n8n 2.18.4 → 2.19.0

package/dist/public-api/v1/openapi.yml

@@ -41,6 +41,8 @@ tags:
     description: API capability discovery
   - name: Insights
     description: Operations about insights
+  - name: Folders
+    description: Operations about folders
 externalDocs:
   description: n8n API documentation
   url: https://docs.n8n.io/api/
@@ -1809,6 +1811,126 @@ paths:
           $ref: '#/components/responses/notFound'
       security:
         - ApiKeyAuth: []
+  /data-tables/{dataTableId}/columns:
+    get:
+      x-eov-operation-id: listDataTableColumns
+      x-eov-operation-handler: v1/handlers/data-tables/data-tables.columns.handler
+      tags:
+        - DataTable
+      summary: List columns of a data table
+      description: Retrieve all columns for a specific data table.
+      operationId: list-data-table-columns
+      parameters:
+        - $ref: '#/components/parameters/dataTableId'
+      responses:
+        '200':
+          description: Successfully retrieved columns
+          content:
+            application/json:
+              schema:
+                type: array
+                items:
+                  $ref: '#/components/schemas/dataTableColumn'
+        '401':
+          $ref: '#/components/responses/unauthorized'
+        '404':
+          $ref: '#/components/responses/notFound'
+      security:
+        - ApiKeyAuth: []
+    post:
+      x-eov-operation-id: createDataTableColumn
+      x-eov-operation-handler: v1/handlers/data-tables/data-tables.columns.handler
+      tags:
+        - DataTable
+      summary: Add a column to a data table
+      description: Add a new column to an existing data table.
+      operationId: create-data-table-column
+      parameters:
+        - $ref: '#/components/parameters/dataTableId'
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/createColumnRequest'
+            example:
+              name: email
+              type: string
+      responses:
+        '201':
+          description: Column created successfully
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/dataTableColumn'
+        '400':
+          $ref: '#/components/responses/badRequest'
+        '401':
+          $ref: '#/components/responses/unauthorized'
+        '404':
+          $ref: '#/components/responses/notFound'
+        '409':
+          $ref: '#/components/responses/conflict'
+      security:
+        - ApiKeyAuth: []
+  /data-tables/{dataTableId}/columns/{columnId}:
+    delete:
+      x-eov-operation-id: deleteDataTableColumn
+      x-eov-operation-handler: v1/handlers/data-tables/data-tables.columns.handler
+      tags:
+        - DataTable
+      summary: Delete a column
+      description: Remove a column from a data table. This will also delete all data in the column.
+      operationId: delete-data-table-column
+      parameters:
+        - $ref: '#/components/parameters/dataTableId'
+        - $ref: '#/components/parameters/columnId'
+      responses:
+        '204':
+          description: Column deleted successfully
+        '401':
+          $ref: '#/components/responses/unauthorized'
+        '404':
+          $ref: '#/components/responses/notFound'
+      security:
+        - ApiKeyAuth: []
+    patch:
+      x-eov-operation-id: updateDataTableColumn
+      x-eov-operation-handler: v1/handlers/data-tables/data-tables.columns.handler
+      tags:
+        - DataTable
+      summary: Update a column
+      description: Rename and/or reorder a column in a data table.
+      operationId: update-data-table-column
+      parameters:
+        - $ref: '#/components/parameters/dataTableId'
+        - $ref: '#/components/parameters/columnId'
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/updateColumnRequest'
+            example:
+              name: email
+              index: 1
+      responses:
+        '200':
+          description: Column updated successfully
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/dataTableColumn'
+        '400':
+          $ref: '#/components/responses/badRequest'
+        '401':
+          $ref: '#/components/responses/unauthorized'
+        '404':
+          $ref: '#/components/responses/notFound'
+        '409':
+          $ref: '#/components/responses/conflict'
+      security:
+        - ApiKeyAuth: []
   /projects:
     post:
       x-eov-operation-id: createProject
@@ -2307,6 +2429,256 @@ paths:
           $ref: '#/components/responses/unauthorized'
         '403':
           $ref: '#/components/responses/forbidden'
+  /projects/{projectId}/folders:
+    post:
+      x-eov-operation-id: createFolder
+      x-eov-operation-handler: v1/handlers/folders/folders.handler
+      tags:
+        - Folders
+      summary: Create a folder
+      description: Create a folder within a project.
+      parameters:
+        - name: projectId
+          in: path
+          description: The ID of the project.
+          required: true
+          schema:
+            type: string
+      requestBody:
+        description: Payload for folder to create.
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/folder.create'
+        required: true
+      responses:
+        '201':
+          description: Operation successful.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/folder'
+        '400':
+          $ref: '#/components/responses/badRequest'
+        '401':
+          $ref: '#/components/responses/unauthorized'
+        '403':
