n8n 2.16.0 → 2.17.0

package/dist/public-api/v1/openapi.yml

@@ -13,6 +13,7 @@ servers:
   - url: /api/v1
 security:
   - ApiKeyAuth: []
+  - BearerAuth: []
 tags:
   - name: User
     description: Operations about users
@@ -38,6 +39,8 @@ tags:
     description: Operations about community packages
   - name: Discover
     description: API capability discovery
+  - name: Insights
+    description: Operations about insights
 externalDocs:
   description: n8n API documentation
   url: https://docs.n8n.io/api/
@@ -119,7 +122,7 @@ paths:
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/credential'
+              $ref: '#/components/schemas/credentialCreate'
       responses:
         '200':
           description: Operation successful.
@@ -128,9 +131,13 @@ paths:
               schema:
                 $ref: '#/components/schemas/create-credential-response'
         '400':
-          description: Bad request - invalid credential type or data.
+          $ref: '#/components/responses/badRequest'
         '401':
           $ref: '#/components/responses/unauthorized'
+        '403':
+          $ref: '#/components/responses/forbidden'
+        '404':
+          $ref: '#/components/responses/notFound'
         '415':
           description: Unsupported media type.
   /credentials/{id}:
@@ -676,7 +683,7 @@ paths:
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/workflow'
+              $ref: '#/components/schemas/workflowCreate'
         required: true
       responses:
         '200':
@@ -689,6 +696,10 @@ paths:
           $ref: '#/components/responses/badRequest'
         '401':
           $ref: '#/components/responses/unauthorized'
+        '403':
+          $ref: '#/components/responses/forbidden'
+        '404':
+          $ref: '#/components/responses/notFound'
     get:
       x-eov-operation-id: getWorkflows
       x-eov-operation-handler: v1/handlers/workflows/workflows.handler
@@ -2178,6 +2189,49 @@ paths:
                         description: URL to the full OpenAPI specification
         '401':
           $ref: '#/components/responses/unauthorized'
+  /insights/summary:
+    get:
+      x-eov-operation-id: getInsightsSummary
+      x-eov-operation-handler: v1/handlers/insights/insights.handler
+      tags:
+        - Insights
+      summary: Retrieve insights summary
+      description: Retrieve the insights summary for the selected date range.
+      parameters:
+        - name: startDate
+          in: query
+          required: false
+          description: ISO 8601 start date. Defaults to 7 days ago.
+          schema:
+            type: string
+            format: date-time
+        - name: endDate
+          in: query
+          required: false
+          description: ISO 8601 end date. Defaults to now.
+          schema:
+            type: string
+            format: date-time
+        - name: projectId
+          in: query
+          required: false
+          description: Project identifier to filter insights by project.
+          schema:
+            type: string
+            example: VmwOO9HeTEj20kxM
+      responses:
+        '200':
+          description: Operation successful.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/insights'
+        '400':
+          $ref: '#/components/responses/badRequest'
+        '401':
+          $ref: '#/components/responses/unauthorized'
+        '403':
+          $ref: '#/components/responses/forbidden'
 components:
   schemas:
     audit:
@@ -2258,6 +2312,10 @@ components:
         - id
         - name
         - type
+        - isManaged
+        - isGlobal
+        - isResolvable
+        - resolvableAllowFallback
         - createdAt
         - updatedAt
       type: object
@@ -2272,6 +2330,32 @@ components:
         type:
           type: string
           example: githubApi
+        isManaged:
+          type: boolean
+          readOnly: true
+          description: Whether the credential is managed by n8n (managed credentials cannot be edited via the API).
+          example: false
+        isGlobal:
+          type: boolean
+          readOnly: true
+          description: Whether the credential is available for use by all users.
+          example: false
+        isResolvable:
+          type: boolean
+          readOnly: true
+          description: Whether the credential can be dynamically resolved by a resolver.
+          example: false
+        resolvableAllowFallback:
+          type: boolean
+          readOnly: true
+          description: Whether the credential resolver may fall back to static credentials if dynamic resolution fails.
+          example: false
+        resolverId:
+          type: string
+          nullable: true
+          readOnly: true
+          description: ID of the dynamic credential resolver associated with this credential, if any.
+          example: null
         createdAt:
           type: string
           format: date-time
@@ -2332,6 +2416,46 @@ components:
           description: Paginate through credentials by setting the cursor parameter to a nextCursor attribute returned by a previous request. Default value fetches the first "page" of the collection.
           nullable: true
           example: MTIzZTQ1NjctZTg5Yi0xMmQzLWE0NTYtNDI2NjE0MTc0MDA
+    credentialCreate:
+      required:
+        - name
+        - type
+        - data
+      type: object
+      properties:
+        id:
+          type: string
+          readOnly: true
+          example: R2DjclaysHbqn778
+        name:
+          type: string
+          example: Joe's Github Credentials
+        type:
+          type: string
+          example: githubApi
+        data:
+          type: object
+          writeOnly: true
+          example:
+            accessToken: ada612vad6fa5df4adf5a5dsf4389adsf76da7s
+        isResolvable:
+          type: boolean
+          example: false
+          description: Whether this credential has resolvable fields
+        createdAt:
+          type: string
+          format: date-time
+          readOnly: true
+          example: '2022-04-29T11:02:29.842Z'
+        updatedAt:
+          type: string
+          format: date-time
+          readOnly: true
+          example: '2022-04-29T11:02:29.842Z'
+        projectId:
+          type: string
+          description: Project to create the credential in. Defaults to the user's personal project.
+          example: VmwOO9HeTEj20kxM
     credential:
       required:
         - name
@@ -2645,9 +2769,9 @@ components:
             - none
             - workflowsFromAList
             - workflowsFromSameOwner
-          default: workflowsFromSameOwner
           description: |
             Controls which workflows are allowed to call this workflow using the Execute Workflow node.
+            Defaults to workflowsFromSameOwner.
 
