@n8n/decorators 1.36.2 → 1.37.0

package/dist/controller/api-error-response.d.ts

@@ -1 +1,5 @@
-export declare const ApiErrorResponse: (status: number) => MethodDecorator;
+import type { ResponseDtoClass } from './types';
+export declare const ApiErrorResponse: (status: number, { dto, description }?: {
+    dto?: ResponseDtoClass;
+    description?: string;
+}) => MethodDecorator;

package/dist/controller/api-error-response.js

@@ -3,9 +3,12 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ApiErrorResponse = void 0;
 const di_1 = require("@n8n/di");
 const controller_registry_metadata_1 = require("./controller-registry-metadata");
-const ApiErrorResponse = (status) => (target, handlerName) => {
+const ApiErrorResponse = (status, { dto, description } = {}) => (target, handlerName) => {
     const routeMetadata = di_1.Container.get(controller_registry_metadata_1.ControllerRegistryMetadata).getRouteMetadata(target.constructor, String(handlerName));
-    routeMetadata.errorResponses = [...(routeMetadata.errorResponses ?? []), status].sort((a, b) => a - b);
+    routeMetadata.errorResponses = [
+        ...(routeMetadata.errorResponses ?? []),
+        { status, ...(dto ? { dto } : {}), ...(description ? { description } : {}) },
+    ].sort((a, b) => a.status - b.status);
 };
 exports.ApiErrorResponse = ApiErrorResponse;
 //# sourceMappingURL=api-error-response.js.map

package/dist/controller/api-error-response.js.map

@@ -1 +1 @@
-{"version":3,"file":"api-error-response.js","sourceRoot":"","sources":["../../src/controller/api-error-response.ts"],"names":[],"mappings":";;;AAAA,gCAAoC;AAEpC,iFAA4E;AAOrE,MAAM,gBAAgB,GAC5B,CAAC,MAAc,EAAmB,EAAE,CACpC,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE;IACvB,MAAM,aAAa,GAAG,cAAS,CAAC,GAAG,CAAC,yDAA0B,CAAC,CAAC,gBAAgB,CAC/E,MAAM,CAAC,WAAyB,EAChC,MAAM,CAAC,WAAW,CAAC,CACnB,CAAC;IACF,aAAa,CAAC,cAAc,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CACpF,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CACf,CAAC;AACH,CAAC,CAAC;AAVU,QAAA,gBAAgB,GAAhB,gBAAgB,CAU1B"}
+{"version":3,"file":"api-error-response.js","sourceRoot":"","sources":["../../src/controller/api-error-response.ts"],"names":[],"mappings":";;;AAAA,gCAAoC;AAEpC,iFAA4E;AAUrE,MAAM,gBAAgB,GAC5B,CACC,MAAc,EACd,EAAE,GAAG,EAAE,WAAW,EAAE,GAAqD,EAAE,EACzD,EAAE,CACrB,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE;IACvB,MAAM,aAAa,GAAG,cAAS,CAAC,GAAG,CAAC,yDAA0B,CAAC,CAAC,gBAAgB,CAC/E,MAAM,CAAC,WAAyB,EAChC,MAAM,CAAC,WAAW,CAAC,CACnB,CAAC;IACF,aAAa,CAAC,cAAc,GAAG;QAC9B,GAAG,CAAC,aAAa,CAAC,cAAc,IAAI,EAAE,CAAC;QACvC,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;KAC5E,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC,CAAC;AAdU,QAAA,gBAAgB,GAAhB,gBAAgB,CAc1B"}

