@n8n/eslint-plugin-community-nodes 0.37.0 → 1.0.0

package/dist/rules/no-deprecated-workflow-functions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"no-deprecated-workflow-functions.d.ts","sourceRoot":"","sources":["../../src/rules/no-deprecated-workflow-functions.ts"],"names":[],"mappings":"AAyBA,eAAO,MAAM,iCAAiC;;CA6I5C,CAAC"}
+{"version":3,"file":"no-deprecated-workflow-functions.d.ts","sourceRoot":"","sources":["../../src/rules/no-deprecated-workflow-functions.ts"],"names":[],"mappings":"AA8BA,eAAO,MAAM,iCAAiC;;CA0J5C,CAAC"}

package/dist/rules/no-deprecated-workflow-functions.js

@@ -1,5 +1,5 @@
 import { AST_NODE_TYPES } from '@typescript-eslint/utils';
-import { createRule, isThisHelpersAccess } from '../utils/index.js';
+import { createRule, isHelpersAccess, isThisHelpersAccess, EXECUTION_CONTEXT_TYPES, } from '../utils/index.js';
 const DEPRECATED_FUNCTIONS = {
     request: 'httpRequest',
     requestWithAuthentication: 'httpRequestWithAuthentication',
@@ -38,21 +38,32 @@ export const NoDeprecatedWorkflowFunctionsRule = createRule({
     defaultOptions: [],
     create(context) {
         const n8nWorkflowTypes = new Set();
-        return {
-            ImportDeclaration(node) {
-                if (node.source.value === 'n8n-workflow') {
-                    node.specifiers.forEach((specifier) => {
-                        if (specifier.type === AST_NODE_TYPES.ImportSpecifier &&
-                            specifier.imported.type === AST_NODE_TYPES.Identifier) {
-                            n8nWorkflowTypes.add(specifier.local.name);
-                        }
-                    });
+        let importsExecutionContext = false;
+        // Collect n8n-workflow imports up front. ESLint visits nodes in source order, so a
+        // `helpers` access above its import statement would otherwise be checked before the
+        // import is seen.
+        for (const statement of context.sourceCode.ast.body) {
+            if (statement.type !== AST_NODE_TYPES.ImportDeclaration ||
+                statement.source.value !== 'n8n-workflow') {
+                continue;
+            }
+            for (const specifier of statement.specifiers) {
+                if (specifier.type === AST_NODE_TYPES.ImportSpecifier &&
+                    specifier.imported.type === AST_NODE_TYPES.Identifier) {
+                    n8nWorkflowTypes.add(specifier.local.name);
+                    if (EXECUTION_CONTEXT_TYPES.has(specifier.imported.name)) {
+                        importsExecutionContext = true;
+                    }
                 }
-            },
+            }
+        }
+        return {
             MemberExpression(node) {
                 if (node.property.type === AST_NODE_TYPES.Identifier &&
                     isDeprecatedFunctionName(node.property.name)) {
-                    if (!isThisHelpersAccess(node)) {
+                    // `this.helpers` is unambiguous on its own; any other receiver only counts in a file
+                    // that imports an execution context type, which is what makes its `helpers` n8n's.
+                    if (!isThisHelpersAccess(node) && !(importsExecutionContext && isHelpersAccess(node))) {
                         return;
                     }
                     const functionName = node.property.name;

package/dist/utils/ast-utils.d.ts

@@ -45,6 +45,14 @@ export declare function extractCredentialNameFromArray(element: TSESTree.ArrayEx
 } | null;
 /** Matches the `this.helpers` MemberExpression (the object part of `this.helpers.foo`). */
 export declare function isThisHelpersAccess(node: TSESTree.MemberExpression): boolean;
+/** Execution context interfaces from `n8n-workflow` that expose a `helpers` object. */
+export declare const EXECUTION_CONTEXT_TYPES: Set<string>;
+/**
+ * Matches `<receiver>.helpers.<method>` for any receiver, and a bare `helpers.<method>` left by
+ * destructuring. Deliberately does not identify the receiver: the rule runs without type
+ * information, so callers gate this on the file importing an execution context type instead.
+ */
+export declare function isHelpersAccess(node: TSESTree.MemberExpression): boolean;
 /** Matches a call expression of the form `this.methodName(...)`. */
 export declare function isThisMethodCall(node: TSESTree.CallExpression, method: string): boolean;
 /** Matches a call expression of the form `this.helpers.methodName(...)`. */

