    'roleId',
+                    'technicianModeTicketingEnabled',
+                ]);
+            if (body.roleId !== undefined) {
+                body.roleId = (0, GenericFunctions_1.unwrapLocator)(body.roleId);
+                if (!body.roleId)
+                    fail('Select a role');
+            }
+            const accessType = parameter('companyAccessType', operation === 'create' ? 'none' : '');
+            if (accessType) {
+                if (!['all', 'none', 'some', 'most'].includes(accessType))
+                    fail('Unsupported company access type');
+                const access = { type: accessType };
+                if (accessType === 'some' || accessType === 'most') {
+                    const companies = parameter('companies', {});
+                    const ids = (companies.company ?? []).map((company) => (0, GenericFunctions_1.unwrapLocator)(company.companyId));
+                    if (!ids.length || ids.some((value) => !value))
+                        fail('Select at least one company for this access type');
+                    access.companyIds = [...new Set(ids)];
+                }
+                body.companyAccess = access;
+            }
+            if (Object.keys(body).length === 0)
+                fail('Select at least one field to update');
+            return operation === 'create'
+                ? request('POST', '/api/v1/users', body)
+                : request('PATCH', `/api/v1/users/${id('userId')}`, body);
+        }
+    }
+    if (resource === 'webhook') {
+        if (operation === 'getMany')
+            return list('/api/v1/webhooks');
+        if (operation === 'create' || operation === 'update') {
+            const body = operation === 'create'
+                ? {
+                    ...selectedFields('additionalFields', ['format', 'companyId']),
+                    name: parameter('name'),
+                    url: parameter('url'),
+                    eventSubscriptions: parameter('eventSubscriptions', []),
+                }
+                : selectedFields('updateFields', [
+                    'name',
+                    'url',
+                    'eventSubscriptions',
+                    'format',
+                    'enabled',
+                    'companyId',
+                ]);
+            if (body.companyId !== undefined) {
+                const companyId = (0, GenericFunctions_1.unwrapLocator)(body.companyId);
+                if (companyId)
+                    body.companyId = companyId;
+                else if (operation === 'update')
+                    body.companyId = null;
+                else
+                    delete body.companyId;
+            }
+            if (body.eventSubscriptions !== undefined &&
+                (!Array.isArray(body.eventSubscriptions) || !body.eventSubscriptions.length))
+                fail('Select at least one webhook event');
+            if (body.companyId &&
+                body.eventSubscriptions?.some((event) => event.startsWith('user.')))
+                fail('User events require a webhook scoped to all companies');
+            if (body.url !== undefined) {
+                try {
+                    if (new URL(String(body.url)).protocol !== 'https:')
+                        fail('Webhook URL must use HTTPS');
+                }
+                catch {
+                    fail('Webhook URL must be a valid HTTPS URL');
+                }
+            }
+            if (Object.keys(body).length === 0)
+                fail('Select at least one field to update');
+            return operation === 'create'
+                ? request('POST', '/api/v1/webhooks', body)
+                : request('PATCH', `/api/v1/webhooks/${id('webhookId')}`, body);
+        }
+        const path = `/api/v1/webhooks/${id('webhookId')}`;
+        if (operation === 'get')
+            return request('GET', path);
+        if (operation === 'delete')
+            return request('DELETE', path);
+        if (operation === 'test')
+            return request('POST', `${path}/test`);
+        if (operation === 'getDeliveryLogs') {
+            const response = await request('GET', `${path}/delivery-logs`);
+            return response.deliveryLogs;
+        }
+    }
+    return fail(`Unsupported operation: ${resource}.${operation}`);
+}

package/dist/nodes/AutoElevate/descriptions/Common.js

@@ -52,7 +52,7 @@ function idLocator(resource, displayName, name, searchListMethod, operations = [
                     {
                         type: 'regex',
                         properties: {
-                            regex: '^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$',
+                            regex: '^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$',
                             errorMessage: 'Enter a valid UUID',
                         },
                     },

package/dist/nodes/AutoElevate/descriptions/Management.d.ts

@@ -0,0 +1,4 @@
+import type { INodeProperties } from 'n8n-workflow';
+export declare const computerOperations: INodeProperties;
+export declare const ruleOperations: INodeProperties;
+export declare const managementProperties: INodeProperties[];

