@n8n/decorators 1.40.1 → 1.41.1

package/dist/controller/index.d.ts

@@ -12,6 +12,7 @@ export { Get, Post, Put, Patch, Delete, Head, Options } from './route';
 export { Middleware } from './middleware';
 export { ControllerRegistryMetadata } from './controller-registry-metadata';
 export { Licensed } from './licensed';
+export { RequiresUserQuota } from './requires-user-quota';
 export { Deprecated } from './deprecated';
 export { GlobalScope, ProjectScope } from './scoped';
 export type { AccessScope, ApiKeyScopeRequirement, Arg, Controller, CorsOptions, DeprecationInfo, ErrorResponse, HandlerName, Method, ResponseDtoClass, RouteMetadata, StaticRouterMetadata, SuccessStatus, } from './types';

package/dist/controller/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.createIpRateLimit = exports.createUserKeyedRateLimiter = exports.createBodyKeyedRateLimiter = exports.ProjectScope = exports.GlobalScope = exports.Deprecated = exports.Licensed = exports.ControllerRegistryMetadata = exports.Middleware = exports.Options = exports.Head = exports.Delete = exports.Patch = exports.Put = exports.Post = exports.Get = exports.ApiErrorResponse = exports.ApiTags = exports.ApiSummary = exports.ApiDescription = exports.ApiResponse = exports.ApiKeyScope = exports.PublicApiController = exports.RootLevelController = exports.RestController = exports.Param = exports.Query = exports.Body = void 0;
+exports.createIpRateLimit = exports.createUserKeyedRateLimiter = exports.createBodyKeyedRateLimiter = exports.ProjectScope = exports.GlobalScope = exports.Deprecated = exports.RequiresUserQuota = exports.Licensed = exports.ControllerRegistryMetadata = exports.Middleware = exports.Options = exports.Head = exports.Delete = exports.Patch = exports.Put = exports.Post = exports.Get = exports.ApiErrorResponse = exports.ApiTags = exports.ApiSummary = exports.ApiDescription = exports.ApiResponse = exports.ApiKeyScope = exports.PublicApiController = exports.RootLevelController = exports.RestController = exports.Param = exports.Query = exports.Body = void 0;
 var args_1 = require("./args");
 Object.defineProperty(exports, "Body", { enumerable: true, get: function () { return args_1.Body; } });
 Object.defineProperty(exports, "Query", { enumerable: true, get: function () { return args_1.Query; } });
@@ -37,6 +37,8 @@ var controller_registry_metadata_1 = require("./controller-registry-metadata");
 Object.defineProperty(exports, "ControllerRegistryMetadata", { enumerable: true, get: function () { return controller_registry_metadata_1.ControllerRegistryMetadata; } });
 var licensed_1 = require("./licensed");
 Object.defineProperty(exports, "Licensed", { enumerable: true, get: function () { return licensed_1.Licensed; } });
+var requires_user_quota_1 = require("./requires-user-quota");
+Object.defineProperty(exports, "RequiresUserQuota", { enumerable: true, get: function () { return requires_user_quota_1.RequiresUserQuota; } });
 var deprecated_1 = require("./deprecated");
 Object.defineProperty(exports, "Deprecated", { enumerable: true, get: function () { return deprecated_1.Deprecated; } });
 var scoped_1 = require("./scoped");