             Available options:
             - `any`: Any workflow can call this workflow (no restrictions)
@@ -2668,9 +2792,9 @@ components:
           description: Estimated time saved per execution in minutes
         availableInMCP:
           type: boolean
-          default: false
           description: |
             Controls whether this workflow is accessible via the Model Context Protocol (MCP).
+            Defaults to false.
 
             When enabled, this workflow can be called by MCP clients (AI assistants and other tools
             that support MCP). This allows external AI tools to discover and execute this workflow
@@ -2865,6 +2989,100 @@ components:
           description: Paginate through workflows by setting the cursor parameter to a nextCursor attribute returned by a previous request. Default value fetches the first "page" of the collection.
           nullable: true
           example: MTIzZTQ1NjctZTg5Yi0xMmQzLWE0NTYtNDI2NjE0MTc0MDA
+    workflowCreate:
+      type: object
+      additionalProperties: false
+      required:
+        - name
+        - nodes
+        - connections
+        - settings
+      properties:
+        id:
+          type: string
+          readOnly: true
+          example: 2tUt1wbLX592XDdX
+        name:
+          type: string
+          example: Workflow 1
+        active:
+          type: boolean
+          readOnly: true
+        createdAt:
+          type: string
+          format: date-time
+          readOnly: true
+        updatedAt:
+          type: string
+          format: date-time
+          readOnly: true
+        isArchived:
+          type: boolean
+          readOnly: true
+        versionId:
+          type: string
+          readOnly: true
+          description: Current version identifier used for optimistic locking
+        triggerCount:
+          type: integer
+          readOnly: true
+          description: Number of active trigger nodes in the workflow
+        nodes:
+          type: array
+          items:
+            $ref: '#/components/schemas/node'
+        connections:
+          type: object
+          example:
+            Jira:
+              main:
+                - - node: Jira
+                    type: main
+                    index: 0
+        settings:
+          $ref: '#/components/schemas/workflowSettings'
+        staticData:
+          example:
+            lastId: 1
+          anyOf:
+            - type: string
+              format: jsonString
+              nullable: true
+            - type: object
+              nullable: true
+        pinData:
+          type: object
+          nullable: true
+          description: Pinned sample data for nodes, keyed by node name
+        projectId:
+          type: string
+          description: Target project to create the workflow in. Defaults to the user's personal project.
+          example: VmwOO9HeTEj20kxM
+        meta:
+          type: object
+          nullable: true
+          readOnly: true
+          description: Workflow metadata such as template information
+          properties:
+            onboardingId:
+              type: string
+            templateId:
+              type: string
+            instanceId:
+              type: string
+            templateCredsSetupCompleted:
+              type: boolean
+        tags:
+          type: array
+          items:
+            $ref: '#/components/schemas/tag'
+          readOnly: true
+        shared:
+          type: array
+          items:
+            $ref: '#/components/schemas/sharedWorkflow'
+        activeVersion:
+          $ref: '#/components/schemas/activeVersion'
     workflowVersion:
       type: object
       additionalProperties: false
@@ -3515,6 +3733,99 @@ components:
         version:
           type: string
           description: Specific semver version to install
+        verify:
+          type: boolean
+          description: |
+            Whether to verify the package against the n8n-vetted package list. Required when the instance has N8N_UNVERIFIED_PACKAGES_ENABLED=false.
+    insights:
+      type: object
+      required:
+        - total
+        - failed
+        - failureRate
+        - timeSaved
+        - averageRunTime
+      properties:
+        total:
+          type: object
+          required:
+            - value
+            - deviation
+            - unit
+          properties:
+            value:
+              type: number
+            deviation:
+              type: number
+              nullable: true
+            unit:
+              type: string
+              enum:
+                - count
+        failed:
+          type: object
+          required:
+            - value
+            - deviation
+            - unit
+          properties:
+            value:
+              type: number
+            deviation:
+              type: number
+              nullable: true
+            unit:
+              type: string
+              enum:
+                - count
+        failureRate:
+          type: object
+          required:
+            - value
+            - deviation
+            - unit
+          properties:
+            value:
+              type: number
+            deviation:
+              type: number
+              nullable: true
+            unit:
+              type: string
+              enum:
+                - ratio
+        timeSaved:
+          type: object
+          required:
+            - value
+            - deviation
+            - unit
+          properties:
+            value:
+              type: number
+            deviation:
+              type: number
+              nullable: true
+            unit:
+              type: string
+              enum:
+                - minute
+        averageRunTime:
+          type: object
+          required:
+            - value
+            - deviation
+            - unit
+          properties:
+            value:
+              type: number
+            deviation:
+              type: number
+              nullable: true
+            unit:
+              type: string
+              enum:
+                - millisecond
     error:
       required:
         - message
@@ -3606,12 +3917,12 @@ components:
   responses:
     unauthorized:
       description: Unauthorized
-    notFound:
-      description: The specified resource was not found.
     badRequest:
       description: The request is invalid or provides malformed data.
     forbidden:
       description: Forbidden
+    notFound:
+      description: The specified resource was not found.
     conflict:
       description: Conflict
     NotFound:
@@ -3743,3 +4054,7 @@ components:
       type: apiKey
       in: header
       name: X-N8N-API-KEY
+    BearerAuth:
+      type: http
+      scheme: bearer
+      bearerFormat: JWT