package/dist/utils/ast-utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ast-utils.d.ts","sourceRoot":"","sources":["../../src/utils/ast-utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAezD,wBAAgB,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,gBAAgB,GAAG,OAAO,CAUxE;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,gBAAgB,GAAG,OAAO,CAE9E;AAED,sGAAsG;AACtG,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,gBAAgB,GAAG,OAAO,CAE3E;AAWD;;;;GAIG;AACH,wBAAgB,aAAa,CAC5B,IAAI,EAAE,QAAQ,CAAC,gBAAgB,EAC/B,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,GACzC,OAAO,CAET;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CACjC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC,kBAAkB,GAAG,QAAQ,CAAC,gBAAgB,GACnF,MAAM,GAAG,IAAI,CAkBf;AAED,wBAAgB,iBAAiB,CAChC,IAAI,EAAE,QAAQ,CAAC,gBAAgB,EAC/B,YAAY,EAAE,MAAM,GAClB,QAAQ,CAAC,kBAAkB,GAAG,IAAI,CAOpC;AAoDD;;;;GAIG;AACH,wBAAgB,yBAAyB,CACxC,IAAI,EAAE,QAAQ,CAAC,gBAAgB,GAC7B,QAAQ,CAAC,gBAAgB,GAAG,IAAI,CAQlC;AAED,wBAAgB,kBAAkB,CACjC,GAAG,EAAE,QAAQ,CAAC,gBAAgB,EAC9B,YAAY,EAAE,MAAM,GAClB,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAK1B;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,GAAG,IAAI,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,IAAI,CAK5F;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAG/E;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAevE;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,GAAG,IAAI,GAAG,OAAO,GAAG,IAAI,CAGjF;AAED,wBAAgB,gBAAgB,CAC/B,GAAG,EAAE,QAAQ,CAAC,gBAAgB,EAC9B,YAAY,EAAE,MAAM,GAClB,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAQ1B;AAED,wBAAgB,wBAAwB,CACvC,GAAG,EAAE,QAAQ,CAAC,gBAAgB,EAC9B,YAAY,EAAE,MAAM,GAClB,QAAQ,CAAC,eAAe,GAAG,IAAI,CAMjC;AAED,wBAAgB,oBAAoB,CACnC,IAAI,EAAE,QAAQ,CAAC,kBAAkB,EACjC,WAAW,EAAE,MAAM,GACjB,OAAO,CAST;AAED,wBAAgB,uBAAuB,CACtC,IAAI,EAAE,QAAQ,CAAC,gBAAgB,GAC7B,QAAQ,CAAC,gBAAgB,GAAG,IAAI,CASlC;AAED,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAEvE;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,QAAQ,CAAC,cAAc,GAAG,OAAO,CAM1E;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,QAAQ,CAAC,cAAc,GAAG,OAAO,CAO1E;AAED,wBAAgB,8BAA8B,CAC7C,OAAO,EAAE,QAAQ,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,GACnD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAA;CAAE,GAAG,IAAI,CA6BjE;AAED,wBAAgB,8BAA8B,CAC7C,OAAO,EAAE,QAAQ,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,GACnD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAA;CAAE,GAAG,IAAI,CAG9C;AAED,2FAA2F;AAC3F,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,QAAQ,CAAC,gBAAgB,GAAG,OAAO,CAO5E;AAED,oEAAoE;AACpE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAOvF;AAED,4EAA4E;AAC5E,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,QAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAO9F;AAED,wBAAgB,kBAAkB,CACjC,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,EACvB,WAAW,GAAE,MAAU,EACvB,UAAU,GAAE,MAAU,GACpB,MAAM,EAAE,CAeV"}