package/dist/controller/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/controller/index.ts"],"names":[],"mappings":";;;AAAA,+BAA4C;AAAnC,4FAAA,IAAI,OAAA;AAAE,6FAAA,KAAK,OAAA;AAAE,6FAAA,KAAK,OAAA;AAC3B,qDAAmD;AAA1C,iHAAA,cAAc,OAAA;AACvB,iEAA8D;AAArD,4HAAA,mBAAmB,OAAA;AAC5B,iEAA8D;AAArD,4HAAA,mBAAmB,OAAA;AAC5B,iDAA8C;AAArC,4GAAA,WAAW,OAAA;AACpB,+CAA6C;AAApC,2GAAA,WAAW,OAAA;AACpB,qDAAmD;AAA1C,iHAAA,cAAc,OAAA;AACvB,6CAA2C;AAAlC,yGAAA,UAAU,OAAA;AACnB,uCAAqC;AAA5B,mGAAA,OAAO,OAAA;AAChB,2DAAwD;AAA/C,sHAAA,gBAAgB,OAAA;AACzB,iCAAuE;AAA9D,4FAAA,GAAG,OAAA;AAAE,6FAAA,IAAI,OAAA;AAAE,4FAAA,GAAG,OAAA;AAAE,8FAAA,KAAK,OAAA;AAAE,+FAAA,MAAM,OAAA;AAAE,6FAAA,IAAI,OAAA;AAAE,gGAAA,OAAO,OAAA;AACrD,2CAA0C;AAAjC,wGAAA,UAAU,OAAA;AACnB,+EAA4E;AAAnE,0IAAA,0BAA0B,OAAA;AACnC,uCAAsC;AAA7B,oGAAA,QAAQ,OAAA;AACjB,2CAA0C;AAAjC,wGAAA,UAAU,OAAA;AACnB,mCAAqD;AAA5C,qGAAA,WAAW,OAAA;AAAE,sGAAA,YAAY,OAAA;AAgBlC,2CAQsB;AAHrB,wHAAA,0BAA0B,OAAA;AAC1B,wHAAA,0BAA0B,OAAA;AAC1B,+GAAA,iBAAiB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/controller/index.ts"],"names":[],"mappings":";;;AAAA,+BAA4C;AAAnC,4FAAA,IAAI,OAAA;AAAE,6FAAA,KAAK,OAAA;AAAE,6FAAA,KAAK,OAAA;AAC3B,qDAAmD;AAA1C,iHAAA,cAAc,OAAA;AACvB,iEAA8D;AAArD,4HAAA,mBAAmB,OAAA;AAC5B,iEAA8D;AAArD,4HAAA,mBAAmB,OAAA;AAC5B,iDAA8C;AAArC,4GAAA,WAAW,OAAA;AACpB,+CAA6C;AAApC,2GAAA,WAAW,OAAA;AACpB,qDAAmD;AAA1C,iHAAA,cAAc,OAAA;AACvB,6CAA2C;AAAlC,yGAAA,UAAU,OAAA;AACnB,uCAAqC;AAA5B,mGAAA,OAAO,OAAA;AAChB,2DAAwD;AAA/C,sHAAA,gBAAgB,OAAA;AACzB,iCAAuE;AAA9D,4FAAA,GAAG,OAAA;AAAE,6FAAA,IAAI,OAAA;AAAE,4FAAA,GAAG,OAAA;AAAE,8FAAA,KAAK,OAAA;AAAE,+FAAA,MAAM,OAAA;AAAE,6FAAA,IAAI,OAAA;AAAE,gGAAA,OAAO,OAAA;AACrD,2CAA0C;AAAjC,wGAAA,UAAU,OAAA;AACnB,+EAA4E;AAAnE,0IAAA,0BAA0B,OAAA;AACnC,uCAAsC;AAA7B,oGAAA,QAAQ,OAAA;AACjB,6DAA0D;AAAjD,wHAAA,iBAAiB,OAAA;AAC1B,2CAA0C;AAAjC,wGAAA,UAAU,OAAA;AACnB,mCAAqD;AAA5C,qGAAA,WAAW,OAAA;AAAE,sGAAA,YAAY,OAAA;AAgBlC,2CAQsB;AAHrB,wHAAA,0BAA0B,OAAA;AAC1B,wHAAA,0BAA0B,OAAA;AAC1B,+GAAA,iBAAiB,OAAA"}

package/dist/controller/requires-user-quota.d.ts

@@ -0,0 +1 @@
+export declare const RequiresUserQuota: () => MethodDecorator;

package/dist/controller/requires-user-quota.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RequiresUserQuota = void 0;
+const di_1 = require("@n8n/di");
+const controller_registry_metadata_1 = require("./controller-registry-metadata");
+const RequiresUserQuota = () => (target, handlerName) => {
+    const routeMetadata = di_1.Container.get(controller_registry_metadata_1.ControllerRegistryMetadata).getRouteMetadata(target.constructor, String(handlerName));
+    routeMetadata.requiresUserQuota = true;
+};
+exports.RequiresUserQuota = RequiresUserQuota;
+//# sourceMappingURL=requires-user-quota.js.map

