n8n-nodes-prestashop8 2.6.1 → 2.8.0

package/README.md

@@ -30,6 +30,7 @@ A comprehensive n8n community node for PrestaShop 8 integration with automatic X
 - ✅ **25+ resources supported**: products, customers, orders, stocks...
 - ✅ **Advanced filtering** with 10 search operators
 - ✅ **Raw mode** for debugging and advanced use cases
+- ✅ **Retry on error** to automatically recover from transient failures (timeouts, connection drops)
 
 ## 🚀 Quick Start
 
@@ -81,14 +82,13 @@ npm install n8n-nodes-prestashop8
 ### 📊 Supported Resources
 
 <details>
-<summary><strong>👥 CRM & Customers (6 resources)</strong></summary>
+<summary><strong>👥 CRM & Customers (5 resources)</strong></summary>
 
 - `customers` - Store customers
 - `addresses` - Shipping/billing addresses
 - `groups` - Customer groups and pricing
 - `customer_threads` - Customer service conversations
 - `customer_messages` - Individual messages
-- `guests` - Non-registered visitors
 </details>
 
 <details>
@@ -137,6 +137,7 @@ npm install n8n-nodes-prestashop8
 - **Sorting**: `[price_ASC]`, `[date_add_DESC]`
 - **Fields**: `full`, `minimal`, or custom
 - **Debug**: URL, headers, timeout
+- **Retry on error**: automatically retry a call that fails on a transient error — network timeout, connection drop, 5xx server error or 429 rate-limit (never on 4xx). Configurable max attempts and fixed delay between attempts; the retry budget is reset for each failing call. Each attempt is logged to the n8n server logs.
 
 ## 🎯 Usage Examples
 
@@ -169,7 +170,7 @@ Cron → PrestaShop 8 Node → Calculate KPIs → Email Report
 ### Common Problems
 - **401 Unauthorized** → Check API key and permissions
 - **404 Not Found** → Verify base URL and Webservices enabled
-- **Timeout** → Increase timeout in debug options
+- **Timeout** → Increase timeout in debug options, or enable **Retry on error** to auto-recover from transient timeouts
 
 ### Get Help
 - 🐞 **[GitHub Issues](https://github.com/PPCM/n8n-nodes-prestashop8/issues)** - Bugs and questions

package/dist/credentials/PrestaShop8Api.credentials.js

@@ -27,13 +27,6 @@ class PrestaShop8Api {
                 description: 'PrestaShop API key generated in back office (Advanced Parameters > Web Service)',
                 required: true,
             },
-            {
-                displayName: 'Test Connection',
-                name: 'testConnection',
-                type: 'boolean',
-                default: false,
-                description: 'Automatically test the connection when saving credentials',
-            },
         ];
         this.authenticate = {
             type: 'generic',
@@ -46,7 +39,9 @@ class PrestaShop8Api {
         };
         this.test = {
             request: {
-                url: '={{$credentials.baseUrl}}/products?display=[id]&limit=1',
+                // Normalize the base URL like the node does (strip trailing slash,
+                // ensure the /api suffix) so the test matches runtime behavior
+                url: '={{ ($credentials.baseUrl.trim().replace(new RegExp("/+$"), "") + "/api").replace(new RegExp("/api/api$"), "/api") }}/products?display=[id]&limit=1',
                 method: 'GET',
             },
         };

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+export * from './credentials/PrestaShop8Api.credentials';
+export * from './nodes/PrestaShop8/PrestaShop8.node';

package/dist/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./credentials/PrestaShop8Api.credentials"), exports);
+__exportStar(require("./nodes/PrestaShop8/PrestaShop8.node"), exports);

package/dist/nodes/PrestaShop8/PrestaShop8.node.d.ts

@@ -4,7 +4,6 @@ export declare class PrestaShop8 implements INodeType {
     methods: {
         loadOptions: {
             getOperations(this: import("n8n-workflow").ILoadOptionsFunctions): Promise<import("n8n-workflow").INodePropertyOptions[]>;
-            getRequiredFields(this: import("n8n-workflow").ILoadOptionsFunctions): Promise<import("n8n-workflow").INodePropertyOptions[]>;
             getAvailableFields(this: import("n8n-workflow").ILoadOptionsFunctions): Promise<import("n8n-workflow").INodePropertyOptions[]>;
         };
     };