package/dist/nodes/AutoElevate/descriptions/Management.js

@@ -0,0 +1,275 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.managementProperties = exports.ruleOperations = exports.computerOperations = void 0;
+const Common_1 = require("./Common");
+const WebhookEvents_1 = require("./WebhookEvents");
+function operations(resource, actions) {
+    return {
+        ...(0, Common_1.getAndListOperations)(resource),
+        options: actions.map(([name, value, action]) => ({ name, value, action })),
+    };
+}
+function fields(resource, operation, name, options) {
+    return {
+        displayName: name === 'updateFields' ? 'Update Fields' : 'Additional Fields',
+        name,
+        type: 'collection',
+        placeholder: 'Add Field',
+        default: {},
+        displayOptions: { show: { resource: [resource], operation } },
+        options,
+    };
+}
+function text(displayName, name, description) {
+    return {
+        displayName,
+        name,
+        type: 'string',
+        default: '',
+        ...(description ? { description } : {}),
+    };
+}
+function toggle(displayName, name, description) {
+    return { displayName, name, type: 'boolean', default: false, description };
+}
+function locator(displayName, name, search) {
+    const field = (0, Common_1.idLocator)('', displayName, name, search);
+    delete field.displayOptions;
+    return field;
+}
+const userOperations = [
+    ['Create', 'create', 'Create a user'],
+    ['Delete', 'delete', 'Delete a user'],
+    ['Get', 'get', 'Get a user'],
+    ['Get Many', 'getMany', 'Get many users'],
+    ['Update', 'update', 'Update a user'],
+];
+const companyAccessType = {
+    displayName: 'Company Access',
+    name: 'companyAccessType',
+    type: 'options',
+    default: 'none',
+    options: [
+        { name: 'All Companies', value: 'all' },
+        { name: 'All Except Selected Companies', value: 'most' },
+        { name: 'No Companies', value: 'none' },
+        { name: 'Selected Companies Only', value: 'some' },
+    ],
+    description: 'Replaces the complete company access setting. Selected companies are required for allow-lists and deny-lists.',
+};
+const eventSubscriptions = {
+    displayName: 'Events',
+    name: 'eventSubscriptions',
+    type: 'multiOptions',
+    default: [],
+    options: WebhookEvents_1.webhookEvents.map((event) => ({ name: event, value: event })),
+    description: 'Event types to receive. User events require a webhook scoped to all companies.',
+};
+const webhookFormat = {
+    displayName: 'Format',
+    name: 'format',
+    type: 'options',
+    default: 'native',
+    options: [
+        { name: 'Native (Signed JSON)', value: 'native' },
+        { name: 'Slack Incoming Webhook', value: 'slack-incoming-webhook' },
+        { name: 'Teams Incoming Webhook', value: 'teams-incoming-webhook' },
+    ],
+};
+exports.computerOperations = operations('computer', [
+    ['Delete', 'delete', 'Delete a computer and uninstall its agent'],
+    ['Get', 'get', 'Get a computer'],
+    ['Get Many', 'getMany', 'Get many computers'],
+    ['Set Elevation Mode', 'setElevationMode', 'Set a computer elevation mode'],
+    ['Set Technician Mode', 'setTechnicianMode', 'Turn technician mode on or off'],
+]);
+exports.ruleOperations = operations('elevationRule', [
+    ['Delete', 'delete', 'Delete an elevation rule'],
+    ['Get', 'get', 'Get an elevation rule'],
+    ['Get Many', 'getMany', 'Get many elevation rules'],
+    ['Update', 'update', 'Update an elevation rule'],
+]);
+exports.managementProperties = [
+    {
+        displayName: 'Computer changes apply at the next agent check-in. An accepted response does not confirm completion. Technician mode is attributed to the API token owner.',
+        name: 'computerActionNotice',
+        type: 'notice',
+        default: '',
+        displayOptions: {
+            show: {
+                resource: ['computer'],
+                operation: ['setElevationMode', 'setTechnicianMode', 'delete'],
+            },
+        },
+    },
+    {
+        displayName: 'Elevation Mode',
+        name: 'mode',
+        type: 'options',
+        default: 'inherit',
+        options: [
+            { name: 'Audit', value: 'audit' },
+            { name: 'Inherit', value: 'inherit' },
+            { name: 'Live', value: 'live' },
+            { name: 'Policy', value: 'policy' },
+        ],
+        description: 'Inherit clears the computer override and restores the location, company or MSP setting',
+        displayOptions: {
+            show: { resource: ['computer'], operation: ['setElevationMode'] },
+        },
+    },
+    {
+        ...toggle('Enabled', 'enabled', 'Whether to turn technician mode on. Windows only.'),
+        displayOptions: {
+            show: { resource: ['computer'], operation: ['setTechnicianMode'] },
+        },
+    },
+    // Keep destructive actions explicit even when expressions provide the operation.
+    ...['computer', 'elevationRule', 'user', 'webhook'].map((resource) => ({
+        ...toggle('Confirm Deletion', 'confirmDeletion', 'Whether to delete the selected record. Deleting a computer also queues agent uninstall.'),
+        displayOptions: { show: { resource: [resource], operation: ['delete'] } },
+    })),
+    (0, Common_1.idLocator)('elevationRule', 'Elevation Rule', 'elevationRuleId', 'searchElevationRules', [
+        'get',
+        'update',
+        'delete',
+    ]),
+    fields('elevationRule', ['update'], 'updateFields', [
+        toggle('Approved', 'approved', 'Whether matching events are automatically approved'),
