n8n-mcp 2.13.2 → 2.14.0

package/dist/telemetry/workflow-sanitizer.js

@@ -0,0 +1,190 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkflowSanitizer = void 0;
+const crypto_1 = require("crypto");
+class WorkflowSanitizer {
+    static sanitizeWorkflow(workflow) {
+        const sanitized = JSON.parse(JSON.stringify(workflow));
+        if (sanitized.nodes && Array.isArray(sanitized.nodes)) {
+            sanitized.nodes = sanitized.nodes.map((node) => this.sanitizeNode(node));
+        }
+        if (sanitized.connections) {
+            sanitized.connections = this.sanitizeConnections(sanitized.connections);
+        }
+        delete sanitized.settings?.errorWorkflow;
+        delete sanitized.staticData;
+        delete sanitized.pinData;
+        delete sanitized.credentials;
+        delete sanitized.sharedWorkflows;
+        delete sanitized.ownedBy;
+        delete sanitized.createdBy;
+        delete sanitized.updatedBy;
+        const nodeTypes = sanitized.nodes?.map((n) => n.type) || [];
+        const uniqueNodeTypes = [...new Set(nodeTypes)];
+        const hasTrigger = nodeTypes.some((type) => type.includes('trigger') || type.includes('webhook'));
+        const hasWebhook = nodeTypes.some((type) => type.includes('webhook'));
+        const nodeCount = sanitized.nodes?.length || 0;
+        let complexity = 'simple';
+        if (nodeCount > 20) {
+            complexity = 'complex';
+        }
+        else if (nodeCount > 10) {
+            complexity = 'medium';
+        }
+        const workflowStructure = JSON.stringify({
+            nodeTypes: uniqueNodeTypes.sort(),
+            connections: sanitized.connections
+        });
+        const workflowHash = (0, crypto_1.createHash)('sha256')
+            .update(workflowStructure)
+            .digest('hex')
+            .substring(0, 16);
+        return {
+            nodes: sanitized.nodes || [],
+            connections: sanitized.connections || {},
+            nodeCount,
+            nodeTypes: uniqueNodeTypes,
+            hasTrigger,
+            hasWebhook,
+            complexity,
+            workflowHash
+        };
+    }
+    static sanitizeNode(node) {
+        const sanitized = { ...node };
+        delete sanitized.credentials;
+        if (sanitized.parameters) {
+            sanitized.parameters = this.sanitizeObject(sanitized.parameters);
+        }
+        return sanitized;
+    }
+    static sanitizeObject(obj) {
+        if (!obj || typeof obj !== 'object') {
+            return obj;
+        }
+        if (Array.isArray(obj)) {
+            return obj.map(item => this.sanitizeObject(item));
+        }
+        const sanitized = {};
+        for (const [key, value] of Object.entries(obj)) {
+            if (this.isSensitiveField(key)) {
+                sanitized[key] = '[REDACTED]';
+                continue;
+            }
+            if (typeof value === 'object' && value !== null) {
+                sanitized[key] = this.sanitizeObject(value);
+            }
+            else if (typeof value === 'string') {
+                sanitized[key] = this.sanitizeString(value, key);
+            }
+            else {
+                sanitized[key] = value;
+            }
+        }
+        return sanitized;
+    }
+    static sanitizeString(value, fieldName) {
+        if (value.includes('/webhook/') || value.includes('/hook/')) {
+            return 'https://[webhook-url]';
+        }
+        let sanitized = value;
+        for (const pattern of this.SENSITIVE_PATTERNS) {
+            if (pattern.toString().includes('webhook')) {
+                continue;
+            }
+            sanitized = sanitized.replace(pattern, '[REDACTED]');
+        }
+        if (fieldName.toLowerCase().includes('url') ||
+            fieldName.toLowerCase().includes('endpoint')) {
+            if (sanitized.startsWith('http://') || sanitized.startsWith('https://')) {
+                if (sanitized.includes('[REDACTED]')) {
+                    return '[REDACTED]';
+                }
+                const urlParts = sanitized.split('/');
+                if (urlParts.length > 2) {
+                    urlParts[2] = '[domain]';
+                    sanitized = urlParts.join('/');
+                }
+            }
+        }
+        return sanitized;
+    }
+    static isSensitiveField(fieldName) {
+        const lowerFieldName = fieldName.toLowerCase();
+        return this.SENSITIVE_FIELDS.some(sensitive => lowerFieldName.includes(sensitive.toLowerCase()));
+    }
+    static sanitizeConnections(connections) {
+        if (!connections || typeof connections !== 'object') {
+            return connections;
+        }
+        const sanitized = {};
+        for (const [nodeId, nodeConnections] of Object.entries(connections)) {
+            if (typeof nodeConnections === 'object' && nodeConnections !== null) {
+                sanitized[nodeId] = {};
+                for (const [connType, connArray] of Object.entries(nodeConnections)) {
+                    if (Array.isArray(connArray)) {
+                        sanitized[nodeId][connType] = connArray.map((conns) => {
+                            if (Array.isArray(conns)) {
+                                return conns.map((conn) => ({
+                                    node: conn.node,
+                                    type: conn.type,
+                                    index: conn.index
+                                }));
+                            }
+                            return conns;
+                        });
+                    }
+                    else {
+                        sanitized[nodeId][connType] = connArray;
+                    }
+                }
+            }
+            else {
+                sanitized[nodeId] = nodeConnections;
+            }
+        }
+        return sanitized;
+    }
+    static generateWorkflowHash(workflow) {
+        const sanitized = this.sanitizeWorkflow(workflow);
+        return sanitized.workflowHash;
+    }
+}
+exports.WorkflowSanitizer = WorkflowSanitizer;
+WorkflowSanitizer.SENSITIVE_PATTERNS = [
+    /https?:\/\/[^\s/]+\/webhook\/[^\s]+/g,
+    /https?:\/\/[^\s/]+\/hook\/[^\s]+/g,
+    /sk-[a-zA-Z0-9]{16,}/g,
+    /Bearer\s+[^\s]+/gi,
+    /[a-zA-Z0-9_-]{20,}/g,
+    /token['":\s]+[^,}]+/gi,
+    /apikey['":\s]+[^,}]+/gi,
+    /api_key['":\s]+[^,}]+/gi,
+    /secret['":\s]+[^,}]+/gi,
+    /password['":\s]+[^,}]+/gi,
+    /credential['":\s]+[^,}]+/gi,
+    /https?:\/\/[^:]+:[^@]+@[^\s/]+/g,
+    /wss?:\/\/[^:]+:[^@]+@[^\s/]+/g,
+];
+WorkflowSanitizer.SENSITIVE_FIELDS = [
+    'apiKey',
+    'api_key',
+    'token',
+    'secret',
+    'password',
+    'credential',
+    'auth',
+    'authorization',
+    'webhook',
+    'webhookUrl',
+    'url',
+    'endpoint',
+    'host',
+    'server',
+    'database',
+    'connectionString',
+    'privateKey',
+    'publicKey',
+    'certificate',
+];
+//# sourceMappingURL=workflow-sanitizer.js.map