package/dist/nodes/PrestaShop8/PrestaShop8.node.description.js

@@ -121,6 +121,7 @@ function buildStandardFieldValues() {
                 type: 'options',
                 typeOptions: {
                     loadOptionsMethod: 'getAvailableFields',
+                    loadOptionsDependsOn: ['resource'],
                 },
                 default: '',
                 required: true,
@@ -197,59 +198,6 @@ exports.PrestaShop8Description = {
             required: true,
             description: 'PrestaShop resource type to work with',
         },
-        // Integrated documentation
-        {
-            displayName: '📚 Documentation',
-            name: 'documentation',
-            type: 'notice',
-            default: '',
-            displayOptions: {
-                show: {
-                    '/': [
-                        {
-                            _cnd: {
-                                eq: 'doc',
-                            },
-                        },
-                    ],
-                },
-            },
-            typeOptions: {
-                theme: 'info',
-            },
-            options: [
-                {
-                    name: '🚀 Quick Start Guide',
-                    value: 'quickstart',
-                    description: 'Configuration and first steps with PrestaShop 8',
-                },
-                {
-                    name: '🔑 API Authentication',
-                    value: 'auth',
-                    description: 'PrestaShop API key configuration',
-                },
-                {
-                    name: '🔄 XML/JSON Conversion',
-                    value: 'conversion',
-                    description: 'How automatic simplification works',
-                },
-                {
-                    name: '🔍 Search and Filters',
-                    value: 'filters',
-                    description: 'Using advanced PrestaShop filters',
-                },
-                {
-                    name: '⚡ Raw Mode',
-                    value: 'rawmode',
-                    description: 'Using raw data mode',
-                },
-                {
-                    name: '📝 Practical Examples',
-                    value: 'examples',
-                    description: 'Common use cases and code examples',
-                },
-            ],
-        },
         // Operation selection
         {
             displayName: 'Operation',
@@ -263,6 +211,7 @@ exports.PrestaShop8Description = {
             },
             typeOptions: {
                 loadOptionsMethod: 'getOperations',
+                loadOptionsDependsOn: ['resource'],
             },
             default: 'list',
             required: true,
@@ -400,6 +349,7 @@ exports.PrestaShop8Description = {
                             type: 'options',
                             typeOptions: {
                                 loadOptionsMethod: 'getAvailableFields',
+                                loadOptionsDependsOn: ['resource'],
                             },
                             default: '',
                             description: 'Select a field from the PrestaShop schema.',