+        {
+            displayName: 'Elevation Type',
+            name: 'elevationType',
+            type: 'options',
+            default: 'admin',
+            options: [
+                { name: 'Admin', value: 'admin' },
+                { name: 'User', value: 'user' },
+            ],
+        },
+        text('Friendly Name', 'friendlyName', 'Leave empty to clear the friendly name'),
+        {
+            displayName: 'Identification Criteria (JSON)',
+            name: 'identificationCriteria',
+            type: 'json',
+            default: '',
+            description: 'Opaque match criteria. Supply the same object structure returned by Get; the API does not publish its shape.',
+        },
+        text('Notes', 'notes', 'Leave empty to clear the notes'),
+        toggle('Treat as Audit Mode', 'shouldIgnore', 'Whether matching events are treated as audit mode without prompting to elevate'),
+    ]),
+    operations('user', userOperations),
+    (0, Common_1.idLocator)('user', 'User', 'userId', 'searchUsers', ['get', 'update', 'delete']),
+    ...(0, Common_1.paginationFields)('user'),
+    ...[
+        text('First Name', 'firstName'),
+        text('Email', 'email'),
+        locator('Role', 'roleId', 'searchRoles'),
+    ].map((field) => ({
+        ...field,
+        required: true,
+        displayOptions: { show: { resource: ['user'], operation: ['create'] } },
+    })),
+    fields('user', ['create'], 'additionalFields', [
+        text('Last Name', 'lastName'),
+        {
+            ...toggle('Send Invitation Email', 'sendInvitationEmail', 'Whether to email a link for setting the initial password'),
+            default: true,
+        },
+        toggle('Technician Mode Ticketing', 'technicianModeTicketingEnabled', 'Whether the user may use technician-mode ticketing'),
+    ]),
+    fields('user', ['update'], 'updateFields', [
+        text('First Name', 'firstName'),
+        text('Last Name', 'lastName'),
+        locator('Role', 'roleId', 'searchRoles'),
+        toggle('Technician Mode Ticketing', 'technicianModeTicketingEnabled', 'Whether the user may use technician-mode ticketing'),
+    ]),
+    {
+        ...companyAccessType,
+        displayOptions: { show: { resource: ['user'], operation: ['create'] } },
+    },
+    {
+        ...companyAccessType,
+        default: '',
+        options: [{ name: 'Leave Unchanged', value: '' }, ...(companyAccessType.options ?? [])],
+        displayOptions: { show: { resource: ['user'], operation: ['update'] } },
+    },
+    {
+        displayName: 'Companies',
+        name: 'companies',
+        type: 'fixedCollection',
+        default: {},
+        typeOptions: { multipleValues: true },
+        placeholder: 'Add Company',
+        displayOptions: {
+            show: {
+                resource: ['user'],
+                operation: ['create', 'update'],
+                companyAccessType: ['some', 'most'],
+            },
+        },
+        options: [
+            {
+                displayName: 'Company',
+                name: 'company',
+                values: [locator('Company', 'companyId', 'searchCompanies')],
+            },
+        ],
+    },
+    (0, Common_1.getAndListOperations)('role'),
+    (0, Common_1.idLocator)('role', 'Role', 'roleId', 'searchRoles'),
+    operations('webhook', [
+        ['Create', 'create', 'Create a webhook'],
+        ['Delete', 'delete', 'Delete a webhook'],
+        ['Get', 'get', 'Get a webhook'],
+        ['Get Delivery Logs', 'getDeliveryLogs', 'Get webhook delivery logs'],
+        ['Get Many', 'getMany', 'Get many webhooks'],
+        ['Test', 'test', 'Send a test webhook delivery'],
+        ['Update', 'update', 'Update a webhook'],
+    ]),
+    (0, Common_1.idLocator)('webhook', 'Webhook', 'webhookId', 'searchWebhooks', [
+        'get',
+        'update',
+        'delete',
+        'getDeliveryLogs',
+        'test',
+    ]),
+    ...(0, Common_1.paginationFields)('webhook'),
+    ...[
+        text('Name', 'name'),
+        text('URL', 'url', 'Full HTTPS delivery URL, including its path'),
+        eventSubscriptions,
+    ].map((field) => ({
+        ...field,
+        required: true,
+        displayOptions: {
+            show: { resource: ['webhook'], operation: ['create'] },
+        },
+    })),
+    fields('webhook', ['create'], 'additionalFields', [
+        {
+            ...locator('Company', 'companyId', 'searchCompanies'),
+            required: false,
+            description: 'Leave empty for all companies',
+        },
+        webhookFormat,
+    ]),
+    fields('webhook', ['update'], 'updateFields', [
+        {
+            ...locator('Company', 'companyId', 'searchCompanies'),
+            required: false,
+            description: 'Leave empty to scope to all companies. Omit this field to keep the current scope.',
+        },
+        toggle('Enabled', 'enabled', 'Whether webhook deliveries are enabled'),
+        eventSubscriptions,
+        webhookFormat,
+        text('Name', 'name'),
+        text('URL', 'url', 'Full HTTPS delivery URL. Omit to keep the stored URL; Get returns only its origin.'),
+    ]),
+    {
+        displayName: 'Creation returns the signing secret once. Store it securely. Native JSON deliveries are signed; Teams and Slack deliveries are unsigned.',
+        name: 'webhookSecretNotice',
+        type: 'notice',
+        default: '',
+        displayOptions: { show: { resource: ['webhook'], operation: ['create'] } },
+    },
+];

