n8n-guard 0.1.0

package/dist/n8n/api.d.ts

@@ -0,0 +1,44 @@
+import type { GuardConfig } from "../config.js";
+export interface N8nWorkflow {
+    id: string;
+    name: string;
+    active: boolean;
+    updatedAt?: string;
+    createdAt?: string;
+    nodes?: unknown[];
+    connections?: Record<string, unknown>;
+    settings?: Record<string, unknown>;
+}
+export interface N8nExecution {
+    id: string | number;
+    workflowId?: string;
+    status?: string;
+    finished?: boolean;
+    mode?: string;
+    startedAt?: string | null;
+    stoppedAt?: string | null;
+}
+export declare class N8nApiError extends Error {
+    readonly status?: number | undefined;
+    constructor(message: string, status?: number | undefined);
+}
+/**
+ * Thin client for the n8n Public API. It deliberately covers only what the
+ * operational checks need; workflow authoring is what every other n8n MCP
+ * server already does well.
+ */
+export declare class N8nApi {
+    private readonly config;
+    constructor(config: GuardConfig);
+    private request;
+    /** Walks the cursor pagination until exhausted or `max` records are collected. */
+    private collect;
+    /** Reachability probe that works without an API key. */
+    health(): Promise<{
+        reachable: boolean;
+        detail: string;
+    }>;
+    listWorkflows(max?: number): Promise<N8nWorkflow[]>;
+    getWorkflow(id: string): Promise<N8nWorkflow>;
+    listExecutions(status: "running" | "success" | "error" | "waiting" | undefined, max?: number): Promise<N8nExecution[]>;
+}

package/dist/n8n/api.js

@@ -0,0 +1,77 @@
+export class N8nApiError extends Error {
+    status;
+    constructor(message, status) {
+        super(message);
+        this.status = status;
+        this.name = "N8nApiError";
+    }
+}
+/**
+ * Thin client for the n8n Public API. It deliberately covers only what the
+ * operational checks need; workflow authoring is what every other n8n MCP
+ * server already does well.
+ */
+export class N8nApi {
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    async request(path, params = {}) {
+        if (!this.config.n8nApiKey) {
+            throw new N8nApiError("N8N_API_KEY is not set, so the n8n Public API cannot be queried");
+        }
+        const url = new URL(`${this.config.n8nUrl}/api/v1${path}`);
+        for (const [key, value] of Object.entries(params)) {
+            if (value !== undefined)
+                url.searchParams.set(key, String(value));
+        }
+        let response;
+        try {
+            response = await fetch(url, {
+                headers: { "X-N8N-API-KEY": this.config.n8nApiKey, accept: "application/json" },
+                signal: AbortSignal.timeout(this.config.requestTimeoutMs),
+            });
+        }
+        catch (error) {
+            throw new N8nApiError(`cannot reach ${url.origin}: ${error.message}`);
+        }
+        if (!response.ok) {
+            const body = await response.text().catch(() => "");
+            throw new N8nApiError(`${url.pathname} returned ${response.status} ${response.statusText}${body ? `: ${body.slice(0, 200)}` : ""}`, response.status);
+        }
+        return (await response.json());
+    }
+    /** Walks the cursor pagination until exhausted or `max` records are collected. */
+    async collect(path, params, max) {
+        const out = [];
+        let cursor;
+        do {
+            const page = await this.request(path, { ...params, limit: 250, cursor });
+            out.push(...(page.data ?? []));
+            cursor = page.nextCursor ?? undefined;
+        } while (cursor && out.length < max);
+        return out.slice(0, max);
+    }
+    /** Reachability probe that works without an API key. */
+    async health() {
+        try {
+            const response = await fetch(`${this.config.n8nUrl}/healthz`, {
+                signal: AbortSignal.timeout(this.config.requestTimeoutMs),
+            });
+            return { reachable: response.ok, detail: `GET /healthz -> ${response.status}` };
+        }
+        catch (error) {
+            return { reachable: false, detail: error.message };
+        }
+    }
+    listWorkflows(max = 1000) {
+        return this.collect("/workflows", { excludePinnedData: true }, max);
+    }
+    getWorkflow(id) {
+        return this.request(`/workflows/${encodeURIComponent(id)}`);
+    }
+    listExecutions(status, max = 500) {
+        return this.collect("/executions", { status, includeData: false }, max);
+    }
+}
+//# sourceMappingURL=api.js.map