package/dist/controller/index.d.ts

@@ -14,5 +14,5 @@ export { ControllerRegistryMetadata } from './controller-registry-metadata';
 export { Licensed } from './licensed';
 export { Deprecated } from './deprecated';
 export { GlobalScope, ProjectScope } from './scoped';
-export type { AccessScope, ApiKeyScopeRequirement, Arg, Controller, CorsOptions, DeprecationInfo, HandlerName, Method, ResponseDtoClass, RouteMetadata, StaticRouterMetadata, SuccessStatus, } from './types';
+export type { AccessScope, ApiKeyScopeRequirement, Arg, Controller, CorsOptions, DeprecationInfo, ErrorResponse, HandlerName, Method, ResponseDtoClass, RouteMetadata, StaticRouterMetadata, SuccessStatus, } from './types';
 export { type RateLimiterLimits, type BodyKeyedRateLimiterConfig, type UserKeyedRateLimiterConfig, type KeyedRateLimiterConfig, createBodyKeyedRateLimiter, createUserKeyedRateLimiter, createIpRateLimit, } from './rate-limit';

package/dist/controller/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/controller/index.ts"],"names":[],"mappings":";;;AAAA,+BAA4C;AAAnC,4FAAA,IAAI,OAAA;AAAE,6FAAA,KAAK,OAAA;AAAE,6FAAA,KAAK,OAAA;AAC3B,qDAAmD;AAA1C,iHAAA,cAAc,OAAA;AACvB,iEAA8D;AAArD,4HAAA,mBAAmB,OAAA;AAC5B,iEAA8D;AAArD,4HAAA,mBAAmB,OAAA;AAC5B,iDAA8C;AAArC,4GAAA,WAAW,OAAA;AACpB,+CAA6C;AAApC,2GAAA,WAAW,OAAA;AACpB,qDAAmD;AAA1C,iHAAA,cAAc,OAAA;AACvB,6CAA2C;AAAlC,yGAAA,UAAU,OAAA;AACnB,uCAAqC;AAA5B,mGAAA,OAAO,OAAA;AAChB,2DAAwD;AAA/C,sHAAA,gBAAgB,OAAA;AACzB,iCAAuE;AAA9D,4FAAA,GAAG,OAAA;AAAE,6FAAA,IAAI,OAAA;AAAE,4FAAA,GAAG,OAAA;AAAE,8FAAA,KAAK,OAAA;AAAE,+FAAA,MAAM,OAAA;AAAE,6FAAA,IAAI,OAAA;AAAE,gGAAA,OAAO,OAAA;AACrD,2CAA0C;AAAjC,wGAAA,UAAU,OAAA;AACnB,+EAA4E;AAAnE,0IAAA,0BAA0B,OAAA;AACnC,uCAAsC;AAA7B,oGAAA,QAAQ,OAAA;AACjB,2CAA0C;AAAjC,wGAAA,UAAU,OAAA;AACnB,mCAAqD;AAA5C,qGAAA,WAAW,OAAA;AAAE,sGAAA,YAAY,OAAA;AAelC,2CAQsB;AAHrB,wHAAA,0BAA0B,OAAA;AAC1B,wHAAA,0BAA0B,OAAA;AAC1B,+GAAA,iBAAiB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/controller/index.ts"],"names":[],"mappings":";;;AAAA,+BAA4C;AAAnC,4FAAA,IAAI,OAAA;AAAE,6FAAA,KAAK,OAAA;AAAE,6FAAA,KAAK,OAAA;AAC3B,qDAAmD;AAA1C,iHAAA,cAAc,OAAA;AACvB,iEAA8D;AAArD,4HAAA,mBAAmB,OAAA;AAC5B,iEAA8D;AAArD,4HAAA,mBAAmB,OAAA;AAC5B,iDAA8C;AAArC,4GAAA,WAAW,OAAA;AACpB,+CAA6C;AAApC,2GAAA,WAAW,OAAA;AACpB,qDAAmD;AAA1C,iHAAA,cAAc,OAAA;AACvB,6CAA2C;AAAlC,yGAAA,UAAU,OAAA;AACnB,uCAAqC;AAA5B,mGAAA,OAAO,OAAA;AAChB,2DAAwD;AAA/C,sHAAA,gBAAgB,OAAA;AACzB,iCAAuE;AAA9D,4FAAA,GAAG,OAAA;AAAE,6FAAA,IAAI,OAAA;AAAE,4FAAA,GAAG,OAAA;AAAE,8FAAA,KAAK,OAAA;AAAE,+FAAA,MAAM,OAAA;AAAE,6FAAA,IAAI,OAAA;AAAE,gGAAA,OAAO,OAAA;AACrD,2CAA0C;AAAjC,wGAAA,UAAU,OAAA;AACnB,+EAA4E;AAAnE,0IAAA,0BAA0B,OAAA;AACnC,uCAAsC;AAA7B,oGAAA,QAAQ,OAAA;AACjB,2CAA0C;AAAjC,wGAAA,UAAU,OAAA;AACnB,mCAAqD;AAA5C,qGAAA,WAAW,OAAA;AAAE,sGAAA,YAAY,OAAA;AAgBlC,2CAQsB;AAHrB,wHAAA,0BAA0B,OAAA;AAC1B,wHAAA,0BAA0B,OAAA;AAC1B,+GAAA,iBAAiB,OAAA"}