package/dist/nodes/PrestaShop8/PrestaShop8.node.js

@@ -43,16 +43,30 @@ function collectRequiredFields(executeFunctions, resource, itemIndex) {
 /**
  * Process response data into appropriate format with type conversion
  */
+function convertPayloadTypes(data, resource) {
+    if (!data) {
+        return data;
+    }
+    if (Array.isArray(data)) {
+        return (0, resourceSchemas_1.convertResourceArray)(data, resource);
+    }
+    if (typeof data === 'object') {
+        // Unwrap debug wrapper (Show Request URL / Show Request Info) before converting
+        if ('data' in data && ('requestUrl' in data || 'requestInfo' in data)) {
+            return { ...data, data: convertPayloadTypes(data.data, resource) };
+        }
+        // Unwrap response wrapper (Include Response Headers) before converting
+        if ('body' in data && 'headers' in data && 'statusCode' in data) {
+            return { ...data, body: convertPayloadTypes(data.body, resource) };
+        }
+    }
+    return (0, resourceSchemas_1.convertResourceTypes)(data, resource);
+}
 function processResponseData(responseData, returnData, itemIndex, resource, convertTypes = true) {
     // Convert types if enabled and we have data
     let processedData = responseData;
     if (convertTypes && processedData) {
-        if (Array.isArray(processedData)) {
-            processedData = (0, resourceSchemas_1.convertResourceArray)(processedData, resource);
-        }
-        else {
-            processedData = (0, resourceSchemas_1.convertResourceTypes)(processedData, resource);
-        }
+        processedData = convertPayloadTypes(processedData, resource);
     }
     if (Array.isArray(processedData)) {
         processedData.forEach((item) => {
@@ -157,7 +171,7 @@ class PrestaShop8 {
                         if (displayValue !== null) {
                             urlParams.display = displayValue;
                         }
-                        requestUrl = (0, utils_1.buildUrlWithFilters)(`${credentials.baseUrl}/${resource}/${id}`, urlParams, rawMode);
+                        requestUrl = (0, utils_1.buildUrlWithFilters)(`${credentials.baseUrl}/${resource}/${encodeURIComponent(id)}`, urlParams, rawMode);
                         const options = (0, http_1.buildHttpOptions)('GET', requestUrl, credentials, rawMode, timeout);
                         const { response, debugInfo, url, responseHeaders, statusCode } = await (0, http_1.executeHttpRequest)(this.helpers, options, credentials, rawMode, operation, resource, neverError, undefined, opts.retry);
                         requestUrl = url;
@@ -228,7 +242,7 @@ class PrestaShop8 {
                         }
                         // Build XML using new format
                         body = (0, utils_1.buildUpdateXml)(resource, id, fieldsToUpdate);
-                        const options = (0, http_1.buildHttpOptions)('PATCH', `${credentials.baseUrl}/${resource}/${id}`, credentials, rawMode, timeout, body);
+                        const options = (0, http_1.buildHttpOptions)('PATCH', `${credentials.baseUrl}/${resource}/${encodeURIComponent(id)}`, credentials, rawMode, timeout, body);
                         const { response, debugInfo, url, responseHeaders, statusCode } = await (0, http_1.executeHttpRequest)(this.helpers, options, credentials, rawMode, operation, resource, neverError, body, opts.retry);
                         requestUrl = url;
                         requestDebugInfo = debugInfo;
@@ -261,12 +275,17 @@ class PrestaShop8 {
                                     // Add custom filter directly to URL without any interpretation
                                     // User writes exactly what they want: date=1, filter[name]=test, etc.
                                     const customFilter = filter.customFilterExpression.trim();
-                                    // Parse the custom filter to extract key=value pairs for URL construction
+                                    // Parse the custom filter to extract key=value pairs for URL construction.
+                                    // Split on the FIRST '=' only: values may legitimately contain '='.
                                     const parts = customFilter.split('&');
                                     for (const part of parts) {
-                                        const [key, value] = part.split('=', 2);
-                                        if (key && value !== undefined) {
-                                            filterParams[key.trim()] = value.trim();
+                                        const eqIndex = part.indexOf('=');
+                                        if (eqIndex > 0) {
+                                            const key = part.slice(0, eqIndex).trim();
+                                            const value = part.slice(eqIndex + 1).trim();
+                                            if (key) {
+                                                filterParams[key] = value;
+                                            }
                                         }
                                     }
                                 }
@@ -276,9 +295,12 @@ class PrestaShop8 {
                             const filterValue = filter.value !== null && filter.value !== undefined ? String(filter.value).trim() : '';
                             const format = http_1.FILTER_OPERATOR_FORMATS[filter.operator];
                             if (format) {
-                                if (!format.requiresValue || filterValue) {
-                                    filterParams[key] = format.template.replace('{v}', filterValue);
+                                // Guard: operators that require a value must not be silently dropped
+                                // when the value is empty, otherwise PrestaShop returns all records.
+                                if (format.requiresValue && !filterValue) {
+                                    throw new n8n_workflow_1.NodeOperationError(this.getNode(), `Filter operator "${filter.operator}" on field "${filter.field}" requires a value. Use the "IS_EMPTY" operator to match empty fields.`);
                                 }
+                                filterParams[key] = format.template.replace('{v}', filterValue);
                             }
                             else if (filterValue) {
                                 filterParams[key] = `[${filterValue}]`;
@@ -320,15 +342,25 @@ class PrestaShop8 {
                         if (!id) {
                             throw new n8n_workflow_1.NodeOperationError(this.getNode(), 'ID required for this operation');
                         }
-                        const options = (0, http_1.buildHttpOptions)('DELETE', `${credentials.baseUrl}/${resource}/${id}`, credentials, rawMode, timeout);
-                        const { debugInfo, url, responseHeaders, statusCode } = await (0, http_1.executeHttpRequest)(this.helpers, options, credentials, rawMode, operation, resource, neverError, undefined, opts.retry);
+                        const options = (0, http_1.buildHttpOptions)('DELETE', `${credentials.baseUrl}/${resource}/${encodeURIComponent(id)}`, credentials, rawMode, timeout);
+                        const { response, debugInfo, url, responseHeaders, statusCode } = await (0, http_1.executeHttpRequest)(this.helpers, options, credentials, rawMode, operation, resource, neverError, undefined, opts.retry);
                         requestUrl = url;
                         requestDebugInfo = debugInfo;
-                        const deleteResponse = {
-                            success: true,
-                            message: `${resource} with ID ${id} deleted successfully`,
-                            deletedId: id,
-                        };
+                        // With neverError enabled a failed delete returns normally with an
+                        // error status code: report the failure instead of a fake success
+                        const deleteFailed = typeof statusCode === 'number' && statusCode >= 400;
+                        const deleteResponse = deleteFailed
+                            ? {
+                                success: false,
+                                status: statusCode,
+                                message: (response === null || response === void 0 ? void 0 : response.message) || `Failed to delete ${resource} with ID ${id}`,
+                                deletedId: id,
+                            }
+                            : {
+                                success: true,
+                                message: `${resource} with ID ${id} deleted successfully`,
+                                deletedId: id,
+                            };
                         responseData = (0, http_1.wrapResponse)(deleteResponse, includeResponseHeaders, responseHeaders, statusCode);
                         break;
                     }