package/dist/n8n/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../src/n8n/api.ts"],"names":[],"mappings":"AAuBA,MAAM,OAAO,WAAY,SAAQ,KAAK;IAGzB;IAFX,YACE,OAAe,EACN,MAAe;QAExB,KAAK,CAAC,OAAO,CAAC,CAAC;QAFN,WAAM,GAAN,MAAM,CAAS;QAGxB,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;IAC5B,CAAC;CACF;AAOD;;;;GAIG;AACH,MAAM,OAAO,MAAM;IACY;IAA7B,YAA6B,MAAmB;QAAnB,WAAM,GAAN,MAAM,CAAa;IAAG,CAAC;IAE5C,KAAK,CAAC,OAAO,CAAI,IAAY,EAAE,SAAgE,EAAE;QACvG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,WAAW,CAAC,iEAAiE,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,UAAU,IAAI,EAAE,CAAC,CAAC;QAC3D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,IAAI,KAAK,KAAK,SAAS;gBAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC1B,OAAO,EAAE,EAAE,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE;gBAC/E,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;aAC1D,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,WAAW,CAAC,gBAAgB,GAAG,CAAC,MAAM,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QACnF,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACnD,MAAM,IAAI,WAAW,CACnB,GAAG,GAAG,CAAC,QAAQ,aAAa,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAC5G,QAAQ,CAAC,MAAM,CAChB,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;IACtC,CAAC;IAED,kFAAkF;IAC1E,KAAK,CAAC,OAAO,CAAI,IAAY,EAAE,MAA6D,EAAE,GAAW;QAC/G,MAAM,GAAG,GAAQ,EAAE,CAAC;QACpB,IAAI,MAA0B,CAAC;QAC/B,GAAG,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAU,IAAI,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;YAClF,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;YAC/B,MAAM,GAAG,IAAI,CAAC,UAAU,IAAI,SAAS,CAAC;QACxC,CAAC,QAAQ,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE;QACrC,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3B,CAAC;IAED,wDAAwD;IACxD,KAAK,CAAC,MAAM;QACV,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,UAAU,EAAE;gBAC5D,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;aAC1D,CAAC,CAAC;YACH,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,mBAAmB,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QAClF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAG,KAAe,CAAC,OAAO,EAAE,CAAC;QAChE,CAAC;IACH,CAAC;IAED,aAAa,CAAC,GAAG,GAAG,IAAI;QACtB,OAAO,IAAI,CAAC,OAAO,CAAc,YAAY,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;IACnF,CAAC;IAED,WAAW,CAAC,EAAU;QACpB,OAAO,IAAI,CAAC,OAAO,CAAc,cAAc,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,cAAc,CAAC,MAA+D,EAAE,GAAG,GAAG,GAAG;QACvF,OAAO,IAAI,CAAC,OAAO,CAAe,aAAa,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,CAAC;IACxF,CAAC;CACF"}

package/dist/n8n/datastore.d.ts

@@ -0,0 +1,29 @@
+import type { GuardConfig } from "../config.js";
+export type DatastoreKind = "sqlite" | "postgres";
+export interface TableStat {
+    table: string;
+    rows: number;
+    /** Bytes on disk. `null` when the engine cannot report it (SQLite without the dbstat module). */
+    bytes: number | null;
+}
+export interface DatastoreStats {
+    kind: DatastoreKind;
+    /** Total size of the n8n datastore in bytes. */
+    totalBytes: number;
+    /** Extra files counted into `totalBytes` (SQLite WAL/SHM), for transparency. */
+    components: {
+        name: string;
+        bytes: number;
+    }[];
+    tables: TableStat[];
+    executionCount: number;
+    oldestExecutionAt: string | null;
+    newestExecutionAt: string | null;
+    /** Execution rows grouped by age bucket, for retention decisions. */
+    executionsOlderThanDays: Record<string, number>;
+}
+export declare class DatastoreError extends Error {
+}
+export declare const RETENTION_BUCKETS: number[];
+export declare function resolveDatastoreKind(config: GuardConfig): DatastoreKind;
+export declare function readDatastoreStats(config: GuardConfig): Promise<DatastoreStats>;