package/dist/telemetry/workflow-sanitizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-sanitizer.js","sourceRoot":"","sources":["../../src/telemetry/workflow-sanitizer.ts"],"names":[],"mappings":";;;AAKA,mCAAoC;AAwBpC,MAAa,iBAAiB;IAkD5B,MAAM,CAAC,gBAAgB,CAAC,QAAa;QAEnC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QAGvD,IAAI,SAAS,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YACtD,SAAS,CAAC,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAkB,EAAE,EAAE,CAC3D,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CACxB,CAAC;QACJ,CAAC;QAGD,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;YAC1B,SAAS,CAAC,WAAW,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC1E,CAAC;QAGD,OAAO,SAAS,CAAC,QAAQ,EAAE,aAAa,CAAC;QACzC,OAAO,SAAS,CAAC,UAAU,CAAC;QAC5B,OAAO,SAAS,CAAC,OAAO,CAAC;QACzB,OAAO,SAAS,CAAC,WAAW,CAAC;QAC7B,OAAO,SAAS,CAAC,eAAe,CAAC;QACjC,OAAO,SAAS,CAAC,OAAO,CAAC;QACzB,OAAO,SAAS,CAAC,SAAS,CAAC;QAC3B,OAAO,SAAS,CAAC,SAAS,CAAC;QAG3B,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAe,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1E,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAa,CAAC;QAE5D,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CACjD,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CACrD,CAAC;QAEF,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CACjD,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CACzB,CAAC;QAGF,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC;QAC/C,IAAI,UAAU,GAAoC,QAAQ,CAAC;QAC3D,IAAI,SAAS,GAAG,EAAE,EAAE,CAAC;YACnB,UAAU,GAAG,SAAS,CAAC;QACzB,CAAC;aAAM,IAAI,SAAS,GAAG,EAAE,EAAE,CAAC;YAC1B,UAAU,GAAG,QAAQ,CAAC;QACxB,CAAC;QAGD,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,CAAC;YACvC,SAAS,EAAE,eAAe,CAAC,IAAI,EAAE;YACjC,WAAW,EAAE,SAAS,CAAC,WAAW;SACnC,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC;aACtC,MAAM,CAAC,iBAAiB,CAAC;aACzB,MAAM,CAAC,KAAK,CAAC;aACb,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAEpB,OAAO;YACL,KAAK,EAAE,SAAS,CAAC,KAAK,IAAI,EAAE;YAC5B,WAAW,EAAE,SAAS,CAAC,WAAW,IAAI,EAAE;YACxC,SAAS;YACT,SAAS,EAAE,eAAe;YAC1B,UAAU;YACV,UAAU;YACV,UAAU;YACV,YAAY;SACb,CAAC;IACJ,CAAC;IAKO,MAAM,CAAC,YAAY,CAAC,IAAkB;QAC5C,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;QAG9B,OAAO,SAAS,CAAC,WAAW,CAAC;QAG7B,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;YACzB,SAAS,CAAC,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAKO,MAAM,CAAC,cAAc,CAAC,GAAQ;QACpC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACpC,OAAO,GAAG,CAAC;QACb,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,SAAS,GAAQ,EAAE,CAAC;QAE1B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAE/C,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/B,SAAS,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;gBAC9B,SAAS;YACX,CAAC;YAGD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBAChD,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YAC9C,CAAC;iBAEI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACnC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACnD,CAAC;iBAEI,CAAC;gBACJ,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACzB,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAKO,MAAM,CAAC,cAAc,CAAC,KAAa,EAAE,SAAiB;QAE5D,