package/dist/controller/requires-user-quota.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requires-user-quota.js","sourceRoot":"","sources":["../../src/controller/requires-user-quota.ts"],"names":[],"mappings":";;;AAAA,gCAAoC;AAEpC,iFAA4E;AAMrE,MAAM,iBAAiB,GAAG,GAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE;IAC/E,MAAM,aAAa,GAAG,cAAS,CAAC,GAAG,CAAC,yDAA0B,CAAC,CAAC,gBAAgB,CAC/E,MAAM,CAAC,WAAyB,EAChC,MAAM,CAAC,WAAW,CAAC,CACnB,CAAC;IACF,aAAa,CAAC,iBAAiB,GAAG,IAAI,CAAC;AACxC,CAAC,CAAC;AANW,QAAA,iBAAiB,GAAjB,iBAAiB,CAM5B"}

package/dist/controller/types.d.ts

@@ -58,6 +58,7 @@ export interface RouteMetadata {
     ipRateLimit?: boolean | RateLimiterLimits;
     keyedRateLimit?: KeyedRateLimiterConfig;
     licenseFeature?: BooleanLicenseFeature;
+    requiresUserQuota?: boolean;
     accessScope?: AccessScope;
     apiKeyScope?: ApiKeyScopeRequirement;
     responseDto?: ResponseDtoClass;

package/dist/policy-check/policy-check.d.ts

@@ -2,7 +2,7 @@ import type { PolicyCheckFailure, PolicyViolation } from '@n8n/api-types';
 import type { Constructable } from '@n8n/di';
 import type { INode } from 'n8n-workflow';
 export type { PolicyViolation, PolicyCheckFailure };
-export declare const ENFORCEMENT_POINTS: readonly ['workflowSave', 'workflowPublish', 'workflowStart', 'workflowTransfer', 'credentialDecrypt', 'contentImport'];
+export declare const ENFORCEMENT_POINTS: readonly ['workflowSave', 'workflowPublish', 'workflowStart', 'workflowTransfer', 'credentialSave', 'credentialDecrypt', 'contentImport'];
 export type EnforcementPoint = (typeof ENFORCEMENT_POINTS)[number];
 export type PolicedWorkflow = {
     readonly id: string | null;
@@ -29,6 +29,15 @@ export type WorkflowTransferContext = {
     readonly workflow: PolicedWorkflow;
     readonly targetProjectId: string | null;
 };
+export type PolicedCredential = {
+    readonly id: string | null;
+    readonly type: string;
+};
+export type CredentialSaveContext = {
+    readonly credential: PolicedCredential;
+    readonly storedCredential: PolicedCredential | null;
+    readonly projectId: string | null;
+};
 export type CredentialDecryptContext = {
     readonly credentialType: string;
     readonly credentialId: string;
@@ -60,6 +69,7 @@ export interface RegisteredPolicyCheck {
     onWorkflowPublish?(ctx: WorkflowPublishContext, signal: AbortSignal): Promise<PolicyCheckResult>;
     onWorkflowStart?(ctx: WorkflowStartContext, signal: AbortSignal): Promise<PolicyCheckResult>;
     onWorkflowTransfer?(ctx: WorkflowTransferContext, signal: AbortSignal): Promise<PolicyCheckResult>;
+    onCredentialSave?(ctx: CredentialSaveContext, signal: AbortSignal): Promise<PolicyCheckResult>;
     onCredentialDecrypt?(ctx: CredentialDecryptContext, signal: AbortSignal): Promise<PolicyCheckResult>;
     onContentImport?(ctx: ContentImportContext, signal: AbortSignal): Promise<PolicyCheckResult>;
 }

package/dist/policy-check/policy-check.js

@@ -6,6 +6,7 @@ exports.ENFORCEMENT_POINTS = [
     'workflowPublish',
     'workflowStart',
     'workflowTransfer',
+    'credentialSave',
     'credentialDecrypt',
     'contentImport',
 ];
@@ -14,6 +15,7 @@ exports.ENFORCEMENT_POINT_METHODS = {
     workflowPublish: 'onWorkflowPublish',
     workflowStart: 'onWorkflowStart',
     workflowTransfer: 'onWorkflowTransfer',
+    credentialSave: 'onCredentialSave',
     credentialDecrypt: 'onCredentialDecrypt',
     contentImport: 'onContentImport',
 };