package/dist/public-api/v1/shared/middlewares/global.middleware.d.ts

@@ -16,7 +16,7 @@ export declare const validCursor: (req: PaginatedRequest, res: express.Response,
 export type ScopeTaggedMiddleware = ((...args: unknown[]) => unknown) & {
     __apiKeyScope: ApiKeyScope;
 };
-export declare const apiKeyHasScope: (apiKeyScope: ApiKeyScope) => ScopeTaggedMiddleware;
+export declare const publicApiScope: (apiKeyScope: ApiKeyScope) => ScopeTaggedMiddleware;
 export declare const apiKeyHasScopeWithGlobalScopeFallback: (config: {
     scope: ApiKeyScope & Scope;
 } | {

package/dist/public-api/v1/shared/middlewares/global.middleware.js

@@ -1,12 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.isLicensed = exports.validLicenseWithUserQuota = exports.apiKeyHasScopeWithGlobalScopeFallback = exports.apiKeyHasScope = exports.validCursor = exports.projectScope = exports.globalScope = void 0;
+exports.isLicensed = exports.validLicenseWithUserQuota = exports.apiKeyHasScopeWithGlobalScopeFallback = exports.publicApiScope = exports.validCursor = exports.projectScope = exports.globalScope = void 0;
 const di_1 = require("@n8n/di");
 const feature_not_licensed_error_1 = require("../../../../errors/feature-not-licensed.error");
 const not_found_error_1 = require("../../../../errors/response-errors/not-found.error");
 const license_1 = require("../../../../license");
 const check_access_1 = require("../../../../permissions.ee/check-access");
-const public_api_key_service_1 = require("../../../../services/public-api-key.service");
 const pagination_service_1 = require("../services/pagination.service");
 const UNLIMITED_USERS_QUOTA = -1;
 const buildScopeMiddleware = (scopes, resource, { globalOnly } = { globalOnly: false }) => {
@@ -68,14 +67,26 @@ function tagMiddleware(middleware, apiKeyScope) {
     const tagged = Object.assign((req, res, next) => middleware(req, res, next), { __apiKeyScope: apiKeyScope });
     return tagged;
 }
-const apiKeyHasScope = (apiKeyScope) => {
-    const middleware = di_1.Container.get(public_api_key_service_1.PublicApiKeyService).getApiKeyScopeMiddleware(apiKeyScope);
-    return tagMiddleware(middleware, apiKeyScope);
-};
-exports.apiKeyHasScope = apiKeyHasScope;
+function makePublicApiScopeEnforcementMiddleware(endpointScope) {
+    return async (req, res, next) => {
+        const { tokenGrant } = req;
+        if (!tokenGrant) {
+            res.status(403).json({ message: 'Forbidden' });
+            return;
+        }
+        if (!tokenGrant.apiKeyScopes?.includes(endpointScope)) {
+            res.status(403).json({ message: 'Forbidden' });
+            return;
+        }
+        next();
+        return;
+    };
+}
+const publicApiScope = (apiKeyScope) => tagMiddleware(makePublicApiScopeEnforcementMiddleware(apiKeyScope), apiKeyScope);
+exports.publicApiScope = publicApiScope;
 const apiKeyHasScopeWithGlobalScopeFallback = (config) => {
     const scope = 'scope' in config ? config.scope : config.apiKeyScope;
-    return tagMiddleware(di_1.Container.get(public_api_key_service_1.PublicApiKeyService).getApiKeyScopeMiddleware(scope), scope);
+    return tagMiddleware(makePublicApiScopeEnforcementMiddleware(scope), scope);
 };
 exports.apiKeyHasScopeWithGlobalScopeFallback = apiKeyHasScopeWithGlobalScopeFallback;
 const validLicenseWithUserQuota = (_, res, next) => {