package/dist/nodes/PrestaShop8/helpers/http.d.ts

@@ -31,6 +31,12 @@ export interface RetryOptions {
     retryDelay: number;
     /** Optional hook called before each retry wait, with the upcoming retry number (1-based) and the error. */
     onRetry?: (attempt: number, error: any) => void;
+    /**
+     * Set for non-idempotent calls (POST/create): ambiguous network errors
+     * (timeout, reset) are then NOT retried because the server may already
+     * have processed the request, which would create duplicate records.
+     */
+    nonIdempotent?: boolean;
 }
 /**
  * Pause execution for the given number of milliseconds (used to throttle calls).
@@ -41,7 +47,7 @@ export declare function sleep(ms: number): Promise<void>;
  * Retries on network/timeout errors, 5xx server errors and 429 rate-limit.
  * Never retries on 4xx (invalid key, not found, invalid XML, etc.).
  */
-export declare function isRetryableError(error: any): boolean;
+export declare function isRetryableError(error: any, nonIdempotent?: boolean): boolean;
 /**
  * Build a short human-readable reason from an error, for retry logging.
  * Prefers the network code, then the HTTP status, then the message.
@@ -62,7 +68,14 @@ export declare function getOperationOptions(executeFunctions: IExecuteFunctions,
  */
 export declare function buildHttpOptions(method: IHttpRequestMethods, url: string, credentials: IPrestaShopCredentials, rawMode: boolean, timeout: number, body?: string): IHttpRequestOptions;
 /**
- * Capture complete request information for debugging
+ * Mask a secret for debug output: keep the first 4 characters to help
+ * identify which key was used, never expose the full value.
+ */
+export declare function maskSecret(secret: unknown): string;
+/**
+ * Capture complete request information for debugging.
+ * The API key is the Basic auth username, so both the Authorization header
+ * and the username must be masked to avoid persisting the key in execution data.
  */
 export declare function captureRequestDebugInfo(options: any, credentials: any, rawMode: boolean, operation: string, resource: string, body?: string): any;
 /**