package/dist/controller/types.d.ts

@@ -11,6 +11,11 @@ export type ApiKeyScopeRequirement = ApiKeyScope | {
 };
 export type ResponseDtoClass = Pick<ZodClass, 'parse'>;
 export type SuccessStatus = 200 | 201 | 202 | 204;
+export interface ErrorResponse {
+    status: number;
+    dto?: ResponseDtoClass;
+    description?: string;
+}
 export type Method = 'get' | 'post' | 'put' | 'patch' | 'delete' | 'head' | 'options';
 export type Arg = {
     type: 'body' | 'query';
@@ -55,7 +60,7 @@ export interface RouteMetadata {
     summary?: string;
     description?: string;
     tags?: string[];
-    errorResponses?: number[];
+    errorResponses?: ErrorResponse[];
     deprecated?: DeprecationInfo;
     args: Arg[];
     router?: Router;

package/dist/credential-resolver/credential-resolver.d.ts

@@ -14,13 +14,13 @@ export interface CredentialResolverMetadata {
 }
 export interface ICredentialResolver {
     metadata: CredentialResolverMetadata;
-    getSecret(credentialId: string, context: ICredentialContext, handle: CredentialResolverHandle): Promise<ICredentialDataDecryptedObject>;
-    setSecret(credentialId: string, context: ICredentialContext, data: ICredentialDataDecryptedObject, handle: CredentialResolverHandle): Promise<void>;
-    deleteSecret?(credentialId: string, context: ICredentialContext, handle: CredentialResolverHandle): Promise<void>;
+    getSecret(credentialId: string, context: ICredentialContext, handle: CredentialResolverHandle, executionId?: string): Promise<ICredentialDataDecryptedObject>;
+    setSecret(credentialId: string, context: ICredentialContext, data: ICredentialDataDecryptedObject, handle: CredentialResolverHandle, executionId?: string): Promise<void>;
+    deleteSecret?(credentialId: string, context: ICredentialContext, handle: CredentialResolverHandle, executionId?: string): Promise<void>;
     deleteAllSecrets?(handle: CredentialResolverHandle): Promise<void>;
     validateOptions(options: CredentialResolverConfiguration): Promise<void>;
-    validateIdentity?(context: ICredentialContext, handle: CredentialResolverHandle): Promise<void>;
-    resolveOwningUserId?(context: ICredentialContext, handle: CredentialResolverHandle): Promise<string | undefined>;
+    validateIdentity?(context: ICredentialContext, handle: CredentialResolverHandle, executionId?: string): Promise<void>;
+    resolveOwningUserId?(context: ICredentialContext, handle: CredentialResolverHandle, executionId?: string): Promise<string | undefined>;
     init?(): Promise<void>;
 }
 export type CredentialResolverClass = Constructable<ICredentialResolver>;

package/dist/index.d.ts

@@ -10,6 +10,7 @@ export * from './context-establishment';
 export * from './credential-resolver';
 export * from './module';
 export * from './multi-main';
+export * from './policy-check';
 export * from './pubsub';
 export { Redactable } from './redactable';
 export * from './shutdown';

package/dist/index.js

@@ -29,6 +29,7 @@ __exportStar(require("./context-establishment"), exports);
 __exportStar(require("./credential-resolver"), exports);
 __exportStar(require("./module"), exports);
 __exportStar(require("./multi-main"), exports);
+__exportStar(require("./policy-check"), exports);
 __exportStar(require("./pubsub"), exports);
 var redactable_1 = require("./redactable");
 Object.defineProperty(exports, "Redactable", { enumerable: true, get: function () { return redactable_1.Redactable; } });