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5D,OAAO,uBAAuB,CAAC;QACjC,CAAC;QAED,IAAI,SAAS,GAAG,KAAK,CAAC;QAGtB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAE9C,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC3C,SAAS;YACX,CAAC;YACD,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACvD,CAAC;QAGD,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC;YACvC,SAAS,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAEjD,IAAI,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAExE,IAAI,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;oBACrC,OAAO,YAAY,CAAC;gBACtB,CAAC;gBACD,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACtC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACxB,QAAQ,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC;oBACzB,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAKO,MAAM,CAAC,gBAAgB,CAAC,SAAiB;QAC/C,MAAM,cAAc,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;QAC/C,OAAO,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAC5C,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CACjD,CAAC;IACJ,CAAC;IAKO,MAAM,CAAC,mBAAmB,CAAC,WAAgB;QACjD,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;YACpD,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,MAAM,SAAS,GAAQ,EAAE,CAAC;QAE1B,KAAK,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACpE,IAAI,OAAO,eAAe,KAAK,QAAQ,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;gBACpE,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;gBAEvB,KAAK,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAsB,CAAC,EAAE,CAAC;oBAC3E,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;wBAC7B,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,KAAU,EAAE,EAAE;4BACzD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gCACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAS,EAAE,EAAE,CAAC,CAAC;oCAC/B,IAAI,EAAE,IAAI,CAAC,IAAI;oCACf,IAAI,EAAE,IAAI,CAAC,IAAI;oCACf,KAAK,EAAE,IAAI,CAAC,KAAK;iCAClB,CAAC,CAAC,CAAC;4BACN,CAAC;4BACD,OAAO,KAAK,CAAC;wBACf,CAAC,CAAC,CAAC;oBACL,CAAC;yBAAM,CAAC;wBACN,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC;oBAC1C,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,SAAS,CAAC,MAAM,CAAC,GAAG,eAAe,CAAC;YACtC,CAAC;QACH,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAKD,MAAM,CAAC,oBAAoB,CAAC,QAAa;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAClD,OAAO,SAAS,CAAC,YAAY,CAAC;IAChC,CAAC;;AA5QH,8CA6QC;AA5QyB,oCAAkB,GAAG;IAE3C,sCAAsC;IACtC,mCAAmC;IAGnC,sBAAsB;IACtB,mBAAmB;IACnB,qBAAqB;IACrB,uBAAuB;IACvB,wBAAwB;IACxB,yBAAyB;IACzB,wBAAwB;IACxB,0BAA0B;IAC1B,4BAA4B;IAG5B,iCAAiC;IACjC,+BAA+B;CAIhC,CAAC;AAEsB,kCAAgB,GAAG;IACzC,QAAQ;IACR,SAAS;IACT,OAAO;IACP,QAAQ;IACR,UAAU;IACV,YAAY;IACZ,MAAM;IACN,eAAe;IACf,SAAS;IACT,YAAY;IACZ,KAAK;IACL,UAAU;IACV,MAAM;IACN,QAAQ;IACR,UAAU;IACV,kBAAkB;IAClB,YAAY;IACZ,WAAW;IACX,aAAa;CACd,CAAC"}

package/package.json

@@ -1,9 +1,10 @@
 {
   "name": "n8n-mcp",
-  "version": "2.13.2",
+  "version": "2.14.0",
   "description": "Integration between n8n workflow automation and Model Context Protocol (MCP)",
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.13.2",
+    "@supabase/supabase-js": "^2.57.4",
     "express": "^5.1.0",
     "dotenv": "^16.5.0",
     "lru-cache": "^11.2.1",