+{"version":3,"file":"ast-utils.d.ts","sourceRoot":"","sources":["../../src/utils/ast-utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAezD,wBAAgB,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,gBAAgB,GAAG,OAAO,CAUxE;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,gBAAgB,GAAG,OAAO,CAE9E;AAED,sGAAsG;AACtG,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,QAAQ,CAAC,gBAAgB,GAAG,OAAO,CAE3E;AAWD;;;;GAIG;AACH,wBAAgB,aAAa,CAC5B,IAAI,EAAE,QAAQ,CAAC,gBAAgB,EAC/B,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,GACzC,OAAO,CAET;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CACjC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC,kBAAkB,GAAG,QAAQ,CAAC,gBAAgB,GACnF,MAAM,GAAG,IAAI,CAkBf;AAED,wBAAgB,iBAAiB,CAChC,IAAI,EAAE,QAAQ,CAAC,gBAAgB,EAC/B,YAAY,EAAE,MAAM,GAClB,QAAQ,CAAC,kBAAkB,GAAG,IAAI,CAOpC;AAoDD;;;;GAIG;AACH,wBAAgB,yBAAyB,CACxC,IAAI,EAAE,QAAQ,CAAC,gBAAgB,GAC7B,QAAQ,CAAC,gBAAgB,GAAG,IAAI,CAQlC;AAED,wBAAgB,kBAAkB,CACjC,GAAG,EAAE,QAAQ,CAAC,gBAAgB,EAC9B,YAAY,EAAE,MAAM,GAClB,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAK1B;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,GAAG,IAAI,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,IAAI,CAK5F;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAG/E;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAevE;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,GAAG,IAAI,GAAG,OAAO,GAAG,IAAI,CAGjF;AAED,wBAAgB,gBAAgB,CAC/B,GAAG,EAAE,QAAQ,CAAC,gBAAgB,EAC9B,YAAY,EAAE,MAAM,GAClB,QAAQ,CAAC,QAAQ,GAAG,IAAI,CAQ1B;AAED,wBAAgB,wBAAwB,CACvC,GAAG,EAAE,QAAQ,CAAC,gBAAgB,EAC9B,YAAY,EAAE,MAAM,GAClB,QAAQ,CAAC,eAAe,GAAG,IAAI,CAMjC;AAED,wBAAgB,oBAAoB,CACnC,IAAI,EAAE,QAAQ,CAAC,kBAAkB,EACjC,WAAW,EAAE,MAAM,GACjB,OAAO,CAST;AAED,wBAAgB,uBAAuB,CACtC,IAAI,EAAE,QAAQ,CAAC,gBAAgB,GAC7B,QAAQ,CAAC,gBAAgB,GAAG,IAAI,CASlC;AAED,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAEvE;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,QAAQ,CAAC,cAAc,GAAG,OAAO,CAM1E;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,QAAQ,CAAC,cAAc,GAAG,OAAO,CAO1E;AAED,wBAAgB,8BAA8B,CAC7C,OAAO,EAAE,QAAQ,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,GACnD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAA;CAAE,GAAG,IAAI,CA6BjE;AAED,wBAAgB,8BAA8B,CAC7C,OAAO,EAAE,QAAQ,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,GACnD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAA;CAAE,GAAG,IAAI,CAG9C;AAED,2FAA2F;AAC3F,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,QAAQ,CAAC,gBAAgB,GAAG,OAAO,CAO5E;AAED,uFAAuF;AACvF,eAAO,MAAM,uBAAuB,aAYlC,CAAC;AAEH;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,gBAAgB,GAAG,OAAO,CAUxE;AAED,oEAAoE;AACpE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAOvF;AAED,4EAA4E;AAC5E,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,QAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAO9F;AAED,wBAAgB,kBAAkB,CACjC,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,EACvB,WAAW,GAAE,MAAU,EACvB,UAAU,GAAE,MAAU,GACpB,MAAM,EAAE,CAeV"}