package/dist/n8n/datastore.js

@@ -0,0 +1,169 @@
+import { stat } from "node:fs/promises";
+import path from "node:path";
+import { openSqlite } from "./sqlite.js";
+export class DatastoreError extends Error {
+}
+/** Tables worth measuring. Missing ones are skipped, n8n schemas differ across versions. */
+const INTERESTING_TABLES = [
+    "execution_entity",
+    "execution_data",
+    "execution_metadata",
+    "execution_annotation",
+    "workflow_entity",
+    "workflow_history",
+    "credentials_entity",
+    "webhook_entity",
+    "insights_raw",
+];
+export const RETENTION_BUCKETS = [7, 30, 90, 365];
+export function resolveDatastoreKind(config) {
+    if (config.postgresUrl)
+        return "postgres";
+    if (config.sqlitePath)
+        return "sqlite";
+    throw new DatastoreError("no datastore configured: set N8N_SQLITE_PATH (SQLite) or N8N_POSTGRES_URL (Postgres)");
+}
+export async function readDatastoreStats(config) {
+    return resolveDatastoreKind(config) === "postgres"
+        ? readPostgresStats(config.postgresUrl)
+        : readSqliteStats(config.sqlitePath);
+}
+function bucketCutoffs(now = Date.now()) {
+    return RETENTION_BUCKETS.map((days) => {
+        const epochMs = now - days * 86_400_000;
+        return { days, iso: new Date(epochMs).toISOString(), epochMs };
+    });
+}
+async function readSqliteStats(sqlitePath) {
+    let main;
+    try {
+        main = (await stat(sqlitePath)).size;
+    }
+    catch (error) {
+        throw new DatastoreError(`cannot read ${sqlitePath}: ${error.message}`);
+    }
+    const components = [{ name: path.basename(sqlitePath), bytes: main }];
+    for (const suffix of ["-wal", "-shm"]) {
+        const size = await stat(sqlitePath + suffix).then((s) => s.size).catch(() => null);
+        if (size !== null)
+            components.push({ name: path.basename(sqlitePath) + suffix, bytes: size });
+    }
+    const db = openSqlite(sqlitePath, { readOnly: true });
+    try {
+        const present = new Set(db.prepare("SELECT name FROM sqlite_master WHERE type = 'table'").all().map((r) => String(r.name)));
+        // dbstat is an optional SQLite module; without it we still report row counts.
+        let perTableBytes = null;
+        try {
+            const rows = db.prepare("SELECT name, SUM(pgsize) AS bytes FROM dbstat GROUP BY name").all();
+            perTableBytes = new Map(rows.map((r) => [String(r.name), Number(r.bytes)]));
+        }
+        catch {
+            perTableBytes = null;
+        }
+        const tables = [];
+        for (const table of INTERESTING_TABLES) {
+            if (!present.has(table))
+                continue;
+            const row = db.prepare(`SELECT COUNT(*) AS n FROM "${table}"`).get();
+            tables.push({ table, rows: Number(row?.n ?? 0), bytes: perTableBytes?.get(table) ?? null });
+        }
+        let executionCount = 0;
+        let oldestExecutionAt = null;
+        let newestExecutionAt = null;
+        const executionsOlderThanDays = {};
+        if (present.has("execution_entity")) {
+            const agg = db
+                .prepare(`SELECT COUNT(*) AS n, MIN("startedAt") AS oldest, MAX("startedAt") AS newest FROM execution_entity`)
+                .get();
+            executionCount = Number(agg?.n ?? 0);
+            oldestExecutionAt = normalizeTimestamp(agg?.oldest ?? null);
+            newestExecutionAt = normalizeTimestamp(agg?.newest ?? null);
+            // n8n has stored startedAt as ISO text and as epoch millis across versions.
+            // SQLite sorts every integer before every string, so a text-only comparison
+            // would count all numeric rows as older than any cutoff.
+            const counter = db.prepare(`
