@n8n/expression-runtime 0.2.0 → 0.4.0

package/ARCHITECTURE.md

@@ -306,7 +306,7 @@ packages/@n8n/expression-runtime/
 
 **Future-Proofing**: Frontend will use Web Workers. Backend uses isolated-vm. Abstract bridge allows adding new environments without changing other layers.
 
-**Testing**: NodeVmBridge allows fast testing without native isolated-vm dependency.
+**Testing**: Integration tests use `IsolatedVmBridge` directly (see `src/__tests__/integration.test.ts`).
 
 ## Known Limitations
 
@@ -361,16 +361,15 @@ The runtime has **no access** to:
 - ❌ Cookies
 
 The runtime **can only**:
-- ✅ Call `getDataSync()` to fetch workflow data
+- ✅ Call back to host via `ivm.Reference` callbacks to fetch workflow data
 - ✅ Access lodash and Luxon libraries
 - ✅ Execute pure JavaScript code
 
 ## Testing Strategy
 
-**Runtime Tests** (vitest):
-- Use NodeVmBridge for fast, isolated tests
-- Test lazy loading, helpers, error handling
-- No native dependencies required
+**Integration Tests** (vitest):
+- Use `IsolatedVmBridge` with real `isolated-vm`
+- Test lazy loading, helpers, error handling, security wrappers
 
 **Bridge Tests** (vitest):
 - Test each bridge implementation

package/LICENSE_EE.md

@@ -0,0 +1,27 @@
+# The n8n Enterprise License (the “Enterprise License”)
+
+Copyright (c) 2022-present n8n GmbH.
+
+With regard to the n8n Software:
+
+This software and associated documentation files (the "Software") may only be used in production, if
+you (and any entity that you represent) hold a valid n8n Enterprise license corresponding to your
+usage. Subject to the foregoing sentence, you are free to modify this Software and publish patches
+to the Software. You agree that n8n and/or its licensors (as applicable) retain all right, title and
+interest in and to all such modifications and/or patches, and all such modifications and/or patches
+may only be used, copied, modified, displayed, distributed, or otherwise exploited with a valid n8n
+Enterprise license for the corresponding usage. Notwithstanding the foregoing, you may copy and
+modify the Software for development and testing purposes, without requiring a subscription. You
+agree that n8n and/or its licensors (as applicable) retain all right, title and interest in and to
+all such modifications. You are not granted any other rights beyond what is expressly stated herein.
+Subject to the foregoing, it is forbidden to copy, merge, publish, distribute, sublicense, and/or
+sell the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT
+NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES
+OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+For all third party components incorporated into the n8n Software, those components are licensed
+under the original license provided by the owner of the applicable component.

package/README.md

@@ -7,14 +7,14 @@ Secure, isolated expression evaluation runtime for n8n workflows.
 **In progress — landing as a series of incremental PRs.**
 
 Implemented so far:
-- ✅ TypeScript interfaces and architecture design
-- ✅ Core architecture documentation
+- ✅ TypeScript interfaces and architecture design (PR 1)
+- ✅ Core architecture documentation (PR 1)
+- ✅ Runtime bundle: extension functions, deep lazy proxy system (PR 2)
+- ✅ `IsolatedVmBridge`: V8 isolate management via `isolated-vm` (PR 3)
+- ✅ `ExpressionEvaluator`: tournament integration, expression code caching (PR 4)
+- ✅ Integration tests (PR 4)
 
 Coming in later PRs:
-- 🚧 Runtime bundle: extension functions, deep lazy proxy system (PR 2)
-- 🚧 `IsolatedVmBridge`: V8 isolate management via `isolated-vm` (PR 3)
-- 🚧 `ExpressionEvaluator`: tournament integration, expression code caching (PR 4)
-- 🚧 Integration tests (PR 4)
 - 🚧 Workflow integration behind `N8N_EXPRESSION_ENGINE=vm` flag (PR 5)
 - 🚧 Web Worker support (Phase 2+)
 - 🚧 Performance optimizations (Phase 3)
@@ -165,7 +165,7 @@ interface RuntimeBridge {
 
 ### Bridge Implementations
 
-- **IsolatedVmBridge**: 🚧 For Node.js backend (isolated-vm with V8 isolates) - coming in PR 3
+- **IsolatedVmBridge**: ✅ For Node.js backend (isolated-vm with V8 isolates)
   - Memory isolation with hard 128MB limit
   - Timeout enforcement (5s default)
   - Deep lazy proxy system for workflow data
@@ -181,13 +181,13 @@ interface RuntimeBridge {
 interface EvaluatorConfig {
   bridge: RuntimeBridge;                   // required
   observability?: ObservabilityProvider;   // optional - interfaces defined, providers not yet implemented
-  hooks?: TournamentHooks;                 // optional - AST security hooks for tournament (PR 4)
+  hooks?: TournamentHooks;                 // optional - AST security hooks for tournament
 }
 
 interface BridgeConfig {
-  memoryLimit?: number;        // Default: 128 MB (PR 3)
-  timeout?: number;            // Default: 5000 ms (PR 3)
-  debug?: boolean;             // Default: false (PR 3)
+  memoryLimit?: number;        // Default: 128 MB
+  timeout?: number;            // Default: 5000 ms
+  debug?: boolean;             // Default: false
 }
 ```