@n8n/eslint-plugin-community-nodes 0.20.0 → 0.22.0

package/docs/rules/no-dangerous-functions.md

@@ -0,0 +1,41 @@
+# Disallow `eval`, the `Function` constructor, and `child_process` process-spawning functions (`exec`, `spawn`, etc.) in community nodes (`@n8n/community-nodes/no-dangerous-functions`)
+
+💼 This rule is enabled in the following configs: ✅ `recommended`, ☑️ `recommendedWithoutN8nCloudSupport`.
+
+<!-- end auto-generated rule header -->
+
+## Rule Details
+
+Community nodes run inside the n8n runtime, often on shared infrastructure. Functions that execute arbitrary code from strings or spawn operating-system processes are a primary vector for remote code execution and command injection, and have no legitimate use in a community node. This rule bans them outright:
+
+- **`eval(...)`** — executes arbitrary code from a string.
+- **`Function(...)` / `new Function(...)`** — the `Function` constructor is an `eval` equivalent that builds a callable from a string body.
+- **`child_process` process spawners** — `exec`, `execSync`, `execFile`, `execFileSync`, `spawn`, `spawnSync`, and `fork`.
+
+The `child_process` functions are detected only when they originate from the `child_process` / `node:child_process` module (via `import` or `require`), so unrelated methods such as `RegExp.prototype.exec` are not affected.
+
+This complements [`no-restricted-imports`](no-restricted-imports.md) (which blocks the `child_process` module entirely on n8n Cloud) and [`no-restricted-globals`](no-restricted-globals.md), providing a clear, specific error and defense-in-depth that also applies when the import restrictions are relaxed.
+
+## Examples
+
+### ❌ Incorrect
+
+```typescript
+import { exec } from 'child_process';
+
+eval(userProvidedCode);
+
+const compiled = new Function('return ' + expression);
+
+exec(`rm -rf ${userInput}`);
+```
+
+### ✅ Correct
+
+```typescript
+// Parse data instead of evaluating it.
+const value = JSON.parse(rawJson);
+
+// Use n8n helpers and well-scoped library APIs instead of spawning processes.
+const response = await this.helpers.httpRequest({ url });
+```

package/docs/rules/no-emoji-in-options.md

@@ -0,0 +1,60 @@
+# Disallow emoji characters in node option name and displayName values (`@n8n/community-nodes/no-emoji-in-options`)
+
+💼 This rule is enabled in the following configs: ✅ `recommended`, ☑️ `recommendedWithoutN8nCloudSupport`.
+
+<!-- end auto-generated rule header -->
+
+## Rule Details
+
+User-facing labels in a node — the node's `displayName`, each property's
+`displayName`, and the `name` of entries in `options` arrays — are rendered
+directly in the n8n editor. Emoji in these labels render inconsistently across
+platforms, break alphabetical sorting and search, and clash with the editor's
+visual language. This rule flags any emoji character (pictographs such as 🚀 or
+✅, and regional-indicator flag emoji such as 🇺🇸) found in a `name` or
+`displayName` string within a node's `description`.
+
+Accented and non-Latin characters (e.g. `Café`, `日本語`) are allowed — only
+emoji are reported.
+
+## Examples
+
+### Incorrect
+
+```typescript
+export class MyNode implements INodeType {
+  description: INodeTypeDescription = {
+    displayName: '🚀 My Node',
+    name: 'myNode',
+    properties: [
+      {
+        displayName: 'Operation',
+        name: 'operation',
+        type: 'options',
+        options: [{ name: '✅ Create', value: 'create' }],
+        default: 'create',
+      },
+    ],
+  };
+}
+```
+
+### Correct
+
+```typescript
+export class MyNode implements INodeType {
+  description: INodeTypeDescription = {
+    displayName: 'My Node',
+    name: 'myNode',
+    properties: [
+      {
+        displayName: 'Operation',
+        name: 'operation',
+        type: 'options',
+        options: [{ name: 'Create', value: 'create' }],
+        default: 'create',
+      },
+    ],
+  };
+}
+```