+        SELECT COUNT(*) AS n FROM execution_entity
+        WHERE CASE typeof("startedAt")
+          WHEN 'integer' THEN "startedAt" < ?
+          WHEN 'real' THEN "startedAt" < ?
+          ELSE "startedAt" < ?
+        END`);
+            for (const { days, iso, epochMs } of bucketCutoffs()) {
+                const hit = counter.get(epochMs, epochMs, iso);
+                executionsOlderThanDays[String(days)] = Number(hit?.n ?? 0);
+            }
+        }
+        return {
+            kind: "sqlite",
+            totalBytes: components.reduce((sum, c) => sum + c.bytes, 0),
+            components,
+            tables,
+            executionCount,
+            oldestExecutionAt,
+            newestExecutionAt,
+            executionsOlderThanDays,
+        };
+    }
+    finally {
+        db.close();
+    }
+}
+async function readPostgresStats(connectionString) {
+    const { default: pg } = await import("pg");
+    const client = new pg.Client({ connectionString, connectionTimeoutMillis: 10_000 });
+    try {
+        await client.connect();
+    }
+    catch (error) {
+        throw new DatastoreError(`cannot connect to Postgres: ${error.message}`);
+    }
+    try {
+        const total = await client.query("SELECT pg_database_size(current_database())::text AS bytes");
+        const present = await client.query("SELECT tablename FROM pg_tables WHERE schemaname = current_schema()");
+        const names = new Set(present.rows.map((r) => r.tablename));
+        const tables = [];
+        for (const table of INTERESTING_TABLES) {
+            if (!names.has(table))
+                continue;
+            const result = await client.query(`SELECT (SELECT COUNT(*) FROM "${table}")::text AS rows, pg_total_relation_size($1)::text AS bytes`, [table]);
+            const row = result.rows[0];
+            tables.push({ table, rows: Number(row?.rows ?? 0), bytes: Number(row?.bytes ?? 0) });
+        }
+        let executionCount = 0;
+        let oldestExecutionAt = null;
+        let newestExecutionAt = null;
+        const executionsOlderThanDays = {};
+        if (names.has("execution_entity")) {
+            const agg = await client.query(`SELECT COUNT(*)::text AS n, MIN("startedAt") AS oldest, MAX("startedAt") AS newest FROM execution_entity`);
+            const row = agg.rows[0];
+            executionCount = Number(row?.n ?? 0);
+            oldestExecutionAt = row?.oldest ? new Date(row.oldest).toISOString() : null;
+            newestExecutionAt = row?.newest ? new Date(row.newest).toISOString() : null;
+            for (const { days, iso } of bucketCutoffs()) {
+                const hit = await client.query(`SELECT COUNT(*)::text AS n FROM execution_entity WHERE "startedAt" < $1`, [iso]);
+                executionsOlderThanDays[String(days)] = Number(hit.rows[0]?.n ?? 0);
+            }
+        }
+        return {
+            kind: "postgres",
+            totalBytes: Number(total.rows[0]?.bytes ?? 0),
+            components: [{ name: "database", bytes: Number(total.rows[0]?.bytes ?? 0) }],
+            tables,
+            executionCount,
+            oldestExecutionAt,
+            newestExecutionAt,
+            executionsOlderThanDays,
+        };
+    }
+    finally {
+        await client.end().catch(() => undefined);
+    }
+}
+/** SQLite stores timestamps as text or epoch millis depending on the n8n version. */
+function normalizeTimestamp(value) {
+    if (value === null || value === undefined)
+        return null;
+    const date = typeof value === "number" ? new Date(value) : new Date(value);
+    return Number.isNaN(date.getTime()) ? String(value) : date.toISOString();
+}
+//# sourceMappingURL=datastore.js.map