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,yDAAuC;AACvC,+CAA6B;AAC7B,4CAA0B;AAC1B,uCAAsC;AAA7B,oGAAA,QAAQ,OAAA;AACjB,wDAAsC;AACtC,uCAAsC;AAA7B,oGAAA,QAAQ,OAAA;AACjB,iDAA+B;AAC/B,kDAAgC;AAChC,0DAAwC;AACxC,wDAAsC;AACtC,2CAAyB;AACzB,+CAA6B;AAC7B,2CAAyB;AACzB,2CAA0C;AAAjC,wGAAA,UAAU,OAAA;AACnB,6CAA2B;AAC3B,2DAAyC;AAEzC,iCAAgC;AAAvB,8FAAA,KAAK,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,yDAAuC;AACvC,+CAA6B;AAC7B,4CAA0B;AAC1B,uCAAsC;AAA7B,oGAAA,QAAQ,OAAA;AACjB,wDAAsC;AACtC,uCAAsC;AAA7B,oGAAA,QAAQ,OAAA;AACjB,iDAA+B;AAC/B,kDAAgC;AAChC,0DAAwC;AACxC,wDAAsC;AACtC,2CAAyB;AACzB,+CAA6B;AAC7B,iDAA+B;AAC/B,2CAAyB;AACzB,2CAA0C;AAAjC,wGAAA,UAAU,OAAA;AACnB,6CAA2B;AAC3B,2DAAyC;AAEzC,iCAAgC;AAAvB,8FAAA,KAAK,OAAA"}

package/dist/policy-check/index.d.ts

@@ -0,0 +1,2 @@
+export { PolicyCheck, PolicyCheckMetadata, UnknownEnforcementPointError, } from './policy-check-metadata';
+export * from './policy-check';

package/dist/policy-check/index.js

@@ -0,0 +1,23 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UnknownEnforcementPointError = exports.PolicyCheckMetadata = exports.PolicyCheck = void 0;
+var policy_check_metadata_1 = require("./policy-check-metadata");
+Object.defineProperty(exports, "PolicyCheck", { enumerable: true, get: function () { return policy_check_metadata_1.PolicyCheck; } });
+Object.defineProperty(exports, "PolicyCheckMetadata", { enumerable: true, get: function () { return policy_check_metadata_1.PolicyCheckMetadata; } });
+Object.defineProperty(exports, "UnknownEnforcementPointError", { enumerable: true, get: function () { return policy_check_metadata_1.UnknownEnforcementPointError; } });
+__exportStar(require("./policy-check"), exports);
+//# sourceMappingURL=index.js.map

package/dist/policy-check/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/policy-check/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AASA,iEAIiC;AAHhC,oHAAA,WAAW,OAAA;AACX,4HAAA,mBAAmB,OAAA;AACnB,qIAAA,4BAA4B,OAAA;AAE7B,iDAA+B"}

package/dist/policy-check/policy-check-metadata.d.ts

@@ -0,0 +1,18 @@
+import { UnexpectedError } from 'n8n-workflow';
+import { type PolicyCheckClass, type RegisteredPolicyCheck } from './policy-check';
+type PolicyCheckEntry = {
+    class: PolicyCheckClass;
+};
+export declare class UnknownEnforcementPointError extends UnexpectedError {
+    constructor(checkClassName: string, unknownMethods: string[]);
+}
+export declare class PolicyCheckMetadata {
+    private readonly policyChecks;
+    register(entry: PolicyCheckEntry): void;
+    getClasses(): PolicyCheckClass[];
+}
+type DecoratedPolicyCheckClass = PolicyCheckClass & {
+    readonly prototype: RegisteredPolicyCheck;
+};
+export declare const PolicyCheck: () => <T extends DecoratedPolicyCheckClass>(target: T) => any;
+export {};