package/dist/utils/ast-utils.js

@@ -219,6 +219,33 @@ export function isThisHelpersAccess(node) {
         node.object.property?.type === AST_NODE_TYPES.Identifier &&
         node.object.property.name === 'helpers');
 }
+/** Execution context interfaces from `n8n-workflow` that expose a `helpers` object. */
+export const EXECUTION_CONTEXT_TYPES = new Set([
+    'IAllExecuteFunctions',
+    'ICredentialTestFunctions',
+    'IExecuteFunctions',
+    'IExecutePaginationFunctions',
+    'IExecuteSingleFunctions',
+    'IHookFunctions',
+    'ILoadOptionsFunctions',
+    'IPollFunctions',
+    'ISupplyDataFunctions',
+    'ITriggerFunctions',
+    'IWebhookFunctions',
+]);
+/**
+ * Matches `<receiver>.helpers.<method>` for any receiver, and a bare `helpers.<method>` left by
+ * destructuring. Deliberately does not identify the receiver: the rule runs without type
+ * information, so callers gate this on the file importing an execution context type instead.
+ */
+export function isHelpersAccess(node) {
+    if (node.object.type === AST_NODE_TYPES.Identifier) {
+        return node.object.name === 'helpers';
+    }
+    return (node.object.type === AST_NODE_TYPES.MemberExpression &&
+        node.object.property.type === AST_NODE_TYPES.Identifier &&
+        node.object.property.name === 'helpers');
+}
 /** Matches a call expression of the form `this.methodName(...)`. */
 export function isThisMethodCall(node, method) {
     return (node.callee.type === AST_NODE_TYPES.MemberExpression &&

package/dist/utils/credential-fields.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credential-fields.d.ts","sourceRoot":"","sources":["../../src/utils/credential-fields.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAkBpD;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAC9B,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;CAAO,GACvD,OAAO,CAST;AAED,mFAAmF;AACnF,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,QAAQ,CAAC,gBAAgB,GAAG,OAAO,CAWjF"}
+{"version":3,"file":"credential-fields.d.ts","sourceRoot":"","sources":["../../src/utils/credential-fields.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AAmBpD;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAC9B,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;CAAO,GACvD,OAAO,CAST;AAED,mFAAmF;AACnF,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,QAAQ,CAAC,gBAAgB,GAAG,OAAO,CAWjF"}

package/dist/utils/credential-fields.js

@@ -7,6 +7,7 @@ const SENSITIVE_PATTERNS = [
     'cert',
     'passphrase',
     'apikey',
+    'accesskey',
     'secretkey',
     'privatekey',
     'authkey',

package/docs/rules/no-deprecated-workflow-functions.md

@@ -10,6 +10,26 @@
 
 Prevents usage of deprecated functions from n8n-workflow package and suggests modern alternatives.
 
+A node reaches these helpers through its execution context, which it can hold in
+several ways — all of them are reported:
+
+```typescript
+this.helpers.request(options); // execute() bound to the context
+context.helpers.requestOAuth2.call(context, 'oAuth2Api', options); // context passed into a transport helper
+this.executeFunctions.helpers.request(options); // context stored on a class field
+const { helpers } = this;
+helpers.request(options); // destructured off the context, reported on the call
+```
+
+> [!NOTE]
+> The rule runs without type information, so it cannot tell which object a
+> `helpers` property belongs to. Apart from `this.helpers`, it therefore only
+> reports in files that import an execution context interface
+> (`IExecuteFunctions`, `ILoadOptionsFunctions`, …) from `n8n-workflow`. The
+> check is file-scoped rather than binding-scoped: in such a file, an unrelated
+> `someClient.helpers.request()` would also be reported. Silence the rare false
+> positive with `// eslint-disable-next-line`.
+
 ## Examples
 
 ### ❌ Incorrect

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@n8n/eslint-plugin-community-nodes",
   "type": "module",
-  "version": "0.37.0",
+  "version": "1.0.0",
   "main": "./dist/plugin.js",
   "types": "./dist/plugin.d.ts",
   "exports": {
@@ -11,23 +11,23 @@
     }
   },
   "dependencies": {
-    "@n8n/utils": "1.52.0",
+    "@n8n/utils": "2.0.0",
     "@typescript-eslint/typescript-estree": "8.70.0",
     "@typescript-eslint/utils": "8.70.0",
     "fastest-levenshtein": "1.0.16"
   },
   "devDependencies": {
-    "@n8n/typescript-config": "1.12.0",
-    "@n8n/vitest-config": "1.24.0",
+    "@n8n/typescript-config": "2.0.0",
+    "@n8n/vitest-config": "2.0.0",
     "@types/node": "24.10.1",
-    "n8n-workflow": "2.45.0",
+    "n8n-workflow": "3.0.0",
     "@typescript-eslint/rule-tester": "8.70.0",
     "eslint-doc-generator": "^2.2.2",
     "eslint-plugin-eslint-plugin": "^7.0.0",
     "rimraf": "6.0.1",
     "@typescript/native": "npm:typescript@7.0.2",
     "typescript": "npm:@typescript/typescript6@6.0.2",
-    "vite": "^8.0.2",
+    "vite": "^8.1.6",
     "vitest": "5.0.1"
   },
   "peerDependencies": {