package/dist/public-api/v1/shared/middlewares/global.middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"global.middleware.js","sourceRoot":"","sources":["../../../../../src/public-api/v1/shared/middlewares/global.middleware.ts"],"names":[],"mappings":";;;AAGA,gCAAoC;AAIpC,oFAA8E;AAC9E,8EAAyE;AACzE,uCAAoC;AACpC,gEAA8D;AAC9D,8EAAwE;AAGxE,uEAA8D;AAE9D,MAAM,qBAAqB,GAAG,CAAC,CAAC,CAAC;AAIjC,MAAM,oBAAoB,GAAG,CAC5B,MAAe,EACf,QAA+B,EAC/B,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,EACrC,EAAE;IACH,OAAO,KAAK,EACX,GAAgE,EAChE,GAAqB,EACrB,IAA0B,EACS,EAAE;QACrC,MAAM,MAAM,GAAyE,EAAE,CAAC;QACxF,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACnB,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;gBAC7B,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,CAAC;iBAAM,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;gBACtC,MAAM,CAAC,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACrC,CAAC;QACF,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC/D,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC;QAC7C,CAAC;QAED,IAAI,CAAC;YACJ,IAAI,CAAC,CAAC,MAAM,IAAA,4BAAa,EAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;gBAClE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;YACvD,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,+BAAa,EAAE,CAAC;gBACpC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACzD,CAAC;YACD,MAAM,KAAK,CAAC;QACb,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACH,CAAC,CAAC;AAEK,MAAM,WAAW,GAAG,CAAC,MAAuB,EAAE,EAAE,CACtD,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;AADrF,QAAA,WAAW,eAC0E;AAE3F,MAAM,YAAY,GAAG,CAAC,MAAuB,EAAE,QAA8B,EAAE,EAAE,CACvF,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;AADrF,QAAA,YAAY,gBACyE;AAE3F,MAAM,WAAW,GAAG,CAC1B,GAAqB,EACrB,GAAqB,EACrB,IAA0B,EACA,EAAE;IAC5B,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC;QAC7B,IAAI,CAAC;YACJ,MAAM,cAAc,GAAG,IAAA,iCAAY,EAAC,MAAM,CAAC,CAAC;YAC5C,IAAI,QAAQ,IAAI,cAAc,EAAE,CAAC;gBAChC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC;gBACzC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC;YACxC,CAAC;iBAAM,CAAC;gBACP,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC;gBACzC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC;YACxC,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC3B,OAAO,EAAE,gCAAgC;aACzC,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,OAAO,IAAI,EAAE,CAAC;AACf,CAAC,CAAC;AAxBW,QAAA,WAAW,eAwBtB;AAMF,SAAS,aAAa,CACrB,UAA2C,EAC3C,WAAwB;IAExB,MAAM,MAAM,GAA0B,MAAM,CAAC,MAAM,CAClD,CAAC,GAAY,EAAE,GAAY,EAAE,IAAa,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,EACzE,EAAE,aAAa,EAAE,WAAW,EAAE,CAC9B,CAAC;IACF,OAAO,MAAM,CAAC;AACf,CAAC;AAEM,MAAM,cAAc,GAAG,CAAC,WAAwB,EAAE,EAAE;IAC1D,MAAM,UAAU,GAAG,cAAS,CAAC,GAAG,CAAC,4CAAmB,CAAC,CAAC,wBAAwB,CAAC,WAAW,CAAC,CAAC;IAC5F,OAAO,aAAa,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AAC/C,CAAC,CAAC;AAHW,QAAA,cAAc,kBAGzB;AAEK,MAAM,qCAAqC,GAAG,CACpD,MAAyF,EACxF,EAAE;IACH,MAAM,KAAK,GAAG,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;IACpE,OAAO,aAAa,CAAC,cAAS,CAAC,GAAG,CAAC,4CAAmB,CAAC,CAAC,wBAAwB,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;AACjG,CAAC,CAAC;AALW,QAAA,qCAAqC,yCAKhD;AAEK,MAAM,yBAAyB,GAAG,CACxC,CAAkB,EAClB,GAAqB,EACrB,IAA0B,EACA,EAAE;IAC5B,MAAM,OAAO,GAAG,cAAS,CAAC,GAAG,CAAC,iBAAO,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,aAAa,EAAE,KAAK,qBAAqB,EAAE,CAAC;QACvD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC3B,OAAO,EAAE,gFAAgF;SACzF,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,EAAE,CAAC;AACf,CAAC,CAAC;AAbW,QAAA,yBAAyB,6BAapC;AAEK,MAAM,UAAU,GAAG,CAAC,OAA8B,EAAE,EAAE;IAC5D,OAAO,KAAK,EAAE,CAAuB,EAAE,GAAqB,EAAE,IAA0B,EAAE,EAAE;QAC3F,IAAI,cAAS,CAAC,GAAG,CAAC,iBAAO,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,EAAE,CAAC;QAE9D,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,oDAAuB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACxF,CAAC,CAAC;AACH,CAAC,CAAC;AANW,QAAA,UAAU,cAMrB"}
+{"version":3,"file":"global.middleware.js","sourceRoot":"","sources":["../../../../../src/public-api/v1/shared/middlewares/global.middleware.ts"],"names":[],"mappings":";;;AAGA,gCAAoC;AAIpC,oFAA8E;AAC9E,8EAAyE;AACzE,uCAAoC;AACpC,gEAA8D;AAG9D,uEAA8D;AAE9D,MAAM,qBAAqB,GAAG,CAAC,CAAC,CAAC;AAIjC,MAAM,oBAAoB,GAAG,CAC5B,MAAe,EACf,QAA+B,EAC/B,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,EACrC,EAAE;IACH,OAAO,KAAK,EACX,GAAgE,EAChE,GAAqB,EACrB,IAA0B,EACS,EAAE;QACrC,MAAM,MAAM,GAAyE,EAAE,CAAC;QACxF,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACnB,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;gBAC7B,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,CAAC;iBAAM,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;gBACtC,MAAM,CAAC,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACrC,CAAC;QACF,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC/D,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC;QAC7C,CAAC;QAED,IAAI,CAAC;YACJ,IAAI,CAAC,CAAC,MAAM,IAAA,4BAAa,EAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;gBAClE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;YACvD,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,+BAAa,EAAE,CAAC;gBACpC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACzD,CAAC;YACD,MAAM,KAAK,CAAC;QACb,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACH,CAAC,CAAC;AAEK,MAAM,WAAW,GAAG,CAAC,MAAuB,EAAE,EAAE,CACtD,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;AADrF,QAAA,WAAW,eAC0E;AAE3F,MAAM,YAAY,GAAG,CAAC,MAAuB,EAAE,QAA8B,EAAE,EAAE,CACvF,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;AADrF,QAAA,YAAY,gBACyE;AAE3F,MAAM,WAAW,GAAG,CAC1B,GAAqB,EACrB,GAAqB,EACrB,IAA0B,EACA,EAAE;IAC5B,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC;QAC7B,IAAI,CAAC;YACJ,MAAM,cAAc,GAAG,IAAA,iCAAY,EAAC,MAAM,CAAC,CAAC;YAC5C,IAAI,QAAQ,IAAI,cAAc,EAAE,CAAC;gBAChC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC;gBACzC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC;YACxC,CAAC;iBAAM,CAAC;gBACP,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC;gBACzC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC;YACxC,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC3B,OAAO,EAAE,gCAAgC;aACzC,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,OAAO,IAAI,EAAE,CAAC;AACf,CAAC,CAAC;AAxBW,QAAA,WAAW,eAwBtB;AAMF,SAAS,aAAa,CACrB,UAA2C,EAC3C,WAAwB;IAExB,MAAM,MAAM,GAA0B,MAAM,CAAC,MAAM,CAClD,CAAC,GAAY,EAAE,GAAY,EAAE,IAAa,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,EACzE,EAAE,aAAa,EAAE,WAAW,EAAE,CAC9B,CAAC;IACF,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,uCAAuC,CAAC,aAA0B;IAC1E,OAAO,KAAK,EACX,GAAyB,EACzB,GAAqB,EACrB,IAA0B,EACV,EAAE;QAClB,MAAM,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC;QAE3B,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;YAC/C,OAAO;QACR,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;YAC/C,OAAO;QACR,CAAC;QAED,IAAI,EAAE,CAAC;QACP,OAAO;IACR,CAAC,CAAC;AACH,CAAC;AAEM,MAAM,cAAc,GAAG,CAAC,WAAwB,EAAE,EAAE,CAC1D,aAAa,CAAC,uCAAuC,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC;AADrE,QAAA,cAAc,kBACuD;AAE3E,MAAM,qCAAqC,GAAG,CACpD,MAAyF,EACxF,EAAE;IACH,MAAM,KAAK,GAAG,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;IACpE,OAAO,aAAa,CAAC,uCAAuC,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;AAC7E,CAAC,CAAC;AALW,QAAA,qCAAqC,yCAKhD;AAEK,MAAM,yBAAyB,GAAG,CACxC,CAAkB,EAClB,GAAqB,EACrB,IAA0B,EACA,EAAE;IAC5B,MAAM,OAAO,GAAG,cAAS,CAAC,GAAG,CAAC,iBAAO,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,aAAa,EAAE,KAAK,qBAAqB,EAAE,CAAC;QACvD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC3B,OAAO,EAAE,gFAAgF;SACzF,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,EAAE,CAAC;AACf,CAAC,CAAC;AAbW,QAAA,yBAAyB,6BAapC;AAEK,MAAM,UAAU,GAAG,CAAC,OAA8B,EAAE,EAAE;IAC5D,OAAO,KAAK,EAAE,CAAuB,EAAE,GAAqB,EAAE,IAA0B,EAAE,EAAE;QAC3F,IAAI,cAAS,CAAC,GAAG,CAAC,iBAAO,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,EAAE,CAAC;QAE9D,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,oDAAuB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACxF,CAAC,CAAC;AACH,CAAC,CAAC;AANW,QAAA,UAAU,cAMrB"}