package/docs/rules/node-class-description-name-camelcase.md

@@ -0,0 +1,41 @@
+# Node class `description.name` must be camelCase (`@n8n/community-nodes/node-class-description-name-camelcase`)
+
+💼 This rule is enabled in the following configs: ✅ `recommended`, ☑️ `recommendedWithoutN8nCloudSupport`.
+
+🔧 This rule is automatically fixable by the [`--fix` CLI option](https://eslint.org/docs/latest/user-guide/command-line-interface#--fix).
+
+<!-- end auto-generated rule header -->
+
+## Rule Details
+
+The `name` field inside a node class `description` (those implementing `INodeType` or extending `Node` in `*.node.ts` files) is the internal identifier used to register and reference the node. n8n convention requires this identifier to be camelCase: it must start with a lowercase letter and contain only letters and digits, with no spaces, hyphens, underscores, or other separators.
+
+The value must match `^[a-z][a-zA-Z0-9]*$`.
+
+The rule is automatically fixable: separators are removed, each subsequent word is upper-cased, and the first character is lower-cased (e.g. `My Node` → `myNode`). Names that cannot be repaired into a valid identifier (for example, those starting with a digit) are reported without an autofix.
+
+## Examples
+
+### ❌ Incorrect
+
+```typescript
+export class MyNode implements INodeType {
+  description: INodeTypeDescription = {
+    displayName: 'My Node',
+    name: 'My Node',
+    // ...
+  };
+}
+```
+
+### ✅ Correct
+
+```typescript
+export class MyNode implements INodeType {
+  description: INodeTypeDescription = {
+    displayName: 'My Node',
+    name: 'myNode',
+    // ...
+  };
+}
+```

package/docs/rules/node-filename-against-convention.md

@@ -0,0 +1,50 @@
+# Node filename must match the node `description.name` (`@n8n/community-nodes/node-filename-against-convention`)
+
+💼 This rule is enabled in the following configs: ✅ `recommended`, ☑️ `recommendedWithoutN8nCloudSupport`.
+
+<!-- end auto-generated rule header -->
+
+## Rule Details
+
+Every `*.node.ts` file must be named after its node's `description.name`, with the
+first character upper-cased. The source of truth is `description.name` — **not**
+the class name. Keeping the filename in sync with the registered node name makes
+nodes predictable to locate and matches the convention n8n tooling expects.
+
+A trailing version suffix (`V2`, `V3`, …) is allowed, so versioned implementations
+such as `GithubV2.node.ts` are accepted for a node whose `description.name` is
+`github`.
+
+The comparison is case-sensitive: a node named `github` must live in
+`Github.node.ts`, not `github.node.ts` or `GitHub.node.ts`.
+
+This rule is not auto-fixable because ESLint cannot rename files. Rename the file
+to the reported name.
+
+## Examples
+
+### ❌ Incorrect
+
+```typescript
+// File: Gitlab.node.ts
+export class Github implements INodeType {
+  description: INodeTypeDescription = {
+    displayName: 'GitHub',
+    name: 'github', // expected file to be named "Github.node.ts"
+    // ...
+  };
+}
+```
+
+### ✅ Correct
+
+```typescript
+// File: Github.node.ts (or GithubV2.node.ts)
+export class Github implements INodeType {
+  description: INodeTypeDescription = {
+    displayName: 'GitHub',
+    name: 'github',
+    // ...
+  };
+}
+```

package/docs/rules/node-registration-complete.md

@@ -0,0 +1,46 @@
+# Ensure every `.node.ts` file in the `nodes/` directory is registered in the "n8n.nodes" array of package.json (`@n8n/community-nodes/node-registration-complete`)
+
+⚠️ This rule _warns_ in the following configs: ✅ `recommended`, ☑️ `recommendedWithoutN8nCloudSupport`.
+
+<!-- end auto-generated rule header -->
+
+## Rule Details
+
+n8n discovers the nodes in a community package from the `n8n.nodes` array in `package.json`. Any `.node.ts` file that exists in the package's `nodes/` directory but is missing from that array will be silently excluded from the published package — the node simply won't show up in n8n.
+
+This rule cross-references the `.node.ts` files found in the `nodes/` directory against the entries in `n8n.nodes` and flags every node file that is not registered, so missing registrations are caught at lint time rather than after publishing.
+
+## Examples
+
+Given a package with these files on disk:
+
+```
+nodes/Foo/Foo.node.ts
+nodes/Bar/Bar.node.ts
+```
+
+### ❌ Incorrect
+
+`Bar.node.ts` exists but is not registered:
+
+```json
+{
+  "name": "n8n-nodes-my-service",
+  "n8n": {
+    "nodes": ["dist/nodes/Foo/Foo.node.js"]
+  }
+}
+```
+
+### ✅ Correct
+
+Every node file is registered:
+
+```json
+{
+  "name": "n8n-nodes-my-service",
+  "n8n": {
+    "nodes": ["dist/nodes/Foo/Foo.node.js", "dist/nodes/Bar/Bar.node.js"]
+  }
+}
+```