package/dist/policy-check/policy-check-metadata.js

@@ -0,0 +1,47 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PolicyCheck = exports.PolicyCheckMetadata = exports.UnknownEnforcementPointError = void 0;
+const di_1 = require("@n8n/di");
+const n8n_workflow_1 = require("n8n-workflow");
+const policy_check_1 = require("./policy-check");
+class UnknownEnforcementPointError extends n8n_workflow_1.UnexpectedError {
+    constructor(checkClassName, unknownMethods) {
+        super(`Policy check "${checkClassName}" declares ${unknownMethods.join(', ')}, which ` +
+            `match no known enforcement point. Known points: ${policy_check_1.ENFORCEMENT_POINTS.join(', ')}.`);
+    }
+}
+exports.UnknownEnforcementPointError = UnknownEnforcementPointError;
+let PolicyCheckMetadata = class PolicyCheckMetadata {
+    constructor() {
+        this.policyChecks = new Set();
+    }
+    register(entry) {
+        this.policyChecks.add(entry);
+    }
+    getClasses() {
+        return [...this.policyChecks.values()].map((entry) => entry.class);
+    }
+};
+exports.PolicyCheckMetadata = PolicyCheckMetadata;
+exports.PolicyCheckMetadata = PolicyCheckMetadata = __decorate([
+    (0, di_1.Service)()
+], PolicyCheckMetadata);
+const KNOWN_POINT_METHODS = new Set(Object.values(policy_check_1.ENFORCEMENT_POINT_METHODS));
+function assertPointsAreKnown(target) {
+    const unknown = Object.getOwnPropertyNames(target.prototype).filter((name) => /^on[A-Z]/.test(name) && !KNOWN_POINT_METHODS.has(name));
+    if (unknown.length > 0)
+        throw new UnknownEnforcementPointError(target.name, unknown);
+}
+const PolicyCheck = () => (target) => {
+    assertPointsAreKnown(target);
+    di_1.Container.get(PolicyCheckMetadata).register({ class: target });
+    return (0, di_1.Service)()(target);
+};
+exports.PolicyCheck = PolicyCheck;
+//# sourceMappingURL=policy-check-metadata.js.map

package/dist/policy-check/policy-check-metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-check-metadata.js","sourceRoot":"","sources":["../../src/policy-check/policy-check-metadata.ts"],"names":[],"mappings":";;;;;;;;;AAAA,gCAA6C;AAC7C,+CAA+C;AAE/C,iDAKwB;AAoBxB,kCAA0C,SAAQ,8BAAe;IAChE,YAAY,cAAsB,EAAE,cAAwB;QAC3D,KAAK,CACJ,iBAAiB,cAAc,cAAc,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU;YAC/E,mDAAmD,iCAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACpF,CAAC;IACH,CAAC;CACD;;AAmBM,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAAzB;QACW,iBAAY,GAA0B,IAAI,GAAG,EAAE,CAAC;IAiBlE,CAAC;IARA,QAAQ,CAAC,KAAuB;QAC/B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAGD,UAAU;QACT,OAAO,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC;CACD,CAAA;;8BAlBY,mBAAmB;IAD/B,IAAA,YAAO,GAAE;GACG,mBAAmB,CAkB/B;AAOD,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,MAAM,CAAC,wCAAyB,CAAC,CAAC,CAAC;AAYtF,SAAS,oBAAoB,CAAC,MAAiC;IAC9D,MAAM,OAAO,GAAG,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAClE,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,CACjE,CAAC;IAEF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,4BAA4B,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACtF,CAAC;AA0BM,MAAM,WAAW,GACvB,GAAG,EAAE,CACL,CAAsC,MAAS,EAAE,EAAE;IAClD,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAE7B,cAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAG/D,OAAO,IAAA,YAAO,GAAE,CAAC,MAAM,CAAC,CAAC;AAC1B,CAAC,CAAC;AATU,QAAA,WAAW,GAAX,WAAW,CASrB"}