package/dist/security-audit/risk-reporters/credentials-risk-reporter.d.ts

@@ -1,13 +1,12 @@
 import { SecurityConfig } from '@n8n/config';
-import { CredentialsRepository, ExecutionDataRepository, ExecutionRepository } from '@n8n/db';
+import { CredentialsRepository, ExecutionDataRepository } from '@n8n/db';
 import type { IWorkflowBase } from 'n8n-workflow';
 import type { RiskReporter, Risk } from '../../security-audit/types';
 export declare class CredentialsRiskReporter implements RiskReporter {
     private readonly credentialsRepository;
-    private readonly executionRepository;
     private readonly executionDataRepository;
     private readonly securityConfig;
-    constructor(credentialsRepository: CredentialsRepository, executionRepository: ExecutionRepository, executionDataRepository: ExecutionDataRepository, securityConfig: SecurityConfig);
+    constructor(credentialsRepository: CredentialsRepository, executionDataRepository: ExecutionDataRepository, securityConfig: SecurityConfig);
     report(workflows: IWorkflowBase[]): Promise<Risk.StandardReport | null>;
     private getAllCredsInUse;
     private getAllExistingCreds;

package/dist/security-audit/risk-reporters/credentials-risk-reporter.js

@@ -15,9 +15,8 @@ const db_1 = require("@n8n/db");
 const di_1 = require("@n8n/di");
 const constants_1 = require("../../security-audit/constants");
 let CredentialsRiskReporter = class CredentialsRiskReporter {
-    constructor(credentialsRepository, executionRepository, executionDataRepository, securityConfig) {
+    constructor(credentialsRepository, executionDataRepository, securityConfig) {
         this.credentialsRepository = credentialsRepository;
-        this.executionRepository = executionRepository;
         this.executionDataRepository = executionDataRepository;
         this.securityConfig = securityConfig;
     }
@@ -102,8 +101,7 @@ let CredentialsRiskReporter = class CredentialsRiskReporter {
     async getExecutedWorkflowsInPastDays(days) {
         const date = new Date();
         date.setDate(date.getDate() - days);
-        const executionIds = await this.executionRepository.getIdsSince(date);
-        return await this.executionDataRepository.findByExecutionIds(executionIds);
+        return await this.executionDataRepository.getWorkflowsExecutedSince(date);
     }
     async getCredsInRecentlyExecutedWorkflows(days) {
         const executedWorkflows = await this.getExecutedWorkflowsInPastDays(days);
@@ -124,7 +122,6 @@ exports.CredentialsRiskReporter = CredentialsRiskReporter;
 exports.CredentialsRiskReporter = CredentialsRiskReporter = __decorate([
     (0, di_1.Service)(),
     __metadata("design:paramtypes", [db_1.CredentialsRepository,
-        db_1.ExecutionRepository,
         db_1.ExecutionDataRepository,
         config_1.SecurityConfig])
 ], CredentialsRiskReporter);