package/docs/rules/require-version.md

@@ -0,0 +1,51 @@
+# Require a valid "version" field in community node package.json (`@n8n/community-nodes/require-version`)
+
+💼 This rule is enabled in the following configs: ✅ `recommended`, ☑️ `recommendedWithoutN8nCloudSupport`.
+
+<!-- end auto-generated rule header -->
+
+## Rule Details
+
+Every community node package must declare a `version` field in its `package.json`. npm refuses to publish a package without a valid [semantic version](https://semver.org/), and n8n relies on the version to track and update installed community packages.
+
+This rule reports a missing `version` key as well as a value that is not a valid semantic version string (for example `"1.0"`, `"v1.0.0"`, a range like `"^1.0.0"`, an empty string, or a non-string value).
+
+## Examples
+
+### ❌ Incorrect
+
+```json
+{
+  "name": "n8n-nodes-acme"
+}
+```
+
+```json
+{
+  "name": "n8n-nodes-acme",
+  "version": "1.0"
+}
+```
+
+```json
+{
+  "name": "n8n-nodes-acme",
+  "version": "v1.0.0"
+}
+```
+
+### ✅ Correct
+
+```json
+{
+  "name": "n8n-nodes-acme",
+  "version": "1.0.0"
+}
+```
+
+```json
+{
+  "name": "n8n-nodes-acme",
+  "version": "0.1.0-beta.1"
+}
+```

package/docs/rules/valid-author.md

@@ -0,0 +1,60 @@
+# Require a non-empty author name and email in package.json (`@n8n/community-nodes/valid-author`)
+
+💼 This rule is enabled in the following configs: ✅ `recommended`, ☑️ `recommendedWithoutN8nCloudSupport`.
+
+<!-- end auto-generated rule header -->
+
+## Rule Details
+
+A published community node package should identify its author. This rule
+requires the `package.json` to declare an `author` with at minimum a non-empty
+`name` and `email`, so users and n8n can reach the maintainer.
+
+Both npm `author` forms are supported:
+
+- the object form `{ "name": "...", "email": "..." }`
+- the shorthand string form `"Name <email> (url)"`
+
+Whitespace-only values count as empty. The literal `<...>` placeholder pattern
+left over from the node starter template is handled separately by the
+[`no-template-placeholders`](./no-template-placeholders.md) rule.
+
+## Examples
+
+### ❌ Incorrect
+
+```json
+{
+  "name": "n8n-nodes-my-service"
+}
+```
+
+```json
+{
+  "name": "n8n-nodes-my-service",
+  "author": { "name": "Jane Doe" }
+}
+```
+
+```json
+{
+  "name": "n8n-nodes-my-service",
+  "author": "Jane Doe"
+}
+```
+
+### ✅ Correct
+
+```json
+{
+  "name": "n8n-nodes-my-service",
+  "author": { "name": "Jane Doe", "email": "jane@example.com" }
+}
+```
+
+```json
+{
+  "name": "n8n-nodes-my-service",
+  "author": "Jane Doe <jane@example.com> (https://example.com)"
+}
+```

package/docs/rules/valid-peer-dependencies.md

@@ -1,4 +1,4 @@
-# Require community node package.json peerDependencies to contain only "n8n-workflow": "*" (and optionally "ai-node-sdk") (`@n8n/community-nodes/valid-peer-dependencies`)
+# Require community node package.json peerDependencies to contain only "n8n-workflow": "*" (and optionally "@n8n/ai-node-sdk") (`@n8n/community-nodes/valid-peer-dependencies`)
 