package/dist/nodes/PrestaShop8/helpers/http.js

@@ -7,6 +7,7 @@ exports.describeError = describeError;
 exports.withRetry = withRetry;
 exports.getOperationOptions = getOperationOptions;
 exports.buildHttpOptions = buildHttpOptions;
+exports.maskSecret = maskSecret;
 exports.captureRequestDebugInfo = captureRequestDebugInfo;
 exports.wrapResponse = wrapResponse;
 exports.executeHttpRequest = executeHttpRequest;
@@ -42,29 +43,29 @@ function sleep(ms) {
  * Retries on network/timeout errors, 5xx server errors and 429 rate-limit.
  * Never retries on 4xx (invalid key, not found, invalid XML, etc.).
  */
-function isRetryableError(error) {
-    var _a, _b;
+function isRetryableError(error, nonIdempotent = false) {
+    var _a, _b, _c;
     // Network / timeout errors expose a code on the error or its cause
     const code = (error === null || error === void 0 ? void 0 : error.code) || ((_a = error === null || error === void 0 ? void 0 : error.cause) === null || _a === void 0 ? void 0 : _a.code);
-    const retryableCodes = [
-        'ETIMEDOUT',
-        'ECONNRESET',
-        'ECONNREFUSED',
-        'ECONNABORTED',
-        'ENOTFOUND',
-        'EAI_AGAIN',
-        'EPIPE',
-    ];
-    if (code && retryableCodes.includes(code)) {
+    // Errors raised before the request could reach the server: always safe to retry
+    const preSendCodes = ['ECONNREFUSED', 'ENOTFOUND', 'EAI_AGAIN'];
+    // Errors where the request may already have been processed by the server:
+    // unsafe to retry for non-idempotent calls (duplicate records)
+    const ambiguousCodes = ['ETIMEDOUT', 'ECONNRESET', 'ECONNABORTED', 'EPIPE'];
+    if (code && preSendCodes.includes(code)) {
         return true;
     }
+    if (code && ambiguousCodes.includes(code)) {
+        return !nonIdempotent;
+    }
     // "socket hang up" and timeout messages have no stable code
     const message = String((error === null || error === void 0 ? void 0 : error.message) || '').toLowerCase();
     if (message.includes('socket hang up') || message.includes('timeout')) {
-        return true;
+        return !nonIdempotent;
     }
-    // HTTP status: retry on 429 (rate-limit) and 5xx (server errors) only
-    const status = (error === null || error === void 0 ? void 0 : error.httpCode) || ((_b = error === null || error === void 0 ? void 0 : error.response) === null || _b === void 0 ? void 0 : _b.status);
+    // HTTP status: retry on 429 (rate-limit) and 5xx (server errors) only.
+    // n8n's NodeApiError exposes httpCode as a string, so coerce to number.
+    const status = Number((_b = error === null || error === void 0 ? void 0 : error.httpCode) !== null && _b !== void 0 ? _b : (_c = error === null || error === void 0 ? void 0 : error.response) === null || _c === void 0 ? void 0 : _c.status);
     if (status === 429 || (status >= 500 && status <= 599)) {
         return true;
     }
@@ -100,7 +101,7 @@ async function withRetry(retry, fn) {
             return await fn();
         }
         catch (error) {
-            if (attempt >= maxRetries || !isRetryableError(error)) {
+            if (attempt >= maxRetries || !isRetryableError(error, retry.nonIdempotent)) {
                 throw error;
             }
             // attempt is 0-based; report the upcoming retry number (1-based)
@@ -155,7 +156,20 @@ function buildHttpOptions(method, url, credentials, rawMode, timeout, body) {
     };
 }
 /**
- * Capture complete request information for debugging
+ * Mask a secret for debug output: keep the first 4 characters to help
+ * identify which key was used, never expose the full value.
+ */
+function maskSecret(secret) {
+    const str = typeof secret === 'string' ? secret : '';
+    if (!str) {
+        return '';
+    }
+    return str.length > 8 ? `${str.slice(0, 4)}***` : '***';
+}
+/**
+ * Capture complete request information for debugging.
+ * The API key is the Basic auth username, so both the Authorization header
+ * and the username must be masked to avoid persisting the key in execution data.
  */
 function captureRequestDebugInfo(options, credentials, rawMode, operation, resource, body) {
     return {
@@ -163,12 +177,12 @@ function captureRequestDebugInfo(options, credentials, rawMode, operation, resou
         url: options.url,
         headers: {
             ...options.headers,
-            'Authorization': `Basic ${Buffer.from(credentials.apiKey + ':').toString('base64')}`,
+            'Authorization': 'Basic [REDACTED]',
             'User-Agent': 'n8n-prestashop8-node/1.0.0',
         },
         authentication: {
             type: 'Basic Auth',
-            username: credentials.apiKey,
+            username: maskSecret(credentials.apiKey),
             password: '[HIDDEN]',
             baseUrl: credentials.baseUrl,
         },
@@ -202,27 +216,37 @@ async function executeHttpRequest(helpers, options, credentials, rawMode, operat
     const requestUrl = options.url;
     const debugInfo = captureRequestDebugInfo(options, credentials, rawMode, operation, resource, body);
     try {
-        const response = await withRetry(retry, () => helpers.httpRequest(options));
+        // POST (create) is not idempotent: ambiguous network errors must not be retried
+        const retryOptions = { ...retry, nonIdempotent: options.method === 'POST' };
+        // Request the full response so real headers and status code can be surfaced
+        const rawResponse = await withRetry(retryOptions, () => helpers.httpRequest({ ...options, returnFullResponse: true }));
+        // Older n8n helpers may ignore returnFullResponse and return the body directly
+        const isFullResponse = rawResponse !== null &&
+            typeof rawResponse === 'object' &&
+            'body' in rawResponse &&
+            ('statusCode' in rawResponse || 'headers' in rawResponse);
         return {
-            response,
+            response: isFullResponse ? rawResponse.body : rawResponse,
             debugInfo,
             url: requestUrl,
-            responseHeaders: {},
-            statusCode: 200,
+            responseHeaders: (isFullResponse && rawResponse.headers) || {},
+            statusCode: (isFullResponse && rawResponse.statusCode) || 200,
         };
     }
     catch (error) {
         if (neverError) {
+            // n8n's NodeApiError exposes httpCode as a string: coerce to number
+            const errorStatus = Number((_a = error.httpCode) !== null && _a !== void 0 ? _a : (_b = error.response) === null || _b === void 0 ? void 0 : _b.status) || 500;
             const errorResponse = {
-                status: error.httpCode || ((_a = error.response) === null || _a === void 0 ? void 0 : _a.status) || 500,
-                message: ((_b = error.response) === null || _b === void 0 ? void 0 : _b.data) || '',
+                status: errorStatus,
+                message: ((_c = error.response) === null || _c === void 0 ? void 0 : _c.data) || '',
             };
             return {
                 response: errorResponse,
                 debugInfo,
                 url: requestUrl,
-                responseHeaders: ((_c = error.response) === null || _c === void 0 ? void 0 : _c.headers) || {},
-                statusCode: error.httpCode || ((_d = error.response) === null || _d === void 0 ? void 0 : _d.status) || 500,
+                responseHeaders: ((_d = error.response) === null || _d === void 0 ? void 0 : _d.headers) || {},
+                statusCode: errorStatus,
             };
         }
         throw error;