package/dist/security-audit/risk-reporters/credentials-risk-reporter.js.map

@@ -1 +1 @@
-{"version":3,"file":"credentials-risk-reporter.js","sourceRoot":"","sources":["../../../src/security-audit/risk-reporters/credentials-risk-reporter.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAA6C;AAC7C,gCAA8F;AAC9F,gCAAkC;AAGlC,0DAAgE;AAIzD,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IACnC,YACkB,qBAA4C,EAC5C,mBAAwC,EACxC,uBAAgD,EAChD,cAA8B;QAH9B,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,wBAAmB,GAAnB,mBAAmB,CAAqB;QACxC,4BAAuB,GAAvB,uBAAuB,CAAyB;QAChD,mBAAc,GAAd,cAAc,CAAgB;IAC7C,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,SAA0B;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,qBAAqB,CAAC;QAEvD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC1D,MAAM,EAAE,aAAa,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC7E,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,mCAAmC,CAAC,IAAI,CAAC,CAAC;QAEnF,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAClF,MAAM,mBAAmB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACxF,MAAM,wBAAwB,GAAG,gBAAgB,CAAC,MAAM,CACvD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CACvC,CAAC;QAEF,MAAM,MAAM,GAAG,CAAC,gBAAgB,EAAE,mBAAmB,EAAE,wBAAwB,CAAC,CAAC;QAEjF,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAErD,MAAM,MAAM,GAAwB;YACnC,IAAI,EAAE,8BAAkB,CAAC,IAAI;YAC7B,QAAQ,EAAE,EAAE;SACZ,CAAC;QAEF,MAAM,IAAI,GAAG,2EAA2E,CAAC;QACzF,MAAM,cAAc,GAAG,iEAAiE,CAAC;QAEzF,MAAM,aAAa,GAAG,CAAC,EAAE,MAAM,EAAsB,EAAE,EAAE,CACxD,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,oBAAoB,CAAC;QAE7D,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACpB,KAAK,EAAE,8BAAkB,CAAC,QAAQ,CAAC,oBAAoB;gBACvD,WAAW,EAAE,CAAC,aAAa,CAAC,gBAAgB,CAAC,EAAE,2BAA2B,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;gBAC3F,cAAc;gBACd,QAAQ,EAAE,gBAAgB;aAC1B,CAAC,CAAC;QACJ,CAAC;QAED,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACpB,KAAK,EAAE,8BAAkB,CAAC,QAAQ,CAAC,uBAAuB;gBAC1D,WAAW,EAAE;oBACZ,aAAa,CAAC,mBAAmB,CAAC;oBAClC,+BAA+B;oBAC/B,IAAI;iBACJ,CAAC,IAAI,CAAC,GAAG,CAAC;gBACX,cAAc;gBACd,QAAQ,EAAE,mBAAmB;aAC7B,CAAC,CAAC;QACJ,CAAC;QAED,IAAI,wBAAwB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACpB,KAAK,EAAE,8BAAkB,CAAC,QAAQ,CAAC,2BAA2B;gBAC9D,WAAW,EAAE;oBACZ,aAAa,CAAC,wBAAwB,CAAC;oBACvC,gFAAgF,IAAI,QAAQ;oBAC5F,IAAI;iBACJ,CAAC,IAAI,CAAC,GAAG,CAAC;gBACX,cAAc;gBACd,QAAQ,EAAE,wBAAwB;aAClC,CAAC,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IACf,CAAC;IAEO,gBAAgB,CAAC,SAA0B;QAClD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;QACxC,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;QAE3C,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;YAC9B,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC/B,IAAI,CAAC,IAAI,CAAC,WAAW;oBAAE,OAAO;gBAE9B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;oBAChD,IAAI,CAAC,IAAI,EAAE,EAAE;wBAAE,OAAO;oBAEtB,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAE3B,IAAI,QAAQ,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;wBACvC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAC/B,CAAC;gBACF,CAAC,CAAC,CAAC;YACJ,CAAC,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,OAAO;YACN,aAAa;YACb,gBAAgB;SAChB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,mBAAmB;QAChC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAEtF,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAqB,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACvF,CAAC;IAEO,KAAK,CAAC,8BAA8B,CAAC,IAAY;QACxD,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAExB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;QAEpC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAEtE,OAAO,MAAM,IAAI,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAC5E,CAAC;IAKO,KAAK,CAAC,mCAAmC,CAAC,IAAY;QAC7D,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,CAAC;QAE1E,OAAO,iBAAiB,CAAC,MAAM,CAAc,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;YAC/D,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;gBACtB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBACtB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;wBAC7C,IAAI,CAAC,CAAC,EAAE;4BAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACzB,CAAC,CAAC,CAAC;gBACJ,CAAC;YACF,CAAC,CAAC,CAAC;YAEH,OAAO,GAAG,CAAC;QACZ,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;IACf,CAAC;CACD,CAAA;AAtIY,0DAAuB;kCAAvB,uBAAuB;IADnC,IAAA,YAAO,GAAE;qCAGgC,0BAAqB;QACvB,wBAAmB;QACf,4BAAuB;QAChC,uBAAc;GALpC,uBAAuB,CAsInC"}