package/src/rules/credential-password-field.test.ts

@@ -166,6 +166,12 @@ ruleTester.run('credential-password-field', CredentialPasswordFieldRule, {
 			errors: [{ messageId: 'missingPasswordOption', data: { fieldName: 'apiKey' } }],
 			output: createCredentialCode([createProperty('API Key', 'apiKey', { password: true })]),
 		},
+		{
+			name: 'access key field missing typeOptions.password = true',
+			code: createCredentialCode([createProperty('Access Key', 'accessKey')]),
+			errors: [{ messageId: 'missingPasswordOption', data: { fieldName: 'accessKey' } }],
+			output: createCredentialCode([createProperty('Access Key', 'accessKey', { password: true })]),
+		},
 		{
 			name: 'secret field missing typeOptions.password = true',
 			code: createCredentialCode([createProperty('Client Secret', 'clientSecret')]),

package/src/rules/no-deprecated-workflow-functions.test.ts

@@ -47,6 +47,17 @@ import { IRequestOptions } from 'some-other-package';
 
 function test(options: IRequestOptions) {
 	return options.url;
+}`,
+		},
+		{
+			name: 'non-this helpers in a file that does not handle execution contexts',
+			code: `
+import { SomeApiClient } from 'some-other-package';
+
+function makeRequest(client: SomeApiClient) {
+	const { helpers } = client;
+	helpers.request('https://example.com');
+	return client.helpers.request('https://example.com');
 }`,
 		},
 	],
@@ -183,5 +194,216 @@ return this.helpers.prepareOutputData([{ json: response }]);`,
 				},
 			],
 		},
+		{
+			name: 'execution context passed in as a parameter',
+			code: `
+import type { IExecuteFunctions } from 'n8n-workflow';
+
+export async function apiRequest(context: IExecuteFunctions, options) {
+	return await context.helpers.requestOAuth2.call(context, 'exampleOAuth2Api', options);
+}`,
+			errors: [
+				{
+					messageId: 'deprecatedRequestFunction',
+					data: { functionName: 'requestOAuth2', replacement: 'httpRequestWithAuthentication' },
+					suggestions: [
+						{
+							messageId: 'suggestReplaceFunction',
+							data: { functionName: 'requestOAuth2', replacement: 'httpRequestWithAuthentication' },
+							output: `
+import type { IExecuteFunctions } from 'n8n-workflow';
+
+export async function apiRequest(context: IExecuteFunctions, options) {
+	return await context.helpers.httpRequestWithAuthentication.call(context, 'exampleOAuth2Api', options);
+}`,
+						},
+					],
+				},
+			],
+		},
+		{
+			name: 'execution context union type parameter',
+			code: `
+import type { IExecuteFunctions, ILoadOptionsFunctions } from 'n8n-workflow';
+
+async function loadOptions(ctx: IExecuteFunctions | ILoadOptionsFunctions) {
+	return await ctx.helpers.request({ url: 'https://example.com' });
+}`,
+			errors: [
+				{
+					messageId: 'deprecatedRequestFunction',
+					data: { functionName: 'request', replacement: 'httpRequest' },
+					suggestions: [
+						{
+							messageId: 'suggestReplaceFunction',
+							data: { functionName: 'request', replacement: 'httpRequest' },
+							output: `
+import type { IExecuteFunctions, ILoadOptionsFunctions } from 'n8n-workflow';
+
+async function loadOptions(ctx: IExecuteFunctions | ILoadOptionsFunctions) {
+	return await ctx.helpers.httpRequest({ url: 'https://example.com' });
+}`,
+						},
+					],
+				},
+			],
+		},
+		{
+			name: 'helpers destructured from this',
+			code: `
+import type { IExecuteFunctions } from 'n8n-workflow';
+
+async function run(this: IExecuteFunctions) {
+	const { helpers } = this;
+	return await helpers.requestWithAuthentication('exampleApi', options);
+}`,
+			errors: [
+				{
+					messageId: 'deprecatedRequestFunction',
+					data: {
+						functionName: 'requestWithAuthentication',
+						replacement: 'httpRequestWithAuthentication',
+					},
+					suggestions: [
+						{