package/dist/policy-check/policy-check.js.map

@@ -1 +1 @@
-{"version":3,"file":"policy-check.js","sourceRoot":"","sources":["../../src/policy-check/policy-check.ts"],"names":[],"mappings":";;;AAaa,QAAA,kBAAkB,GAAG;IACjC,cAAc;IACd,iBAAiB;IACjB,eAAe;IACf,kBAAkB;IAClB,mBAAmB;IACnB,eAAe;CACN,CAAC;AAuLE,QAAA,yBAAyB,GAElC;IACH,YAAY,EAAE,gBAAgB;IAC9B,eAAe,EAAE,mBAAmB;IACpC,aAAa,EAAE,iBAAiB;IAChC,gBAAgB,EAAE,oBAAoB;IACtC,iBAAiB,EAAE,qBAAqB;IACxC,aAAa,EAAE,iBAAiB;CAChC,CAAC;AAUK,MAAM,mBAAmB,GAAG,CAAC,KAA4B,EAAsB,EAAE,CACvF,QAAA,kBAAkB,CAAC,MAAM,CACxB,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,QAAA,yBAAyB,CAAC,KAAK,CAAC,CAAC,KAAK,UAAU,CACxE,CAAC;AAHU,QAAA,mBAAmB,GAAnB,mBAAmB,CAG7B"}
+{"version":3,"file":"policy-check.js","sourceRoot":"","sources":["../../src/policy-check/policy-check.ts"],"names":[],"mappings":";;;AAaa,QAAA,kBAAkB,GAAG;IACjC,cAAc;IACd,iBAAiB;IACjB,eAAe;IACf,kBAAkB;IAClB,gBAAgB;IAChB,mBAAmB;IACnB,eAAe;CACN,CAAC;AAkNE,QAAA,yBAAyB,GAElC;IACH,YAAY,EAAE,gBAAgB;IAC9B,eAAe,EAAE,mBAAmB;IACpC,aAAa,EAAE,iBAAiB;IAChC,gBAAgB,EAAE,oBAAoB;IACtC,cAAc,EAAE,kBAAkB;IAClC,iBAAiB,EAAE,qBAAqB;IACxC,aAAa,EAAE,iBAAiB;CAChC,CAAC;AAUK,MAAM,mBAAmB,GAAG,CAAC,KAA4B,EAAsB,EAAE,CACvF,QAAA,kBAAkB,CAAC,MAAM,CACxB,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,QAAA,yBAAyB,CAAC,KAAK,CAAC,CAAC,KAAK,UAAU,CACxE,CAAC;AAHU,QAAA,mBAAmB,GAAnB,mBAAmB,CAG7B"}

package/dist/policy-check/policy-cleared.d.ts

@@ -1,5 +1,5 @@
 import { brand } from './policy-brand';
-import type { EnforcementPoint, PolicedWorkflow, PolicyDecision, PolicyVersionRef } from './policy-check';
+import type { EnforcementPoint, PolicedCredential, PolicedWorkflow, PolicyDecision, PolicyVersionRef } from './policy-check';
 export type PolicySubjectType = 'workflow' | 'credential';
 export type PolicySubject = {
     readonly type: PolicySubjectType;
@@ -7,6 +7,8 @@ export type PolicySubject = {
 };
 export declare function workflowContentSubject(workflow: Pick<PolicedWorkflow, 'nodes'>): PolicySubject;
 export declare function workflowSubject(workflow: Pick<PolicedWorkflow, 'id' | 'nodes'>): PolicySubject;
+export declare function credentialContentSubject(credential: Pick<PolicedCredential, 'type'>): PolicySubject;
+export declare function credentialSubject(credential: PolicedCredential): PolicySubject;
 export type PolicyCleared<Point extends EnforcementPoint> = {
     readonly [brand]: 'Use the policy enforcement service — a cleared action cannot be forged';
     readonly point: Point;