package/dist/n8n/datastore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"datastore.js","sourceRoot":"","sources":["../../src/n8n/datastore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAyBzC,MAAM,OAAO,cAAe,SAAQ,KAAK;CAAG;AAE5C,4FAA4F;AAC5F,MAAM,kBAAkB,GAAG;IACzB,kBAAkB;IAClB,gBAAgB;IAChB,oBAAoB;IACpB,sBAAsB;IACtB,iBAAiB;IACjB,kBAAkB;IAClB,oBAAoB;IACpB,gBAAgB;IAChB,cAAc;CACf,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;AAElD,MAAM,UAAU,oBAAoB,CAAC,MAAmB;IACtD,IAAI,MAAM,CAAC,WAAW;QAAE,OAAO,UAAU,CAAC;IAC1C,IAAI,MAAM,CAAC,UAAU;QAAE,OAAO,QAAQ,CAAC;IACvC,MAAM,IAAI,cAAc,CACtB,sFAAsF,CACvF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAmB;IAC1D,OAAO,oBAAoB,CAAC,MAAM,CAAC,KAAK,UAAU;QAChD,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,WAAY,CAAC;QACxC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,UAAW,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,aAAa,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACrC,OAAO,iBAAiB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACpC,MAAM,OAAO,GAAG,GAAG,GAAG,IAAI,GAAG,UAAU,CAAC;QACxC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,UAAkB;IAC/C,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,cAAc,CAAC,eAAe,UAAU,KAAM,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,KAAK,MAAM,MAAM,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACnF,IAAI,IAAI,KAAK,IAAI;YAAE,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,MAAM,EAAE,GAAG,UAAU,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,EAAE,CAAC,OAAO,CAAC,qDAAqD,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CACnG,CAAC;QAEF,8EAA8E;QAC9E,IAAI,aAAa,GAA+B,IAAI,CAAC;QACrD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,6DAA6D,CAAC,CAAC,GAAG,EAAE,CAAC;YAC7F,aAAa,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9E,CAAC;QAAC,MAAM,CAAC;YACP,aAAa,GAAG,IAAI,CAAC;QACvB,CAAC;QAED,MAAM,MAAM,GAAgB,EAAE,CAAC;QAC/B,KAAK,MAAM,KAAK,IAAI,kBAAkB,EAAE,CAAC;YACvC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,SAAS;YAClC,MAAM,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,8BAA8B,KAAK,GAAG,CAAC,CAAC,GAAG,EAA+B,CAAC;YAClG,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9F,CAAC;QAED,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,IAAI,iBAAiB,GAAkB,IAAI,CAAC;QAC5C,IAAI,iBAAiB,GAAkB,IAAI,CAAC;QAC5C,MAAM,uBAAuB,GAA2B,EAAE,CAAC;QAE3D,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,EAAE;iBACX,OAAO,CAAC,oGAAoG,CAAC;iBAC7G,GAAG,EAA6E,CAAC;YACpF,cAAc,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;YACrC,iBAAiB,GAAG,kBAAkB,CAAC,GAAG,EAAE,MAAM,IAAI,IAAI,CAAC,CAAC;YAC5D,iBAAiB,GAAG,kBAAkB,CAAC,GAAG,EAAE,MAAM,IAAI,IAAI,CAAC,CAAC;YAE5D,4EAA4E;YAC5E,4EAA4E;YAC5E,yDAAyD;YACzD,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC;;;;;;YAMrB,CAAC,CAAC;YACR,KAAK,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,aAAa,EAAE,EAAE,CAAC;gBACrD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAA8B,CAAC;gBAC5E,uBAAuB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAED,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;YAC3D,UAAU;YACV,MAAM;YACN,cAAc;YACd,iBAAiB;YACjB,iBAAiB;YACjB,uBAAuB;SACxB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,gBAAwB;IACvD,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,EAAE,CAAC,CAAC;IACpF,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;IACzB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,cAAc,CAAC,+BAAgC,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,KAAK,CAAoB,4DAA4D,CAAC,CAAC;QAClH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,KAAK,CAChC,qEAAqE,CACtE,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAE5D,MAAM,MAAM,GAAgB,EAAE,CAAC;QAC/B,KAAK,MAAM,KAAK,IAAI,kBAAkB,EAAE,CAAC;YACvC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,SAAS;YAChC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAC/B,iCAAiC,KAAK,6DAA6D,EACnG,CAAC,KAAK,CAAC,CACR,CAAC;YACF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;QACvF,CAAC;QAED,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,IAAI,iBAAiB,GAAkB,IAAI,CAAC;QAC5C,IAAI,iBAAiB,GAAkB,IAAI,CAAC;QAC5C,MAAM,uBAAuB,GAA2B,EAAE,CAAC;QAE3D,IAAI,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B,0GAA0G,CAC3G,CAAC;YACF,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACxB,cAAc,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;YACrC,iBAAiB,GAAG,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5E,iBAAiB,GAAG,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;YAE5E,KAAK,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,aAAa,EAAE,EAAE,CAAC;gBAC5C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,KAAK,CAC5B,yEAAyE,EACzE,CAAC,GAAG,CAAC,CACN,CAAC;gBACF,uBAAuB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;YACtE,CAAC;QACH,CAAC;QAED,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;YAC7C,UAAU,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,EAAE,CAAC;YAC5E,MAAM;YACN,cAAc;YACd,iBAAiB;YACjB,iBAAiB;YACjB,uBAAuB;SACxB,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,SAAS,kBAAkB,CAAC,KAA6B;IACvD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvD,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3E,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;AAC3E,CAAC"}