+          $ref: '#/components/responses/forbidden'
+        '404':
+          $ref: '#/components/responses/notFound'
+    get:
+      x-eov-operation-id: getFolders
+      x-eov-operation-handler: v1/handlers/folders/folders.handler
+      tags:
+        - Folders
+      summary: Retrieve folders
+      description: Retrieve folders within a project. Supports filtering, sorting, field selection, and pagination.
+      parameters:
+        - name: projectId
+          in: path
+          description: The ID of the project.
+          required: true
+          schema:
+            type: string
+        - name: filter
+          in: query
+          required: false
+          description: JSON-encoded filter object. Supported fields — parentFolderId, name, tags (array of tag names), excludeFolderIdAndDescendants.
+          schema:
+            type: string
+            example: '{"parentFolderId":"abc123","name":"My Folder"}'
+        - name: select
+          in: query
+          required: false
+          description: JSON-encoded array of fields to include. Valid fields — id, name, createdAt, updatedAt, project, tags, parentFolder, workflowCount, subFolderCount, path.
+          schema:
+            type: string
+            example: '["id","name","tags","workflowCount"]'
+        - name: sortBy
+          in: query
+          required: false
+          description: Sort order for results.
+          schema:
+            type: string
+            enum:
+              - name:asc
+              - name:desc
+              - createdAt:asc
+              - createdAt:desc
+              - updatedAt:asc
+              - updatedAt:desc
+        - name: skip
+          in: query
+          required: false
+          description: Number of items to skip for pagination. Defaults to 0.
+          schema:
+            type: string
+        - name: take
+          in: query
+          required: false
+          description: Number of items to return. Defaults to 10.
+          schema:
+            type: string
+      responses:
+        '200':
+          description: Operation successful.
+          content:
+            application/json:
+              schema:
+                type: object
+                properties:
+                  count:
+                    type: integer
+                    description: Total number of folders matching the query.
+                  data:
+                    type: array
+                    items:
+                      $ref: '#/components/schemas/folder'
+        '400':
+          $ref: '#/components/responses/badRequest'
+        '401':
+          $ref: '#/components/responses/unauthorized'
+        '403':
+          $ref: '#/components/responses/forbidden'
+        '404':
+          $ref: '#/components/responses/notFound'
+  /projects/{projectId}/folders/{folderId}:
+    delete:
+      x-eov-operation-id: deleteFolder
+      x-eov-operation-handler: v1/handlers/folders/folders.handler
+      tags:
+        - Folders
+      summary: Delete a folder
+      description: Delete a folder within a project. When `transferToFolderId` is provided, workflows and sub-folders are moved to the target folder before deletion. When omitted, workflows are moved to the project root and archived, and child folders are deleted.
+      parameters:
+        - name: projectId
+          in: path
+          description: The ID of the project.
+          required: true
+          schema:
+            type: string
+        - name: folderId
+          in: path
+          description: The ID of the folder.
+          required: true
+          schema:
+            type: string
+        - name: transferToFolderId
+          in: query
+          description: Optional target folder ID to move workflows and sub-folders into before deleting.
+          required: false
+          schema:
+            type: string
+      responses:
+        '204':
+          description: Operation successful.
+        '400':
+          $ref: '#/components/responses/badRequest'
+        '401':
+          $ref: '#/components/responses/unauthorized'
+        '403':
+          $ref: '#/components/responses/forbidden'
+        '404':
+          $ref: '#/components/responses/notFound'
+    get:
+      x-eov-operation-id: getFolder
+      x-eov-operation-handler: v1/handlers/folders/folders.handler
+      tags:
+        - Folders
+      summary: Get folder details
+      description: Get folder details including sub-folder and workflow counts.
+      parameters:
+        - name: projectId
+          in: path
+          description: The ID of the project.
+          required: true
+          schema:
+            type: string
+        - name: folderId
+          in: path
+          description: The ID of the folder.
+          required: true
+          schema:
+            type: string
+      responses:
+        '200':
+          description: Operation successful.
+          content:
+            application/json:
+              schema:
+                type: object
+                additionalProperties: false
+                properties:
+                  id:
+                    type: string
+                    readOnly: true
+                  name:
+                    type: string
+                  parentFolderId:
+                    type: string
+                    nullable: true
+                  createdAt:
+                    type: string
+                    format: date-time