 💼 This rule is enabled in the following configs: ✅ `recommended`, ☑️ `recommendedWithoutN8nCloudSupport`.
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@n8n/eslint-plugin-community-nodes",
   "type": "module",
-  "version": "0.20.0",
+  "version": "0.22.0",
   "main": "./dist/plugin.js",
   "types": "./dist/plugin.d.ts",
   "exports": {
@@ -23,9 +23,9 @@
     "rimraf": "6.0.1",
     "typescript": "6.0.2",
     "vitest": "^4.1.1",
-    "@n8n/typescript-config": "1.5.0",
-    "@n8n/vitest-config": "1.14.0",
-    "n8n-workflow": "2.26.0"
+    "@n8n/typescript-config": "1.6.0",
+    "@n8n/vitest-config": "1.15.0",
+    "n8n-workflow": "2.28.0"
   },
   "peerDependencies": {
     "eslint": "9.29.0",

package/src/plugin.ts

@@ -26,16 +26,19 @@ const configs = {
 			'@n8n/community-nodes/credential-password-field': 'error',
 			'@n8n/community-nodes/n8n-object-validation': 'error',
 			'@n8n/community-nodes/no-deprecated-workflow-functions': 'error',
+			'@n8n/community-nodes/no-emoji-in-options': 'error',
 			'@n8n/community-nodes/node-usable-as-tool': 'error',
 			'@n8n/community-nodes/package-name-convention': 'error',
 			'@n8n/community-nodes/credential-test-required': 'error',
 			'@n8n/community-nodes/no-credential-reuse': 'error',
+			'@n8n/community-nodes/no-dangerous-functions': 'error',
 			'@n8n/community-nodes/no-forbidden-lifecycle-scripts': 'error',
 			'@n8n/community-nodes/no-http-request-with-manual-auth': 'error',
 			'@n8n/community-nodes/no-overrides-field': 'error',
 			'@n8n/community-nodes/no-runtime-dependencies': 'error',
 			'@n8n/community-nodes/no-template-placeholders': 'error',
 			'@n8n/community-nodes/icon-validation': 'error',
+			'@n8n/community-nodes/icon-prefer-themed-variants': 'warn',
 			'@n8n/community-nodes/options-sorted-alphabetically': 'warn',
 			'@n8n/community-nodes/resource-operation-pattern': 'warn',
 			'@n8n/community-nodes/credential-documentation-url': 'error',
@@ -43,14 +46,20 @@ const configs = {
 			'@n8n/community-nodes/cred-class-name-field-conventions': 'error',
 			'@n8n/community-nodes/cred-class-name-suffix': 'error',
 			'@n8n/community-nodes/cred-class-oauth2-naming': 'error',
+			'@n8n/community-nodes/cred-filename-against-convention': 'error',
 			'@n8n/community-nodes/node-connection-type-literal': 'error',
+			'@n8n/community-nodes/node-class-description-name-camelcase': 'error',
+			'@n8n/community-nodes/node-filename-against-convention': 'error',
 			'@n8n/community-nodes/missing-paired-item': 'error',
 			'@n8n/community-nodes/no-builder-hint-leakage': 'error',
 			'@n8n/community-nodes/node-operation-error-itemindex': 'error',
+			'@n8n/community-nodes/node-registration-complete': 'warn',
 			'@n8n/community-nodes/require-community-node-keyword': 'warn',
 			'@n8n/community-nodes/require-continue-on-fail': 'error',
 			'@n8n/community-nodes/require-node-api-error': 'error',
 			'@n8n/community-nodes/require-node-description-fields': 'error',
+			'@n8n/community-nodes/require-version': 'error',
+			'@n8n/community-nodes/valid-author': 'error',
 			'@n8n/community-nodes/valid-credential-references': 'error',
 			'@n8n/community-nodes/valid-description': 'error',
 			'@n8n/community-nodes/valid-peer-dependencies': 'error',
@@ -67,16 +76,19 @@ const configs = {
 			'@n8n/community-nodes/credential-password-field': 'error',
 			'@n8n/community-nodes/n8n-object-validation': 'error',
 			'@n8n/community-nodes/no-deprecated-workflow-functions': 'error',
+			'@n8n/community-nodes/no-emoji-in-options': 'error',
 			'@n8n/community-nodes/node-usable-as-tool': 'error',
 			'@n8n/community-nodes/package-name-convention': 'error',
 			'@n8n/community-nodes/credential-test-required': 'error',
 			'@n8n/community-nodes/no-credential-reuse': 'error',
+			'@n8n/community-nodes/no-dangerous-functions': 'error',
 			'@n8n/community-nodes/no-forbidden-lifecycle-scripts': 'error',
 			'@n8n/community-nodes/no-http-request-with-manual-auth': 'error',
 			'@n8n/community-nodes/no-overrides-field': 'error',
 			'@n8n/community-nodes/no-runtime-dependencies': 'error',
 			'@n8n/community-nodes/no-template-placeholders': 'error',
 			'@n8n/community-nodes/icon-validation': 'error',
+			'@n8n/community-nodes/icon-prefer-themed-variants': 'warn',
 			'@n8n/community-nodes/options-sorted-alphabetically': 'warn',
 			'@n8n/community-nodes/credential-documentation-url': 'error',
 			'@n8n/community-nodes/resource-operation-pattern': 'warn',
@@ -84,14 +96,20 @@ const configs = {
 			'@n8n/community-nodes/cred-class-name-field-conventions': 'error',
 			'@n8n/community-nodes/cred-class-name-suffix': 'error',
 			'@n8n/community-nodes/cred-class-oauth2-naming': 'error',
+			'@n8n/community-nodes/cred-filename-against-convention': 'error',
 			'@n8n/community-nodes/node-connection-type-literal': 'error',
+			'@n8n/community-nodes/node-class-description-name-camelcase': 'error',
+			'@n8n/community-nodes/node-filename-against-convention': 'error',
 			'@n8n/community-nodes/missing-paired-item': 'error',
 			'@n8n/community-nodes/no-builder-hint-leakage': 'error',
 			'@n8n/community-nodes/node-operation-error-itemindex': 'error',
+			'@n8n/community-nodes/node-registration-complete': 'warn',
 			'@n8n/community-nodes/require-community-node-keyword': 'warn',
 			'@n8n/community-nodes/require-continue-on-fail': 'error',
 			'@n8n/community-nodes/require-node-api-error': 'error',
 			'@n8n/community-nodes/require-node-description-fields': 'error',
+			'@n8n/community-nodes/require-version': 'error',
+			'@n8n/community-nodes/valid-author': 'error',
 			'@n8n/community-nodes/valid-credential-references': 'error',
 			'@n8n/community-nodes/valid-description': 'error',
 			'@n8n/community-nodes/valid-peer-dependencies': 'error',