+{"version":3,"file":"credentials-risk-reporter.js","sourceRoot":"","sources":["../../../src/security-audit/risk-reporters/credentials-risk-reporter.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wCAA6C;AAC7C,gCAAyE;AACzE,gCAAkC;AAGlC,0DAAgE;AAIzD,IAAM,uBAAuB,GAA7B,MAAM,uBAAuB;IACnC,YACkB,qBAA4C,EAC5C,uBAAgD,EAChD,cAA8B;QAF9B,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,4BAAuB,GAAvB,uBAAuB,CAAyB;QAChD,mBAAc,GAAd,cAAc,CAAgB;IAC7C,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAC,SAA0B;QACtC,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,qBAAqB,CAAC;QAEvD,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC1D,MAAM,EAAE,aAAa,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAC7E,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,mCAAmC,CAAC,IAAI,CAAC,CAAC;QAEnF,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAClF,MAAM,mBAAmB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACxF,MAAM,wBAAwB,GAAG,gBAAgB,CAAC,MAAM,CACvD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CACvC,CAAC;QAEF,MAAM,MAAM,GAAG,CAAC,gBAAgB,EAAE,mBAAmB,EAAE,wBAAwB,CAAC,CAAC;QAEjF,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAErD,MAAM,MAAM,GAAwB;YACnC,IAAI,EAAE,8BAAkB,CAAC,IAAI;YAC7B,QAAQ,EAAE,EAAE;SACZ,CAAC;QAEF,MAAM,IAAI,GAAG,2EAA2E,CAAC;QACzF,MAAM,cAAc,GAAG,iEAAiE,CAAC;QAEzF,MAAM,aAAa,GAAG,CAAC,EAAE,MAAM,EAAsB,EAAE,EAAE,CACxD,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,oBAAoB,CAAC;QAE7D,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACpB,KAAK,EAAE,8BAAkB,CAAC,QAAQ,CAAC,oBAAoB;gBACvD,WAAW,EAAE,CAAC,aAAa,CAAC,gBAAgB,CAAC,EAAE,2BAA2B,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;gBAC3F,cAAc;gBACd,QAAQ,EAAE,gBAAgB;aAC1B,CAAC,CAAC;QACJ,CAAC;QAED,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACpB,KAAK,EAAE,8BAAkB,CAAC,QAAQ,CAAC,uBAAuB;gBAC1D,WAAW,EAAE;oBACZ,aAAa,CAAC,mBAAmB,CAAC;oBAClC,+BAA+B;oBAC/B,IAAI;iBACJ,CAAC,IAAI,CAAC,GAAG,CAAC;gBACX,cAAc;gBACd,QAAQ,EAAE,mBAAmB;aAC7B,CAAC,CAAC;QACJ,CAAC;QAED,IAAI,wBAAwB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;gBACpB,KAAK,EAAE,8BAAkB,CAAC,QAAQ,CAAC,2BAA2B;gBAC9D,WAAW,EAAE;oBACZ,aAAa,CAAC,wBAAwB,CAAC;oBACvC,gFAAgF,IAAI,QAAQ;oBAC5F,IAAI;iBACJ,CAAC,IAAI,CAAC,GAAG,CAAC;gBACX,cAAc;gBACd,QAAQ,EAAE,wBAAwB;aAClC,CAAC,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IACf,CAAC;IAEO,gBAAgB,CAAC,SAA0B;QAClD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;QACxC,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;QAE3C,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE;YAC9B,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;gBAC/B,IAAI,CAAC,IAAI,CAAC,WAAW;oBAAE,OAAO;gBAE9B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;oBAChD,IAAI,CAAC,IAAI,EAAE,EAAE;wBAAE,OAAO;oBAEtB,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAE3B,IAAI,QAAQ,CAAC,eAAe,KAAK,IAAI,EAAE,CAAC;wBACvC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;oBAC/B,CAAC;gBACF,CAAC,CAAC,CAAC;YACJ,CAAC,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,OAAO;YACN,aAAa;YACb,gBAAgB;SAChB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,mBAAmB;QAChC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAEtF,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAqB,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACvF,CAAC;IAEO,KAAK,CAAC,8BAA8B,CAAC,IAAY;QACxD,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAExB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;QAEpC,OAAO,MAAM,IAAI,CAAC,uBAAuB,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAC3E,CAAC;IAKO,KAAK,CAAC,mCAAmC,CAAC,IAAY;QAC7D,MAAM,iBAAiB,GAAG,MAAM,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,CAAC;QAE1E,OAAO,iBAAiB,CAAC,MAAM,CAAc,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;YAC/D,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;gBACtB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBACtB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;wBAC7C,IAAI,CAAC,CAAC,EAAE;4BAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACzB,CAAC,CAAC,CAAC;gBACJ,CAAC;YACF,CAAC,CAAC,CAAC;YAEH,OAAO,GAAG,CAAC;QACZ,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;IACf,CAAC;CACD,CAAA;AAnIY,0DAAuB;kCAAvB,uBAAuB;IADnC,IAAA,YAAO,GAAE;qCAGgC,0BAAqB;QACnB,4BAAuB;QAChC,uBAAc;GAJpC,uBAAuB,CAmInC"}