package/dist/policy-check/policy-check.d.ts

@@ -0,0 +1,80 @@
+import type { Constructable } from '@n8n/di';
+import type { INode } from 'n8n-workflow';
+export declare const ENFORCEMENT_POINTS: readonly ['workflowSave', 'workflowPublish', 'workflowStart', 'workflowTransfer', 'credentialDecrypt', 'contentImport'];
+export type EnforcementPoint = (typeof ENFORCEMENT_POINTS)[number];
+export type PolicedWorkflow = {
+    readonly id: string | null;
+    readonly name: string;
+    readonly nodes: readonly INode[];
+};
+export type CredentialConsumer = {
+    readonly nodeType: string;
+};
+export type WorkflowSaveContext = {
+    readonly workflow: PolicedWorkflow;
+    readonly storedWorkflow: PolicedWorkflow | null;
+    readonly projectId: string | null;
+};
+export type WorkflowPublishContext = {
+    readonly workflow: PolicedWorkflow;
+    readonly projectId: string | null;
+};
+export type WorkflowStartContext = {
+    readonly workflow: PolicedWorkflow;
+    readonly projectId: string | null;
+};
+export type WorkflowTransferContext = {
+    readonly workflow: PolicedWorkflow;
+    readonly targetProjectId: string | null;
+};
+export type CredentialDecryptContext = {
+    readonly credentialType: string;
+    readonly credentialId: string;
+    readonly consumer: CredentialConsumer | null;
+    readonly projectId: string | null;
+};
+export type ContentImportContext = {
+    readonly workflow: PolicedWorkflow;
+    readonly projectId: string | null;
+};
+export type PolicyViolation = {
+    kind: string;
+    checkId: string;
+    message: string;
+    subject?: string;
+    subjectType?: string;
+    scope?: string;
+    matchedRuleId?: string;
+};
+export type PolicyVersionRef = {
+    scope: string;
+    version: number;
+};
+export type PolicyCheckFailure = {
+    checkId: string;
+    correlationId: string;
+};
+export type PolicyCheckResult = {
+    violations: PolicyViolation[];
+    policyVersions?: PolicyVersionRef[];
+};
+export type PolicyDecision = {
+    violations: PolicyViolation[];
+    policyVersions?: PolicyVersionRef[];
+    checkErrors?: PolicyCheckFailure[];
+};
+export interface RegisteredPolicyCheck {
+    id: string;
+    onWorkflowSave?(ctx: WorkflowSaveContext, signal: AbortSignal): Promise<PolicyCheckResult>;
+    onWorkflowPublish?(ctx: WorkflowPublishContext, signal: AbortSignal): Promise<PolicyCheckResult>;
+    onWorkflowStart?(ctx: WorkflowStartContext, signal: AbortSignal): Promise<PolicyCheckResult>;
+    onWorkflowTransfer?(ctx: WorkflowTransferContext, signal: AbortSignal): Promise<PolicyCheckResult>;
+    onCredentialDecrypt?(ctx: CredentialDecryptContext, signal: AbortSignal): Promise<PolicyCheckResult>;
+    onContentImport?(ctx: ContentImportContext, signal: AbortSignal): Promise<PolicyCheckResult>;
+}
+export type PolicyCheckMethod = `on${Capitalize<EnforcementPoint>}`;
+export declare const ENFORCEMENT_POINT_METHODS: {
+    readonly [P in EnforcementPoint]: `on${Capitalize<P>}`;
+};
+export type PolicyCheckClass = Constructable<RegisteredPolicyCheck>;
+export declare const pointsImplementedBy: (check: RegisteredPolicyCheck) => EnforcementPoint[];