package/dist/nodes/PrestaShop8/loadOptions.d.ts

@@ -1,6 +1,5 @@
 import { ILoadOptionsFunctions, INodePropertyOptions } from 'n8n-workflow';
 export declare const loadOptionsMethods: {
     getOperations(this: ILoadOptionsFunctions): Promise<INodePropertyOptions[]>;
-    getRequiredFields(this: ILoadOptionsFunctions): Promise<INodePropertyOptions[]>;
     getAvailableFields(this: ILoadOptionsFunctions): Promise<INodePropertyOptions[]>;
 };

package/dist/nodes/PrestaShop8/loadOptions.js

@@ -1,37 +1,4 @@
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.loadOptionsMethods = void 0;
 const types_1 = require("./types");
@@ -89,40 +56,6 @@ exports.loadOptionsMethods = {
         }
         return operations;
     },
-    // Load required fields for CREATE operation based on resource
-    async getRequiredFields() {
-        try {
-            const resource = this.getCurrentNodeParameter('resource');
-            if (!resource) {
-                return [{
-                        name: 'Custom Field',
-                        value: '__custom__',
-                        description: 'Enter a custom field name',
-                    }];
-            }
-            const { REQUIRED_FIELDS_BY_RESOURCE } = await Promise.resolve().then(() => __importStar(require('./utils')));
-            const requiredFields = REQUIRED_FIELDS_BY_RESOURCE[resource] || [];
-            if (requiredFields.length === 0) {
-                return [{
-                        name: 'No specific required fields',
-                        value: 'none',
-                        description: 'This resource has no specific required fields defined',
-                    }];
-            }
-            return requiredFields.map((field) => ({
-                name: field,
-                value: field,
-                description: `Required field: ${field}`,
-            }));
-        }
-        catch {
-            return [{
-                    name: 'Custom Field',
-                    value: '__custom__',
-                    description: 'Enter a custom field name',
-                }];
-        }
-    },
     // Load available fields from resource schemas for autocomplete
     async getAvailableFields() {
         try {