+							messageId: 'suggestReplaceFunction',
+							data: {
+								functionName: 'requestWithAuthentication',
+								replacement: 'httpRequestWithAuthentication',
+							},
+							output: `
+import type { IExecuteFunctions } from 'n8n-workflow';
+
+async function run(this: IExecuteFunctions) {
+	const { helpers } = this;
+	return await helpers.httpRequestWithAuthentication('exampleApi', options);
+}`,
+						},
+					],
+				},
+			],
+		},
+		{
+			name: 'execution context held in a class field',
+			code: `
+import type { IExecuteFunctions } from 'n8n-workflow';
+
+class ExampleApi {
+	private executeFunctions: IExecuteFunctions;
+
+	async request(options) {
+		return await this.executeFunctions.helpers.requestWithAuthentication.call(
+			this.executeFunctions,
+			'exampleApi',
+			options,
+		);
+	}
+}`,
+			errors: [
+				{
+					messageId: 'deprecatedRequestFunction',
+					data: {
+						functionName: 'requestWithAuthentication',
+						replacement: 'httpRequestWithAuthentication',
+					},
+					suggestions: [
+						{
+							messageId: 'suggestReplaceFunction',
+							data: {
+								functionName: 'requestWithAuthentication',
+								replacement: 'httpRequestWithAuthentication',
+							},
+							output: `
+import type { IExecuteFunctions } from 'n8n-workflow';
+
+class ExampleApi {
+	private executeFunctions: IExecuteFunctions;
+
+	async request(options) {
+		return await this.executeFunctions.helpers.httpRequestWithAuthentication.call(
+			this.executeFunctions,
+			'exampleApi',
+			options,
+		);
+	}
+}`,
+						},
+					],
+				},
+			],
+		},
+		{
+			name: 'execution context declared as a constructor parameter property',
+			code: `
+import type { IExecuteFunctions } from 'n8n-workflow';
+
+class ExampleApi {
+	constructor(private readonly ctx: IExecuteFunctions) {}
+
+	async run() {
+		return await this.ctx.helpers.prepareOutputData([]);
+	}
+}`,
+			errors: [
+				{
+					messageId: 'deprecatedWithoutReplacement',
+					data: { functionName: 'prepareOutputData' },
+				},
+			],
+		},
+		{
+			name: 'execution context used above its import statement',
+			code: `
+async function apiRequest(context: IExecuteFunctions, options) {
+	return await context.helpers.request(options);
+}
+
+import type { IExecuteFunctions } from 'n8n-workflow';`,
+			errors: [
+				{
+					messageId: 'deprecatedRequestFunction',
+					data: { functionName: 'request', replacement: 'httpRequest' },
+					suggestions: [
+						{
+							messageId: 'suggestReplaceFunction',
+							data: { functionName: 'request', replacement: 'httpRequest' },
+							output: `
+async function apiRequest(context: IExecuteFunctions, options) {
+	return await context.helpers.httpRequest(options);
+}
+
+import type { IExecuteFunctions } from 'n8n-workflow';`,
+						},
+					],
+				},
+			],
+		},
+		{
+			name: 'credential test context passed in as a parameter',
+			code: `
+import type { ICredentialTestFunctions } from 'n8n-workflow';
+
+export async function testCredential(context: ICredentialTestFunctions, options) {
+	return await context.helpers.request(options);
+}`,
+			errors: [
+				{
+					messageId: 'deprecatedRequestFunction',
+					data: { functionName: 'request', replacement: 'httpRequest' },
+					suggestions: [
+						{
+							messageId: 'suggestReplaceFunction',
+							data: { functionName: 'request', replacement: 'httpRequest' },
+							output: `
+import type { ICredentialTestFunctions } from 'n8n-workflow';
+
+export async function testCredential(context: ICredentialTestFunctions, options) {
+	return await context.helpers.httpRequest(options);
+}`,
+						},
+					],
+				},
+			],
+		},
 	],
 });

package/src/rules/no-deprecated-workflow-functions.ts

@@ -1,6 +1,11 @@
 import { AST_NODE_TYPES } from '@typescript-eslint/utils';
 