+                    readOnly: true
+                  updatedAt:
+                    type: string
+                    format: date-time
+                    readOnly: true
+                  totalSubFolders:
+                    type: integer
+                    description: Total number of sub-folders (recursive).
+                  totalWorkflows:
+                    type: integer
+                    description: Total number of workflows (recursive).
+        '401':
+          $ref: '#/components/responses/unauthorized'
+        '403':
+          $ref: '#/components/responses/forbidden'
+        '404':
+          $ref: '#/components/responses/notFound'
+    patch:
+      x-eov-operation-id: updateFolder
+      x-eov-operation-handler: v1/handlers/folders/folders.handler
+      tags:
+        - Folders
+      summary: Update a folder
+      description: Update folder name or parent folder.
+      parameters:
+        - name: projectId
+          in: path
+          description: The ID of the project.
+          required: true
+          schema:
+            type: string
+        - name: folderId
+          in: path
+          description: The ID of the folder.
+          required: true
+          schema:
+            type: string
+      requestBody:
+        description: Payload for folder update.
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/folder.update'
+        required: true
+      responses:
+        '200':
+          description: Operation successful.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/folder'
+        '400':
+          $ref: '#/components/responses/badRequest'
+        '401':
+          $ref: '#/components/responses/unauthorized'
+        '403':
+          $ref: '#/components/responses/forbidden'
+        '404':
+          $ref: '#/components/responses/notFound'
 components:
   schemas:
     audit:
@@ -3705,6 +4077,76 @@ components:
       required:
         - filter
         - data
+    dataTableColumn:
+      type: object
+      properties:
+        id:
+          type: string
+          description: Column ID
+        name:
+          type: string
+          description: Column name
+        dataTableId:
+          type: string
+          description: ID of the data table this column belongs to
+        type:
+          type: string
+          enum:
+            - string
+            - number
+            - boolean
+            - date
+          description: Column data type
+        index:
+          type: integer
+          description: Column position
+      required:
+        - id
+        - name
+        - dataTableId
+        - type
+        - index
+    dataTableColumnName:
+      type: string
+      description: Column name. Must start with a letter; only letters, digits, and underscores after that; maximum 63 characters.
+      minLength: 1
+      maxLength: 63
+      pattern: ^[a-zA-Z][a-zA-Z0-9_]*$
+    createColumnRequest:
+      type: object
+      properties:
+        name:
+          $ref: '#/components/schemas/dataTableColumnName'
+        type:
+          type: string
+          enum:
+            - string
+            - number
+            - boolean
+            - date
+          description: Column data type
+        index:
+          type: integer
+          minimum: 0
+          description: Column position (optional, appended to end if omitted)
+      required:
+        - name
+        - type
+    updateColumnRequest:
+      type: object
+      properties:
+        name:
+          $ref: '#/components/schemas/dataTableColumnName'
+        index:
+          type: integer
+          minimum: 0
+          description: New zero-based position for the column
+      additionalProperties: false
+      anyOf:
+        - required:
+            - name
+        - required:
+            - index
     projectList:
       type: object
       properties:
@@ -3918,6 +4360,50 @@ components:
               type: string
               enum:
                 - millisecond
+    folder:
+      type: object
+      additionalProperties: false
+      properties:
+        id:
+          type: string
+          readOnly: true
+        name:
+          type: string
+          example: My Folder
+        parentFolderId:
+          type: string
+          nullable: true
+        createdAt:
+          type: string
+          format: date-time
+          readOnly: true
+        updatedAt:
+          type: string
+          format: date-time
+          readOnly: true
+    folder.create:
+      type: object
+      additionalProperties: false
+      required:
+        - name
+      properties:
+        name:
+          type: string
+          example: My Folder
+        parentFolderId:
+          type: string
+          example: abc123
+    folder.update:
+      type: object
+      additionalProperties: false
+      minProperties: 1
+      properties:
+        name:
+          type: string
+          example: Renamed Folder
+        parentFolderId:
+          type: string
+          example: abc123
     error:
       required:
         - message
@@ -4131,6 +4617,14 @@ components:
       schema:
         type: string
         format: nanoid
+    columnId:
+      name: columnId
+      in: path
+      description: The ID of the column
+      required: true
+      schema:
+        type: string
+        format: nanoid
     Cursor:
       $ref: '#/components/parameters/cursor'
     Limit:

package/dist/public-api/v1/shared/handler.types.d.ts

@@ -0,0 +1,3 @@
+import type { AuthenticatedRequest } from '@n8n/db';
+import type { Response } from 'express';
+export type PublicAPIHandler<TParams extends Record<string, string>> = (req: AuthenticatedRequest<TParams>, res: Response) => Promise<Response | undefined>;

package/dist/{modules/otel/handlers/interfaces.js → public-api/v1/shared/handler.types.js}

@@ -1,3 +1,3 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-//# sourceMappingURL=interfaces.js.map
+//# sourceMappingURL=handler.types.js.map

package/dist/public-api/v1/shared/handler.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handler.types.js","sourceRoot":"","sources":["../../../../src/public-api/v1/shared/handler.types.ts"],"names":[],"mappings":""}

package/dist/public-api/v1/shared/middlewares/global.middleware.d.ts

@@ -2,6 +2,7 @@ import type { BooleanLicenseFeature } from '@n8n/constants';
 import type { AuthenticatedRequest } from '@n8n/db';
 import type { ApiKeyScope, Scope } from '@n8n/permissions';
 import type express from 'express';
+import type { NextFunction, Request, Response } from 'express';
 import type { PaginatedRequest } from '../../../types';
 export type ProjectScopeResource = 'workflow' | 'credential' | 'dataTable';
 export declare const globalScope: (scopes: Scope | Scope[]) => (req: AuthenticatedRequest<{
@@ -13,9 +14,10 @@ export declare const projectScope: (scopes: Scope | Scope[], resource: ProjectSc
     dataTableId?: string;
 }>, res: express.Response, next: express.NextFunction) => Promise<express.Response | void>;
 export declare const validCursor: (req: PaginatedRequest, res: express.Response, next: express.NextFunction) => express.Response | void;
-export type ScopeTaggedMiddleware = ((...args: unknown[]) => unknown) & {
+export type ScopeTaggedMiddleware = Middleware & {
     __apiKeyScope: ApiKeyScope;
 };
+export type Middleware = (req: Request, res: Response, next: NextFunction) => unknown;
 export declare const publicApiScope: (apiKeyScope: ApiKeyScope) => ScopeTaggedMiddleware;
 export declare const apiKeyHasScopeWithGlobalScopeFallback: (config: {
     scope: ApiKeyScope & Scope;