package/dist/n8n/sqlite.d.ts

@@ -0,0 +1,13 @@
+export interface SqliteStatement {
+    all(...params: unknown[]): Record<string, unknown>[];
+    get(...params: unknown[]): Record<string, unknown> | undefined;
+    run(...params: unknown[]): unknown;
+}
+export interface SqliteDatabase {
+    prepare(sql: string): SqliteStatement;
+    exec(sql: string): void;
+    close(): void;
+}
+export declare function openSqlite(path: string, options?: {
+    readOnly?: boolean;
+}): SqliteDatabase;

package/dist/n8n/sqlite.js

@@ -0,0 +1,17 @@
+import { createRequire } from "node:module";
+/**
+ * `node:sqlite` is a Node builtin, but bundlers still try to resolve it from
+ * node_modules and fail. Going through createRequire hands it to Node directly.
+ */
+const nodeRequire = createRequire(import.meta.url);
+export function openSqlite(path, options = {}) {
+    let DatabaseSync;
+    try {
+        ({ DatabaseSync } = nodeRequire("node:sqlite"));
+    }
+    catch {
+        throw new Error("node:sqlite is unavailable; n8n-guard needs Node.js 22 or newer for SQLite support");
+    }
+    return new DatabaseSync(path, options);
+}
+//# sourceMappingURL=sqlite.js.map

package/dist/n8n/sqlite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sqlite.js","sourceRoot":"","sources":["../../src/n8n/sqlite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C;;;GAGG;AACH,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAcnD,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,UAAkC,EAAE;IAC3E,IAAI,YAAoF,CAAC;IACzF,IAAI,CAAC;QACH,CAAC,EAAE,YAAY,EAAE,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAC;IACxG,CAAC;IACD,OAAO,IAAI,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACzC,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,5 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { GuardConfig } from "./config.js";
+export declare const SERVER_NAME = "n8n-guard";
+export declare const SERVER_VERSION = "0.1.0";
+export declare function createServer(config: GuardConfig): McpServer;