package/dist/nodes/AutoElevate/descriptions/WebhookEvents.d.ts

@@ -0,0 +1 @@
+export declare const webhookEvents: readonly ["request.created", "request.approved", "request.denied", "request.duplicate.detected", "session.created", "session.completed", "session.cancelled", "agent-update.requested", "agent-update.started", "agent-update.completed", "agent-update.failed", "agent-update.download-failed", "agent-update.verification-failed", "computer.enrolled", "computer.removed", "computer.moved", "computer.elevation-mode.changed", "computer.auto-blocker-mode.changed", "computer.technician-mode.changed", "computer.admin-privileges.changed", "computer.uac.changed", "computer.restart-requested", "computer.restarted", "rule.created", "rule.updated", "rule.removed", "alert.virus.detected", "alert.execution.blocked", "alert.execution.allowed", "blocker-rule.created", "blocker-rule.updated", "blocker-rule.removed", "blocker-event.converted-to-rule", "technician-session.started", "technician-session.authenticated", "technician-session.time-started", "technician-session.time-ended", "os-login.requested", "os-login.authenticated", "technician-mode.bypassed", "company.created", "company.updated", "company.removed", "company.merged", "location.created", "location.updated", "location.removed", "location.merged", "user.created", "user.updated", "user.removed", "user.2fa.reset", "user.password.reset"];