package/dist/policy-check/policy-check.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.pointsImplementedBy = exports.ENFORCEMENT_POINT_METHODS = exports.ENFORCEMENT_POINTS = void 0;
+exports.ENFORCEMENT_POINTS = [
+    'workflowSave',
+    'workflowPublish',
+    'workflowStart',
+    'workflowTransfer',
+    'credentialDecrypt',
+    'contentImport',
+];
+exports.ENFORCEMENT_POINT_METHODS = {
+    workflowSave: 'onWorkflowSave',
+    workflowPublish: 'onWorkflowPublish',
+    workflowStart: 'onWorkflowStart',
+    workflowTransfer: 'onWorkflowTransfer',
+    credentialDecrypt: 'onCredentialDecrypt',
+    contentImport: 'onContentImport',
+};
+const pointsImplementedBy = (check) => exports.ENFORCEMENT_POINTS.filter((point) => typeof check[exports.ENFORCEMENT_POINT_METHODS[point]] === 'function');
+exports.pointsImplementedBy = pointsImplementedBy;
+//# sourceMappingURL=policy-check.js.map

package/dist/policy-check/policy-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-check.js","sourceRoot":"","sources":["../../src/policy-check/policy-check.ts"],"names":[],"mappings":";;;AAUa,QAAA,kBAAkB,GAAG;IACjC,cAAc;IACd,iBAAiB;IACjB,eAAe;IACf,kBAAkB;IAClB,mBAAmB;IACnB,eAAe;CACN,CAAC;AAkNE,QAAA,yBAAyB,GAElC;IACH,YAAY,EAAE,gBAAgB;IAC9B,eAAe,EAAE,mBAAmB;IACpC,aAAa,EAAE,iBAAiB;IAChC,gBAAgB,EAAE,oBAAoB;IACtC,iBAAiB,EAAE,qBAAqB;IACxC,aAAa,EAAE,iBAAiB;CAChC,CAAC;AAUK,MAAM,mBAAmB,GAAG,CAAC,KAA4B,EAAsB,EAAE,CACvF,QAAA,kBAAkB,CAAC,MAAM,CACxB,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,QAAA,yBAAyB,CAAC,KAAK,CAAC,CAAC,KAAK,UAAU,CACxE,CAAC;AAHU,QAAA,mBAAmB,GAAnB,mBAAmB,CAG7B"}

package/dist/pubsub/pubsub-metadata.d.ts

@@ -1,6 +1,6 @@
 import type { InstanceRole, InstanceType } from '@n8n/constants';
 import type { EventHandler } from '../types';
-export type PubSubEventName = 'add-webhooks-triggers-and-pollers' | 'remove-triggers-and-pollers' | 'clear-test-webhooks' | 'display-workflow-activation' | 'display-workflow-deactivation' | 'display-workflow-activation-error' | 'display-workflow-publication-status' | 'workflow-publish-wake-up' | 'community-package-install' | 'community-package-uninstall' | 'community-package-update' | 'get-worker-status' | 'stop-execution' | 'reload-external-secrets-providers' | 'reload-license' | 'reload-oidc-config' | 'reload-saml-config' | 'reload-overwrite-credentials' | 'response-to-get-worker-status' | 'restart-event-bus' | 'relay-execution-lifecycle-event' | 'relay-agent-execution-update' | 'relay-chat-stream-event' | 'relay-instance-ai-event' | 'relay-instance-ai-task-control' | 'relay-chat-human-message' | 'relay-chat-message-edit' | 'reload-sso-provisioning-configuration' | 'reload-source-control-config' | 'reload-mcp-registry' | 'reload-otel-config' | 'reload-instance-ai-settings' | 'cancel-test-run' | 'cancel-collection' | 'agent-chat-integration-changed' | 'agent-chat-subscription-changed' | 'agent-config-changed' | 'agent-tasks-changed' | 'redaction-floor-changed';
+export type PubSubEventName = 'add-webhooks-triggers-and-pollers' | 'remove-triggers-and-pollers' | 'clear-test-webhooks' | 'display-workflow-activation' | 'display-workflow-deactivation' | 'display-workflow-activation-error' | 'display-workflow-publication-status' | 'workflow-publish-wake-up' | 'community-package-install' | 'community-package-uninstall' | 'community-package-update' | 'get-worker-status' | 'stop-execution' | 'reload-external-secrets-providers' | 'reload-license' | 'reload-oidc-config' | 'reload-saml-config' | 'reload-overwrite-credentials' | 'response-to-get-worker-status' | 'restart-event-bus' | 'relay-execution-lifecycle-event' | 'relay-agent-execution-update' | 'relay-chat-stream-event' | 'relay-instance-ai-event' | 'relay-instance-ai-task-control' | 'relay-chat-human-message' | 'relay-chat-message-edit' | 'reload-sso-provisioning-configuration' | 'reload-source-control-config' | 'reload-mcp-registry' | 'reload-otel-config' | 'reload-instance-ai-settings' | 'cancel-test-run' | 'cancel-collection' | 'agent-chat-integration-changed' | 'agent-chat-subscription-changed' | 'agent-chat-leader-channel-request' | 'agent-chat-leader-channel-result' | 'agent-config-changed' | 'agent-tasks-changed' | 'redaction-floor-changed';
 export type PubSubEventFilter = {
     instanceType: 'main';
     instanceRole?: Omit<InstanceRole, 'unset'>;