package/dist/server.js

@@ -0,0 +1,115 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { z } from "zod";
+import { GuardService } from "./guard/service.js";
+import { errorMessage } from "./guard/runner.js";
+export const SERVER_NAME = "n8n-guard";
+export const SERVER_VERSION = "0.1.0";
+function render(title, findings, payload) {
+    const text = [`## ${title}`, ...findings.map((f) => `- ${f}`), "", "```json", JSON.stringify(payload, null, 2), "```"].join("\n");
+    return { content: [{ type: "text", text }], structuredContent: payload };
+}
+/** Tool errors are answers too: the caller needs the reason, not a transport fault. */
+function failure(title, error) {
+    return {
+        content: [{ type: "text", text: `## ${title}\n\n**failed:** ${errorMessage(error)}` }],
+        isError: true,
+    };
+}
+export function createServer(config) {
+    const guard = new GuardService(config);
+    const server = new McpServer({ name: SERVER_NAME, version: SERVER_VERSION });
+    server.registerTool("instance_info", {
+        title: "Instance info",
+        description: "Reachability, configuration and workflow inventory of the monitored n8n instance. Start here: it shows which checks are configured and which are not.",
+        inputSchema: {},
+    }, async () => {
+        try {
+            const info = await guard.instanceInfo();
+            const findings = [
+                info.reachable ? `${info.url} is reachable (${info.detail})` : `${info.url} is NOT reachable: ${info.detail}`,
+                `datastore: ${info.datastore}`,
+                info.apiKeyConfigured ? "API key configured" : "no API key: execution and workflow checks are unavailable",
+                info.gitRepoConfigured ? "git repository configured" : "no git repository: drift check is unavailable",
+            ];
+            if (info.workflowCount !== null)
+                findings.push(`${info.workflowCount} workflows, ${info.activeWorkflowCount} active`);
+            return render("Instance info", findings, info);
+        }
+        catch (error) {
+            return failure("Instance info", error);
+        }
+    });
+    server.registerTool("db_health", {
+        title: "Database health",
+        description: "Size, per-table breakdown and growth rate of the n8n datastore, plus an estimate of when it hits the critical threshold. Works on SQLite and Postgres. The n8n Public API has no endpoint for this.",
+        inputSchema: {},
+    }, async () => {
+        try {
+            const report = await guard.dbHealth();
+            return render(`Database health (${report.severity})`, report.findings, report);
+        }
+        catch (error) {
+            return failure("Database health", error);
+        }
+    });
+    server.registerTool("stuck_executions", {
+        title: "Stuck executions",
+        description: "Executions sitting in `running` past a threshold or far past their own workflow's median runtime. Listing by status is not detection: this compares against a baseline.",
+        inputSchema: {
+            threshold_minutes: z
+                .number()
+                .positive()
+                .optional()
+                .describe("Minutes a run may stay in `running` before it counts as stuck. Defaults to N8N_GUARD_STUCK_MINUTES."),
+        },
+    }, async ({ threshold_minutes }) => {
+        try {
+            const report = await guard.stuckExecutions(threshold_minutes);
+            return render("Stuck executions", report.findings, report);
+        }
+        catch (error) {
+            return failure("Stuck executions", error);
+        }
+    });
+    server.registerTool("retention_report", {
+        title: "Retention report",
+        description: "How many execution records are stored, how far back they go, and what pruning to a retention window would free. Read-only: n8n-guard never deletes anything.",
+        inputSchema: {
+            keep_days: z.number().positive().optional().describe("Retention window to evaluate, in days. Defaults to 30."),
+        },
+    }, async ({ keep_days }) => {
+        try {
+            const report = await guard.retention(keep_days ?? 30);
+            return render("Retention report", [...report.findings, report.hint], report);
+        }
+        catch (error) {
+            return failure("Retention report", error);
+        }
+    });
+    server.registerTool("git_drift", {
+        title: "Git drift",
+        description: "Diffs the workflows in the running instance against the JSON exports in a git checkout: live but unexported, exported but deleted, and content that has drifted apart.",
+        inputSchema: {},
+    }, async () => {
+        try {
+            const report = await guard.gitDrift();
+            return render("Git drift", report.findings, report);
+        }
+        catch (error) {
+            return failure("Git drift", error);
+        }
+    });
+    server.registerTool("guard_run", {
+        title: "Full guard run",
+        description: "Runs every check in one resilient sweep. Individual steps retry and, if they still fail, are reported as findings while the remaining checks finish. Use this for scheduled monitoring.",