package/dist/services/ai-gateway.service.d.ts

@@ -0,0 +1,44 @@
+import { LicenseState } from '@n8n/backend-common';
+import { GlobalConfig } from '@n8n/config';
+import { UserRepository } from '@n8n/db';
+import { InstanceSettings } from 'n8n-core';
+import type { ICredentialDataDecryptedObject } from 'n8n-workflow';
+import type { AiGatewayConfigDto, AiGatewayUsageResponse } from '@n8n/api-types';
+import { License } from '../license';
+import { OwnershipService } from '../services/ownership.service';
+interface GatewayCreditsResponse {
+    creditsQuota: number;
+    creditsRemaining: number;
+}
+export declare class AiGatewayService {
+    private readonly globalConfig;
+    private readonly license;
+    private readonly licenseState;
+    private readonly instanceSettings;
+    private readonly ownershipService;
+    private readonly userRepository;
+    private readonly tokenCache;
+    private readonly TOKEN_CACHE_MAX_SIZE;
+    private readonly pendingTokenRequests;
+    private gatewayConfig;
+    private configFetchedAt;
+    private static readonly CONFIG_TTL_MS;
+    constructor(globalConfig: GlobalConfig, license: License, licenseState: LicenseState, instanceSettings: InstanceSettings, ownershipService: OwnershipService, userRepository: UserRepository);
+    private resolveUserId;
+    getSyntheticCredential({ credentialType, userId, workflowId, projectId, }: {
+        credentialType: string;
+        userId: string | undefined;
+        workflowId?: string;
+        projectId?: string;
+    }): Promise<ICredentialDataDecryptedObject>;
+    getUsage(userId: string, offset: number, limit: number): Promise<AiGatewayUsageResponse>;
+    getCreditsRemaining(userId: string): Promise<GatewayCreditsResponse>;
+    private parseCreditsResponse;
+    private requireBaseUrl;
+    private isConfigStale;
+    getGatewayConfig(): Promise<AiGatewayConfigDto>;
+    private buildGatewayCredentialsHeaders;
+    private getOrFetchToken;
+    private fetchAndCacheToken;
+}
+export {};