package/src/rules/ai-node-package-json.test.ts

@@ -11,6 +11,11 @@ ruleTester.run('ai-node-package-json', AiNodePackageJsonRule, {
 			filename: 'package.json',
 			code: '{ "name": "n8n-nodes-example", "n8n": { "aiNodeSdkVersion": 1 }, "peerDependencies": { "n8n-workflow": "*", "ai-node-sdk": "*" } }',
 		},
+		{
+			name: 'both n8n.aiNodeSdkVersion and scoped @n8n/ai-node-sdk peer dependency present',
+			filename: 'package.json',
+			code: '{ "name": "n8n-nodes-example", "n8n": { "aiNodeSdkVersion": 1 }, "peerDependencies": { "n8n-workflow": "*", "@n8n/ai-node-sdk": "*" } }',
+		},
 		{
 			name: 'neither n8n.aiNodeSdkVersion nor ai-node-sdk present (non-AI package)',
 			filename: 'package.json',

package/src/rules/ai-node-package-json.ts

@@ -13,9 +13,9 @@ export const AiNodePackageJsonRule = createRule({
 		},
 		messages: {
 			missingPeerDep:
-				'Package declares "n8n.aiNodeSdkVersion" but is missing "ai-node-sdk" in peerDependencies. Add "ai-node-sdk": "*" to peerDependencies.',
+				'Package declares "n8n.aiNodeSdkVersion" but is missing "@n8n/ai-node-sdk" in peerDependencies. Add "@n8n/ai-node-sdk": "*" to peerDependencies.',
 			missingSdkVersion:
-				'Package has "ai-node-sdk" in peerDependencies but is missing "aiNodeSdkVersion" in the "n8n" section of package.json.',
+				'Package has "@n8n/ai-node-sdk" in peerDependencies but is missing "aiNodeSdkVersion" in the "n8n" section of package.json.',
 			invalidSdkVersion: '"n8n.aiNodeSdkVersion" must be a positive integer, got {{ value }}.',
 			wrongLocation:
 				'"aiNodeSdkVersion" must be inside the "n8n" section, not at the root level of package.json.',
@@ -49,7 +49,8 @@ export const AiNodePackageJsonRule = createRule({
 				const hasAiNodeSdkVersion = aiNodeSdkVersionProp !== null;
 				const hasAiNodeSdkPeerDep =
 					peerDependenciesProp?.value.type === AST_NODE_TYPES.ObjectExpression &&
-					findJsonProperty(peerDependenciesProp.value, 'ai-node-sdk') !== null;
+					(findJsonProperty(peerDependenciesProp.value, '@n8n/ai-node-sdk') !== null ||
+						findJsonProperty(peerDependenciesProp.value, 'ai-node-sdk') !== null);
 