package/dist/pubsub/pubsub-metadata.js.map

@@ -1 +1 @@
-{"version":3,"file":"pubsub-metadata.js","sourceRoot":"","sources":["../../src/pubsub/pubsub-metadata.ts"],"names":[],"mappings":";;;;;;;;;AACA,gCAAkC;AA0D3B,IAAM,cAAc,GAApB,MAAM,cAAc;IAApB;QACW,aAAQ,GAAyB,EAAE,CAAC;IAStD,CAAC;IAPA,QAAQ,CAAC,OAA2B;QACnC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED,WAAW;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC;IACtB,CAAC;CACD,CAAA;;yBAVY,cAAc;IAD1B,IAAA,YAAO,GAAE;GACG,cAAc,CAU1B"}
+{"version":3,"file":"pubsub-metadata.js","sourceRoot":"","sources":["../../src/pubsub/pubsub-metadata.ts"],"names":[],"mappings":";;;;;;;;;AACA,gCAAkC;AA4D3B,IAAM,cAAc,GAApB,MAAM,cAAc;IAApB;QACW,aAAQ,GAAyB,EAAE,CAAC;IAStD,CAAC;IAPA,QAAQ,CAAC,OAA2B;QACnC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED,WAAW;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC;IACtB,CAAC;CACD,CAAA;;yBAVY,cAAc;IAD1B,IAAA,YAAO,GAAE;GACG,cAAc,CAU1B"}

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@n8n/decorators",
-  "version": "1.36.2",
+  "version": "1.37.0",
   "main": "dist/index.js",
   "module": "src/index.ts",
   "types": "dist/index.d.ts",
   "files": [
     "dist/**/*",
-    "LICENSE.md",
-    "LICENSE_EE.md"
+    "LICENSE_EE.md",
+    "LICENSE.md"
   ],
   "devDependencies": {
     "@types/express": "^5.0.1",
@@ -15,16 +15,16 @@
     "typescript": "7.0.2",
     "vitest": "^4.1.9",
     "zod": "3.25.76",
-    "@n8n/vitest-config": "1.21.0",
-    "@n8n/typescript-config": "1.10.0"
+    "@n8n/typescript-config": "1.10.0",
+    "@n8n/vitest-config": "1.21.0"
   },
   "dependencies": {
     "lodash": "4.18.1",
-    "@n8n/api-types": "1.36.2",
+    "@n8n/api-types": "1.37.0",
+    "@n8n/constants": "0.36.0",
     "@n8n/di": "0.16.0",
-    "@n8n/permissions": "0.73.0",
-    "n8n-workflow": "2.36.2",
-    "@n8n/constants": "0.35.0"
+    "n8n-workflow": "2.37.0",
+    "@n8n/permissions": "0.74.0"
   },
   "license": "SEE LICENSE IN LICENSE.md",
   "homepage": "https://n8n.io",