-import { createRule, isThisHelpersAccess } from '../utils/index.js';
+import {
+	createRule,
+	isHelpersAccess,
+	isThisHelpersAccess,
+	EXECUTION_CONTEXT_TYPES,
+} from '../utils/index.js';
 
 const DEPRECATED_FUNCTIONS = {
 	request: 'httpRequest',
@@ -46,27 +51,40 @@ export const NoDeprecatedWorkflowFunctionsRule = createRule({
 	defaultOptions: [],
 	create(context) {
 		const n8nWorkflowTypes = new Set<string>();
-
-		return {
-			ImportDeclaration(node) {
-				if (node.source.value === 'n8n-workflow') {
-					node.specifiers.forEach((specifier) => {
-						if (
-							specifier.type === AST_NODE_TYPES.ImportSpecifier &&
-							specifier.imported.type === AST_NODE_TYPES.Identifier
-						) {
-							n8nWorkflowTypes.add(specifier.local.name);
-						}
-					});
+		let importsExecutionContext = false;
+
+		// Collect n8n-workflow imports up front. ESLint visits nodes in source order, so a
+		// `helpers` access above its import statement would otherwise be checked before the
+		// import is seen.
+		for (const statement of context.sourceCode.ast.body) {
+			if (
+				statement.type !== AST_NODE_TYPES.ImportDeclaration ||
+				statement.source.value !== 'n8n-workflow'
+			) {
+				continue;
+			}
+			for (const specifier of statement.specifiers) {
+				if (
+					specifier.type === AST_NODE_TYPES.ImportSpecifier &&
+					specifier.imported.type === AST_NODE_TYPES.Identifier
+				) {
+					n8nWorkflowTypes.add(specifier.local.name);
+					if (EXECUTION_CONTEXT_TYPES.has(specifier.imported.name)) {
+						importsExecutionContext = true;
+					}
 				}
-			},
+			}
+		}
 
+		return {
 			MemberExpression(node) {
 				if (
 					node.property.type === AST_NODE_TYPES.Identifier &&
 					isDeprecatedFunctionName(node.property.name)
 				) {
-					if (!isThisHelpersAccess(node)) {
+					// `this.helpers` is unambiguous on its own; any other receiver only counts in a file
+					// that imports an execution context type, which is what makes its `helpers` n8n's.
+					if (!isThisHelpersAccess(node) && !(importsExecutionContext && isHelpersAccess(node))) {
 						return;
 					}
 

package/src/utils/ast-utils.ts

@@ -327,6 +327,38 @@ export function isThisHelpersAccess(node: TSESTree.MemberExpression): boolean {
 	);
 }
 
+/** Execution context interfaces from `n8n-workflow` that expose a `helpers` object. */
+export const EXECUTION_CONTEXT_TYPES = new Set([
+	'IAllExecuteFunctions',
+	'ICredentialTestFunctions',
+	'IExecuteFunctions',
+	'IExecutePaginationFunctions',
+	'IExecuteSingleFunctions',
+	'IHookFunctions',
+	'ILoadOptionsFunctions',
+	'IPollFunctions',
+	'ISupplyDataFunctions',
+	'ITriggerFunctions',
+	'IWebhookFunctions',
+]);
+
+/**
+ * Matches `<receiver>.helpers.<method>` for any receiver, and a bare `helpers.<method>` left by
+ * destructuring. Deliberately does not identify the receiver: the rule runs without type
+ * information, so callers gate this on the file importing an execution context type instead.
+ */
+export function isHelpersAccess(node: TSESTree.MemberExpression): boolean {
+	if (node.object.type === AST_NODE_TYPES.Identifier) {
+		return node.object.name === 'helpers';
+	}
+
+	return (
+		node.object.type === AST_NODE_TYPES.MemberExpression &&
+		node.object.property.type === AST_NODE_TYPES.Identifier &&
+		node.object.property.name === 'helpers'
+	);
+}
+
 /** Matches a call expression of the form `this.methodName(...)`. */
 export function isThisMethodCall(node: TSESTree.CallExpression, method: string): boolean {
 	return (

package/src/utils/credential-fields.ts

@@ -9,6 +9,7 @@ const SENSITIVE_PATTERNS = [
 	'cert',
 	'passphrase',
 	'apikey',
+	'accesskey',
 	'secretkey',
 	'privatekey',
 	'authkey',