package/dist/nodes/PrestaShop8/resourceSchemas.js

@@ -3979,6 +3979,11 @@ function convertFieldValue(value, fieldInfo) {
     if (value === null || value === undefined || value === '') {
         return value;
     }
+    // Multilang fields arrive as arrays of {id, value} on multi-language shops;
+    // never stringify objects/arrays or the data would become "[object Object]"
+    if (typeof value === 'object') {
+        return value;
+    }
     switch (fieldInfo.type) {
         case 'number':
             const num = Number(value);

package/dist/nodes/PrestaShop8/types.js

@@ -226,6 +226,17 @@ exports.PRESTASHOP_RESOURCES = {
         supportsGetById: true,
         supportsSearch: true,
     },
+    order_invoices: {
+        name: 'order_invoices',
+        displayName: 'Order Invoices',
+        description: 'Order invoices (order_invoices)',
+        supportsCreate: true,
+        supportsUpdate: true,
+        supportsDelete: true,
+        supportsList: true,
+        supportsGetById: true,
+        supportsSearch: true,
+    },
     carts: {
         name: 'carts',
         displayName: 'Carts',

package/dist/nodes/PrestaShop8/utils/response.js

@@ -6,6 +6,7 @@ exports.processResponseForMode = processResponseForMode;
 exports.simplifyPrestashopResponse = simplifyPrestashopResponse;
 exports.buildPrestashopXml = buildPrestashopXml;
 const fieldMappings_1 = require("../fieldMappings");
+const xml_1 = require("./xml");
 /**
  * Normalize sort parameter to include _DESC by default
  */
@@ -29,15 +30,17 @@ function processDisplayParameter(displayValue, resource, customFields) {
     if (displayValue === 'minimal') {
         return null;
     }
-    else if (displayValue === 'custom' && customFields) {
-        const fields = customFields.trim();
+    else if (displayValue === 'custom') {
+        const fields = (customFields || '').trim();
         if (fields.startsWith('[') && fields.endsWith(']')) {
             return fields;
         }
-        else {
-            const fieldList = fields.split(',').map(f => f.trim()).filter(f => f).join(',');
-            return `[${fieldList}]`;
+        const fieldList = fields.split(',').map(f => f.trim()).filter(f => f).join(',');
+        if (!fieldList) {
+            // 'display=custom' is not a valid PrestaShop value: fail with a clear message
+            throw new Error('Display "Custom Fields" requires at least one field name in Custom Fields');
         }
+        return `[${fieldList}]`;
     }
     else if (displayValue === 'full') {
         return 'full';
@@ -60,8 +63,11 @@ function processResponseForMode(rawData, resource) {
         if (resourceKey && Array.isArray(simplified[resourceKey])) {
             return simplified[resourceKey];
         }
-        // For single item responses (get by ID), unwrap the resource level
-        const singleResourceKey = keys.find(key => (key === resource || key === resource.replace(/s$/, '')) &&
+        // For single item responses (get by ID), unwrap the resource level.
+        // Irregular plurals (categories -> category, addresses -> address, ...)
+        // must use the singular map: a naive 's' strip never matches them.
+        const singular = xml_1.SINGULAR_RESOURCE_MAP[resource] || (resource.endsWith('s') ? resource.slice(0, -1) : resource);
+        const singleResourceKey = keys.find(key => (key === resource || key === singular) &&
             typeof simplified[key] === 'object' &&
             !Array.isArray(simplified[key]));
         if (singleResourceKey && simplified[singleResourceKey]) {