package/dist/nodes/AutoElevate/descriptions/WebhookEvents.js

@@ -0,0 +1,59 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.webhookEvents = void 0;
+// Source: https://partner-api-docs.autoelevate.com/openapi.json (2026-10-27)
+exports.webhookEvents = [
+    'request.created',
+    'request.approved',
+    'request.denied',
+    'request.duplicate.detected',
+    'session.created',
+    'session.completed',
+    'session.cancelled',
+    'agent-update.requested',
+    'agent-update.started',
+    'agent-update.completed',
+    'agent-update.failed',
+    'agent-update.download-failed',
+    'agent-update.verification-failed',
+    'computer.enrolled',
+    'computer.removed',
+    'computer.moved',
+    'computer.elevation-mode.changed',
+    'computer.auto-blocker-mode.changed',
+    'computer.technician-mode.changed',
+    'computer.admin-privileges.changed',
+    'computer.uac.changed',
+    'computer.restart-requested',
+    'computer.restarted',
+    'rule.created',
+    'rule.updated',
+    'rule.removed',
+    'alert.virus.detected',
+    'alert.execution.blocked',
+    'alert.execution.allowed',
+    'blocker-rule.created',
+    'blocker-rule.updated',
+    'blocker-rule.removed',
+    'blocker-event.converted-to-rule',
+    'technician-session.started',
+    'technician-session.authenticated',
+    'technician-session.time-started',
+    'technician-session.time-ended',
+    'os-login.requested',
+    'os-login.authenticated',
+    'technician-mode.bypassed',
+    'company.created',
+    'company.updated',
+    'company.removed',
+    'company.merged',
+    'location.created',
+    'location.updated',
+    'location.removed',
+    'location.merged',
+    'user.created',
+    'user.updated',
+    'user.removed',
+    'user.2fa.reset',
+    'user.password.reset',
+];