 				// Catch aiNodeSdkVersion placed at root level instead of inside n8n
 				if (rootAiNodeSdkVersionProp) {

package/src/rules/cred-filename-against-convention.test.ts

@@ -0,0 +1,72 @@
+import { RuleTester } from '@typescript-eslint/rule-tester';
+
+import { CredFilenameAgainstConventionRule } from './cred-filename-against-convention.js';
+
+const ruleTester = new RuleTester();
+
+function createCredentialCode(className: string): string {
+	return `
+import type { ICredentialType, INodeProperties } from 'n8n-workflow';
+
+export class ${className} implements ICredentialType {
+	name = '${className.charAt(0).toLowerCase() + className.slice(1)}';
+	displayName = '${className}';
+	properties: INodeProperties[] = [];
+}`;
+}
+
+function createRegularClass(): string {
+	return `
+export class SomeHelper {
+	name = 'githubApi';
+}`;
+}
+
+ruleTester.run('cred-filename-against-convention', CredFilenameAgainstConventionRule, {
+	valid: [
+		{
+			name: 'filename matches credential class name',
+			filename: '/tmp/GithubApi.credentials.ts',
+			code: createCredentialCode('GithubApi'),
+		},
+		{
+			name: 'multi-word class name matches filename',
+			filename: '/tmp/GoogleSheetsOAuth2Api.credentials.ts',
+			code: createCredentialCode('GoogleSheetsOAuth2Api'),
+		},
+		{
+			name: 'class not implementing ICredentialType is ignored',
+			filename: '/tmp/Github.credentials.ts',
+			code: createRegularClass(),
+		},
+		{
+			name: 'non-.credentials.ts file is ignored',
+			filename: '/tmp/GithubApi.ts',
+			code: createCredentialCode('Mismatch'),
+		},
+	],
+	invalid: [
+		{
+			name: 'filename does not match class name',
+			filename: '/tmp/GithubApi.credentials.ts',
+			code: createCredentialCode('GitlabApi'),
+			errors: [
+				{
+					messageId: 'renameFile',
+					data: { className: 'GitlabApi', expected: 'GitlabApi.credentials.ts' },
+				},
+			],
+		},
+		{
+			name: 'filename has wrong casing',
+			filename: '/tmp/githubApi.credentials.ts',
+			code: createCredentialCode('GithubApi'),
+			errors: [
+				{
+					messageId: 'renameFile',
+					data: { className: 'GithubApi', expected: 'GithubApi.credentials.ts' },
+				},
+			],
+		},
+	],
+});

package/src/rules/cred-filename-against-convention.ts

@@ -0,0 +1,48 @@
+import * as path from 'node:path';
+
+import { isCredentialTypeClass, isFileType, createRule } from '../utils/index.js';
+
+export const CredFilenameAgainstConventionRule = createRule({
+	name: 'cred-filename-against-convention',
+	meta: {
+		type: 'problem',
+		docs: {
+			description: 'Credential filename must match the credential class name',
+		},
+		messages: {
+			renameFile:
+				'Credential filename must match the class name "{{className}}". Rename file to "{{expected}}".',
+		},
+		schema: [],
+	},
+	defaultOptions: [],
+	create(context) {
+		if (!isFileType(context.filename, '.credentials.ts')) {
+			return {};
+		}
+
+		return {
+			ClassDeclaration(node) {
+				if (!isCredentialTypeClass(node)) {
+					return;
+				}
+
+				const classNameNode = node.id;
+				if (!classNameNode) {
+					return;
+				}
+
+				const className = classNameNode.name;
+				const actualBaseName = path.basename(context.filename, '.credentials.ts');
+
+				if (actualBaseName !== className) {
+					context.report({
+						node: classNameNode,
+						messageId: 'renameFile',
+						data: { className, expected: `${className}.credentials.ts` },
+					});
+				}
+			},
+		};
+	},
+});