+        inputSchema: {
+            keep_days: z.number().positive().optional().describe("Retention window used by the retention step. Defaults to 30."),
+        },
+    }, async ({ keep_days }) => {
+        const report = await guard.fullRun({ keepDays: keep_days ?? 30 });
+        const title = report.degraded ? "Guard run (degraded)" : "Guard run";
+        return render(title, report.findings, report);
+    });
+    return server;
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,MAAM,CAAC,MAAM,WAAW,GAAG,WAAW,CAAC;AACvC,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC;AAStC,SAAS,MAAM,CAAC,KAAa,EAAE,QAAkB,EAAE,OAAgB;IACjE,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClI,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,iBAAiB,EAAE,OAAkC,EAAE,CAAC;AACtG,CAAC;AAED,uFAAuF;AACvF,SAAS,OAAO,CAAC,KAAa,EAAE,KAAc;IAC5C,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,mBAAmB,YAAY,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACtF,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAAmB;IAC9C,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;IAE7E,MAAM,CAAC,YAAY,CACjB,eAAe,EACf;QACE,KAAK,EAAE,eAAe;QACtB,WAAW,EACT,uJAAuJ;QACzJ,WAAW,EAAE,EAAE;KAChB,EACD,KAAK,IAAI,EAAE;QACT,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG;gBACf,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,kBAAkB,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,sBAAsB,IAAI,CAAC,MAAM,EAAE;gBAC7G,cAAc,IAAI,CAAC,SAAS,EAAE;gBAC9B,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,2DAA2D;gBAC1G,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,+CAA+C;aACvG,CAAC;YACF,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI;gBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,eAAe,IAAI,CAAC,mBAAmB,SAAS,CAAC,CAAC;YACtH,OAAO,MAAM,CAAC,eAAe,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,WAAW,EACX;QACE,KAAK,EAAE,iBAAiB;QACxB,WAAW,EACT,qMAAqM;QACvM,WAAW,EAAE,EAAE;KAChB,EACD,KAAK,IAAI,EAAE;QACT,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC;YACtC,OAAO,MAAM,CAAC,oBAAoB,MAAM,CAAC,QAAQ,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,OAAO,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;QACE,KAAK,EAAE,kBAAkB;QACzB,WAAW,EACT,yKAAyK;QAC3K,WAAW,EAAE;YACX,iBAAiB,EAAE,CAAC;iBACjB,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,EAAE;iBACV,QAAQ,CAAC,qGAAqG,CAAC;SACnH;KACF,EACD,KAAK,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE;QAC9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC;YAC9D,OAAO,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC7D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,OAAO,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,kBAAkB,EAClB;QACE,KAAK,EAAE,kBAAkB;QACzB,WAAW,EACT,8JAA8J;QAChK,WAAW,EAAE;YACX,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wDAAwD,CAAC;SAC/G;KACF,EACD,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;QACtB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;YACtD,OAAO,MAAM,CAAC,kBAAkB,EAAE,CAAC,GAAG,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,OAAO,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,WAAW,EACX;QACE,KAAK,EAAE,WAAW;QAClB,WAAW,EACT,wKAAwK;QAC1K,WAAW,EAAE,EAAE;KAChB,EACD,KAAK,IAAI,EAAE;QACT,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,CAAC;YACtC,OAAO,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QACrC,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,YAAY,CACjB,WAAW,EACX;QACE,KAAK,EAAE,gBAAgB;QACvB,WAAW,EACT,yLAAyL;QAC3L,WAAW,EAAE;YACX,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,8DAA8D,CAAC;SACrH;KACF,EACD,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;QACtB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,SAAS,IAAI,EAAE,EAAE,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,WAAW,CAAC;QACrE,OAAO,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/package.json

@@ -0,0 +1,56 @@
+{
+  "name": "n8n-guard",
+  "version": "0.1.0",
+  "mcpName": "io.github.flow-84/n8n-guard",
+  "description": "MCP server for the operational layer beneath the n8n Public API: disk, retention, stuck executions, git drift.",
+  "license": "MIT",
+  "author": "flow-84",
+  "homepage": "https://github.com/flow-84/n8n-guard#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/flow-84/n8n-guard.git"
+  },
+  "bugs": {
+    "url": "https://github.com/flow-84/n8n-guard/issues"
+  },
+  "type": "module",
+  "bin": {
+    "n8n-guard": "dist/index.js"
+  },
+  "main": "dist/index.js",
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=22"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "prepublishOnly": "npm run build",
+    "start": "node dist/index.js",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run test/unit",
+    "test:integration": "vitest run test/integration",
+    "test:all": "vitest run"
+  },
+  "keywords": [
+    "mcp",
+    "n8n",
+    "monitoring",
+    "sre",
+    "model-context-protocol"
+  ],
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.20.0",
+    "pg": "^8.13.1",
+    "zod": "^3.25.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "@types/pg": "^8.11.10",
+    "typescript": "^5.7.0",
+    "vitest": "^2.1.8"
+  }
+}