package/dist/nodes/PrestaShop8/utils/xml.js

@@ -59,20 +59,24 @@ function getSingularResource(resource) {
     return exports.SINGULAR_RESOURCE_MAP[resource] || (resource.endsWith('s') ? resource.slice(0, -1) : resource);
 }
 /**
- * Escapes XML special characters
+ * Wraps a value in a CDATA section without altering it.
+ * Content inside CDATA must NOT be XML-escaped (it would be double-encoded
+ * and stored escaped in PrestaShop). Any ']]>' occurrence is split across
+ * two CDATA sections to prevent breaking out of the section.
  */
-function escapeXml(unsafe) {
-    const str = unsafe !== null && unsafe !== undefined ? String(unsafe) : '';
-    return str.replace(/[<>&'"]/g, function (c) {
-        switch (c) {
-            case '<': return '&lt;';
-            case '>': return '&gt;';
-            case '&': return '&amp;';
-            case "'": return '&apos;';
-            case '"': return '&quot;';
-            default: return c;
-        }
-    });
+function cdata(value) {
+    const str = value !== null && value !== undefined ? String(value) : '';
+    return `<![CDATA[${str.replace(/\]\]>/g, ']]]]><![CDATA[>')}]]>`;
+}
+/**
+ * Validates a user-provided field name so it can be used as an XML tag name.
+ * Prevents injection of extra elements via crafted field names.
+ */
+function assertValidXmlFieldName(name) {
+    if (!/^[A-Za-z_][A-Za-z0-9_.-]*$/.test(name)) {
+        throw new Error(`Invalid field name "${name}": only letters, digits, "_", "-" and "." are allowed`);
+    }
+    return name;
 }
 /**
  * Builds PrestaShop XML structure for key-value pairs (shared by Create and Update)
@@ -100,17 +104,18 @@ function buildFieldsXml(fields) {
     }
     let xml = '';
     for (const [fieldName, fieldValues] of Object.entries(fieldGroups)) {
+        assertValidXmlFieldName(fieldName);
         if (fieldValues.some(f => f.langId)) {
             xml += `    <${fieldName}>\n`;
             for (const fieldValue of fieldValues) {
                 if (fieldValue.langId) {
-                    xml += `      <language id="${fieldValue.langId}"><![CDATA[${escapeXml(fieldValue.value)}]]></language>\n`;
+                    xml += `      <language id="${fieldValue.langId}">${cdata(fieldValue.value)}</language>\n`;
                 }
             }
             xml += `    </${fieldName}>\n`;
         }
         else {
-            xml += `    <${fieldName}><![CDATA[${escapeXml(fieldValues[0].value)}]]></${fieldName}>\n`;
+            xml += `    <${fieldName}>${cdata(fieldValues[0].value)}</${fieldName}>\n`;
         }
     }
     return xml;
@@ -137,7 +142,7 @@ function buildUpdateXml(resource, id, fields) {
     xml += '<prestashop xmlns:xlink="http://www.w3.org/1999/xlink">\n';
     xml += `  <${singularResource}>\n`;
     xml += buildFieldsXml(fields);
-    xml += `    <id><![CDATA[${escapeXml(id)}]]></id>\n`;
+    xml += `    <id>${cdata(id)}</id>\n`;
     xml += `  </${singularResource}>\n`;
     xml += '</prestashop>';
     return xml;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "n8n-nodes-prestashop8",
-  "version": "2.6.1",
+  "version": "2.8.0",
   "description": "Nœud n8n personnalisé pour PrestaShop 8 avec support CRUD complet et conversion XML/JSON automatique",
   "keywords": [
     "n8n-community-node-package",
@@ -23,11 +23,9 @@
     "url": "https://github.com/PPCM/n8n-nodes-prestashop8/issues"
   },
   "engines": {
-    "node": ">=16.10",
-    "pnpm": ">=7.18"
+    "node": ">=16.10"
   },
-  "packageManager": "pnpm@7.18.0",
-  "main": "index.js",
+  "main": "dist/index.js",
   "scripts": {
     "build": "tsc && gulp build:icons",
     "dev": "tsc --watch",
@@ -86,7 +84,7 @@
     "brace-expansion": "^1.1.13",
     "uuid": "^14.0.0",
     "axios": "^1.16.0",
-    "form-data": "^4.0.4",
+    "form-data": "^4.0.6",
     "follow-redirects": "^1.16.0"
   }
 }