package/dist/policy-check/policy-cleared.js

@@ -2,6 +2,8 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.workflowContentSubject = workflowContentSubject;
 exports.workflowSubject = workflowSubject;
+exports.credentialContentSubject = credentialContentSubject;
+exports.credentialSubject = credentialSubject;
 exports.assertClearedFor = assertClearedFor;
 const n8n_workflow_1 = require("n8n-workflow");
 const node_crypto_1 = require("node:crypto");
@@ -15,6 +17,15 @@ function workflowSubject(workflow) {
         return { type: 'workflow', id: workflow.id };
     return workflowContentSubject(workflow);
 }
+function credentialContentSubject(credential) {
+    const hash = (0, node_crypto_1.createHash)('sha256').update(credential.type).digest('hex');
+    return { type: 'credential', id: hash };
+}
+function credentialSubject(credential) {
+    if (credential.id)
+        return { type: 'credential', id: credential.id };
+    return credentialContentSubject(credential);
+}
 function assertClearedFor(cleared, point, subject) {
     if (!cleared)
         throw new n8n_workflow_1.UnexpectedError(`No policy clearance for ${point}`);

package/dist/policy-check/policy-cleared.js.map

@@ -1 +1 @@
-{"version":3,"file":"policy-cleared.js","sourceRoot":"","sources":["../../src/policy-check/policy-cleared.ts"],"names":[],"mappings":";;;;;AAAA,+CAA+C;AAC/C,6CAAyC;AAEzC,iDAAuC;AA+BvC,gCAAuC,QAAwC;IAE9E,MAAM,IAAI,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEvF,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACvC,CAAC;AASD,yBAAgC,QAA+C;IAC9E,IAAI,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC;IAE9D,OAAO,sBAAsB,CAAC,QAAQ,CAAC,CAAC;AACzC,CAAC;AA+BD,0BACC,OAAoD,EACpD,KAAuB,EACvB,OAAsB;IAEtB,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,8BAAe,CAAC,2BAA2B,KAAK,EAAE,CAAC,CAAC;IAC5E,IAAI,OAAO,CAAC,oBAAK,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK;QAC1D,MAAM,IAAI,8BAAe,CAAC,8BAA8B,KAAK,EAAE,CAAC,CAAC;IAClE,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE;QAC7E,MAAM,IAAI,8BAAe,CACxB,oBAAoB,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,SAAS,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,EAAE,EAAE,CACnG,CAAC;AACJ,CAAC"}
+{"version":3,"file":"policy-cleared.js","sourceRoot":"","sources":["../../src/policy-check/policy-cleared.ts"],"names":[],"mappings":";;;;;;;AAAA,+CAA+C;AAC/C,6CAAyC;AAEzC,iDAAuC;AAgCvC,gCAAuC,QAAwC;IAE9E,MAAM,IAAI,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEvF,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACvC,CAAC;AASD,yBAAgC,QAA+C;IAC9E,IAAI,QAAQ,CAAC,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC;IAE9D,OAAO,sBAAsB,CAAC,QAAQ,CAAC,CAAC;AACzC,CAAC;AAQD,kCACC,UAA2C;IAE3C,MAAM,IAAI,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAExE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACzC,CAAC;AAGD,2BAAkC,UAA6B;IAC9D,IAAI,UAAU,CAAC,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC;IAEpE,OAAO,wBAAwB,CAAC,UAAU,CAAC,CAAC;AAC7C,CAAC;AA+BD,0BACC,OAAoD,EACpD,KAAuB,EACvB,OAAsB;IAEtB,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,8BAAe,CAAC,2BAA2B,KAAK,EAAE,CAAC,CAAC;IAC5E,IAAI,OAAO,CAAC,oBAAK,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK;QAC1D,MAAM,IAAI,8BAAe,CAAC,8BAA8B,KAAK,EAAE,CAAC,CAAC;IAClE,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE;QAC7E,MAAM,IAAI,8BAAe,CACxB,oBAAoB,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,SAAS,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,EAAE,EAAE,CACnG,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@n8n/decorators",
-  "version": "1.40.1",
+  "version": "1.41.1",
   "main": "dist/index.js",
   "module": "src/index.ts",
   "types": "dist/index.d.ts",
@@ -31,12 +31,12 @@
     "zod": "3.25.76"
   },
   "dependencies": {
-    "@n8n/api-types": "1.40.1",
+    "@n8n/api-types": "1.41.1",
     "@n8n/constants": "0.39.0",
     "@n8n/di": "0.17.0",
-    "@n8n/permissions": "0.77.0",
+    "@n8n/permissions": "0.78.0",
     "lodash": "4.18.1",
-    "n8n-workflow": "2.40.1"
+    "n8n-workflow": "2.41.0"
   },
   "license": "SEE LICENSE IN LICENSE.md",
   "homepage": "https://n8n.io",