package/dist/nodes/AutoElevate/descriptions/index.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.autoElevateProperties = void 0;
+const Management_1 = require("./Management");
 const Common_1 = require("./Common");
 const getManyOnly = (resource, action) => ({
     displayName: 'Operation',
@@ -21,10 +22,13 @@ exports.autoElevateProperties = [
         default: '',
         options: [
             { name: 'All', value: '' },
+            { name: 'Rules', value: 'rules' },
             { name: 'Settings', value: 'settings' },
             { name: 'Users', value: 'users' },
         ],
-        displayOptions: { show: { resource: ['auditLog'], operation: ['getMany'] } },
+        displayOptions: {
+            show: { resource: ['auditLog'], operation: ['getMany'] },
+        },
     },
     {
         displayName: 'Action',
@@ -37,21 +41,30 @@ exports.autoElevateProperties = [
             { name: 'Updated', value: 'updated' },
             { name: 'Deleted', value: 'deleted' },
         ],
-        displayOptions: { show: { resource: ['auditLog'], operation: ['getMany'] } },
+        displayOptions: {
+            show: { resource: ['auditLog'], operation: ['getMany'] },
+        },
     },
     ...(0, Common_1.paginationFields)('auditLog'),
     (0, Common_1.getAndListOperations)('company'),
     (0, Common_1.idLocator)('company', 'Company', 'companyId', 'searchCompanies'),
     ...(0, Common_1.paginationFields)('company'),
-    (0, Common_1.getAndListOperations)('computer'),
-    (0, Common_1.idLocator)('computer', 'Computer', 'computerId', 'searchComputers'),
+    Management_1.computerOperations,
+    (0, Common_1.idLocator)('computer', 'Computer', 'computerId', 'searchComputers', [
+        'get',
+        'delete',
+        'setElevationMode',
+        'setTechnicianMode',
+    ]),
     (0, Common_1.companyFilter)('computer'),
     {
         displayName: 'Location',
         name: 'locationId',
         type: 'resourceLocator',
         default: { mode: 'list', value: '' },
-        displayOptions: { show: { resource: ['computer'], operation: ['getMany'] } },
+        displayOptions: {
+            show: { resource: ['computer'], operation: ['getMany'] },
+        },
         modes: [
             {
                 displayName: 'From List',
@@ -71,7 +84,9 @@ exports.autoElevateProperties = [
         name: 'computerId',
         type: 'resourceLocator',
         default: { mode: 'list', value: '' },
-        displayOptions: { show: { resource: ['elevatedSession'], operation: ['getMany'] } },
+        displayOptions: {
+            show: { resource: ['elevatedSession'], operation: ['getMany'] },
+        },
         modes: [
             {
                 displayName: 'From List',
@@ -92,10 +107,13 @@ exports.autoElevateProperties = [
             { name: 'Active', value: 'active' },
             { name: 'Inactive', value: 'inactive' },
         ],
-        displayOptions: { show: { resource: ['elevatedSession'], operation: ['getMany'] } },
+        displayOptions: {
+            show: { resource: ['elevatedSession'], operation: ['getMany'] },
+        },
     },
     ...(0, Common_1.paginationFields)('elevatedSession'),
-    getManyOnly('elevationEvent', 'Get many elevation events'),
+    (0, Common_1.getAndListOperations)('elevationEvent'),
+    (0, Common_1.idLocator)('elevationEvent', 'Elevation Event', 'elevationEventId', 'searchElevationEvents'),
     ...(0, Common_1.dateRangeFields)('elevationEvent'),
     (0, Common_1.companyFilter)('elevationEvent'),
     ...(0, Common_1.paginationFields)('elevationEvent'),
@@ -106,10 +124,18 @@ exports.autoElevateProperties = [
         noDataExpression: true,
         displayOptions: { show: { resource: ['elevationRequest'] } },
         options: [
-            { name: 'Approve', value: 'approve', action: 'Approve an elevation request' },
+            {
+                name: 'Approve',
+                value: 'approve',
+                action: 'Approve an elevation request',
+            },
             { name: 'Deny', value: 'deny', action: 'Deny an elevation request' },
             { name: 'Get', value: 'get', action: 'Get an elevation request' },
-            { name: 'Get Many', value: 'getMany', action: 'Get many elevation requests' },
+            {
+                name: 'Get Many',
+                value: 'getMany',
+                action: 'Get many elevation requests',
+            },
         ],
         default: 'getMany',
     },
@@ -126,8 +152,11 @@ exports.autoElevateProperties = [
             { name: 'Approved', value: 'APPROVED' },
             { name: 'Denied', value: 'DENIED' },
             { name: 'Pending', value: 'PENDING' },
+            { name: 'Withdrawn', value: 'WITHDRAWN' },
         ],
-        displayOptions: { show: { resource: ['elevationRequest'], operation: ['getMany'] } },
+        displayOptions: {
+            show: { resource: ['elevationRequest'], operation: ['getMany'] },
+        },
     },
     {
         displayName: 'Elevation Type',
@@ -139,16 +168,20 @@ exports.autoElevateProperties = [
             { name: 'Admin', value: 'admin' },
             { name: 'User', value: 'user' },
         ],
-        displayOptions: { show: { resource: ['elevationRequest'], operation: ['approve'] } },
+        displayOptions: {
+            show: { resource: ['elevationRequest'], operation: ['approve'] },
+        },
     },
     {
         displayName: 'Duration (Minutes)',
         name: 'durationInMinutes',
         type: 'number',
         default: 0,
-        typeOptions: { minValue: 0 },
-        description: 'For session requests. Leave at 0 to use the request default.',
-        displayOptions: { show: { resource: ['elevationRequest'], operation: ['approve'] } },
+        typeOptions: { minValue: 0, maxValue: 60 },
+        description: 'Required for elevated-session requests: 1 to 60 minutes (at least 10 for Addigy-managed Macs). Leave at 0 only for other request types.',
+        displayOptions: {
+            show: { resource: ['elevationRequest'], operation: ['approve'] },
+        },
     },
     {
         displayName: 'Create Rule',
@@ -181,9 +214,20 @@ exports.autoElevateProperties = [
         },
     },
     ...(0, Common_1.paginationFields)('elevationRequest'),
-    getManyOnly('elevationRule', 'Get many elevation rules'),
+    Management_1.ruleOperations,
     (0, Common_1.companyFilter)('elevationRule'),
     ...(0, Common_1.paginationFields)('elevationRule'),
+    {
+        displayName: 'Denial Reason',
+        name: 'denialReason',
+        type: 'string',
+        default: '',
+        description: 'Reason shown to the end user. Maximum 1000 characters.',
+        displayOptions: {
+            show: { resource: ['elevationRequest'], operation: ['deny'] },
+        },
+    },
+    ...Management_1.managementProperties,
     (0, Common_1.getAndListOperations)('location'),
     (0, Common_1.idLocator)('location', 'Location', 'locationId', 'searchLocations'),
     (0, Common_1.companyFilter)('location'),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@joshuanode/n8n-nodes-autoelevate",
-  "version": "0.1.0",
+  "version": "0.2.0-beta.1",
   "description": "n8n community node for the AutoElevate Partner API",
   "license": "MIT",
   "author": {