package/dist/public-api/v1/shared/middlewares/global.middleware.js.map

@@ -1 +1 @@
-{"version":3,"file":"global.middleware.js","sourceRoot":"","sources":["../../../../../src/public-api/v1/shared/middlewares/global.middleware.ts"],"names":[],"mappings":";;;AAGA,gCAAoC;AAIpC,oFAA8E;AAC9E,8EAAyE;AACzE,uCAAoC;AACpC,gEAA8D;AAG9D,uEAA8D;AAE9D,MAAM,qBAAqB,GAAG,CAAC,CAAC,CAAC;AAIjC,MAAM,oBAAoB,GAAG,CAC5B,MAAe,EACf,QAA+B,EAC/B,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,EACrC,EAAE;IACH,OAAO,KAAK,EACX,GAAgE,EAChE,GAAqB,EACrB,IAA0B,EACS,EAAE;QACrC,MAAM,MAAM,GAAyE,EAAE,CAAC;QACxF,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACnB,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;gBAC7B,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,CAAC;iBAAM,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;gBACtC,MAAM,CAAC,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACrC,CAAC;QACF,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC/D,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC;QAC7C,CAAC;QAED,IAAI,CAAC;YACJ,IAAI,CAAC,CAAC,MAAM,IAAA,4BAAa,EAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;gBAClE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;YACvD,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,+BAAa,EAAE,CAAC;gBACpC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACzD,CAAC;YACD,MAAM,KAAK,CAAC;QACb,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACH,CAAC,CAAC;AAEK,MAAM,WAAW,GAAG,CAAC,MAAuB,EAAE,EAAE,CACtD,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;AADrF,QAAA,WAAW,eAC0E;AAE3F,MAAM,YAAY,GAAG,CAAC,MAAuB,EAAE,QAA8B,EAAE,EAAE,CACvF,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;AADrF,QAAA,YAAY,gBACyE;AAE3F,MAAM,WAAW,GAAG,CAC1B,GAAqB,EACrB,GAAqB,EACrB,IAA0B,EACA,EAAE;IAC5B,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC;QAC7B,IAAI,CAAC;YACJ,MAAM,cAAc,GAAG,IAAA,iCAAY,EAAC,MAAM,CAAC,CAAC;YAC5C,IAAI,QAAQ,IAAI,cAAc,EAAE,CAAC;gBAChC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC;gBACzC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC;YACxC,CAAC;iBAAM,CAAC;gBACP,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC;gBACzC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC;YACxC,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC3B,OAAO,EAAE,gCAAgC;aACzC,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,OAAO,IAAI,EAAE,CAAC;AACf,CAAC,CAAC;AAxBW,QAAA,WAAW,eAwBtB;AAMF,SAAS,aAAa,CACrB,UAA2C,EAC3C,WAAwB;IAExB,MAAM,MAAM,GAA0B,MAAM,CAAC,MAAM,CAClD,CAAC,GAAY,EAAE,GAAY,EAAE,IAAa,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,EACzE,EAAE,aAAa,EAAE,WAAW,EAAE,CAC9B,CAAC;IACF,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,uCAAuC,CAAC,aAA0B;IAC1E,OAAO,KAAK,EACX,GAAyB,EACzB,GAAqB,EACrB,IAA0B,EACV,EAAE;QAClB,MAAM,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC;QAE3B,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;YAC/C,OAAO;QACR,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;YAC/C,OAAO;QACR,CAAC;QAED,IAAI,EAAE,CAAC;QACP,OAAO;IACR,CAAC,CAAC;AACH,CAAC;AAEM,MAAM,cAAc,GAAG,CAAC,WAAwB,EAAE,EAAE,CAC1D,aAAa,CAAC,uCAAuC,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC;AADrE,QAAA,cAAc,kBACuD;AAE3E,MAAM,qCAAqC,GAAG,CACpD,MAAyF,EACxF,EAAE;IACH,MAAM,KAAK,GAAG,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;IACpE,OAAO,aAAa,CAAC,uCAAuC,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;AAC7E,CAAC,CAAC;AALW,QAAA,qCAAqC,yCAKhD;AAEK,MAAM,yBAAyB,GAAG,CACxC,CAAkB,EAClB,GAAqB,EACrB,IAA0B,EACA,EAAE;IAC5B,MAAM,OAAO,GAAG,cAAS,CAAC,GAAG,CAAC,iBAAO,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,aAAa,EAAE,KAAK,qBAAqB,EAAE,CAAC;QACvD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC3B,OAAO,EAAE,gFAAgF;SACzF,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,EAAE,CAAC;AACf,CAAC,CAAC;AAbW,QAAA,yBAAyB,6BAapC;AAEK,MAAM,UAAU,GAAG,CAAC,OAA8B,EAAE,EAAE;IAC5D,OAAO,KAAK,EAAE,CAAuB,EAAE,GAAqB,EAAE,IAA0B,EAAE,EAAE;QAC3F,IAAI,cAAS,CAAC,GAAG,CAAC,iBAAO,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,EAAE,CAAC;QAE9D,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,oDAAuB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACxF,CAAC,CAAC;AACH,CAAC,CAAC;AANW,QAAA,UAAU,cAMrB"}
+{"version":3,"file":"global.middleware.js","sourceRoot":"","sources":["../../../../../src/public-api/v1/shared/middlewares/global.middleware.ts"],"names":[],"mappings":";;;AAGA,gCAAoC;AAKpC,oFAA8E;AAC9E,8EAAyE;AACzE,uCAAoC;AACpC,gEAA8D;AAG9D,uEAA8D;AAE9D,MAAM,qBAAqB,GAAG,CAAC,CAAC,CAAC;AAIjC,MAAM,oBAAoB,GAAG,CAC5B,MAAe,EACf,QAA+B,EAC/B,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,EACrC,EAAE;IACH,OAAO,KAAK,EACX,GAAgE,EAChE,GAAqB,EACrB,IAA0B,EACS,EAAE;QACrC,MAAM,MAAM,GAAyE,EAAE,CAAC;QACxF,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACnB,IAAI,QAAQ,KAAK,UAAU,EAAE,CAAC;gBAC7B,MAAM,CAAC,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACnC,CAAC;iBAAM,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;gBACtC,MAAM,CAAC,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACrC,CAAC;QACF,CAAC;aAAM,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;YAC/D,MAAM,CAAC,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC;QAC7C,CAAC;QAED,IAAI,CAAC;YACJ,IAAI,CAAC,CAAC,MAAM,IAAA,4BAAa,EAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;gBAClE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;YACvD,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,KAAK,YAAY,+BAAa,EAAE,CAAC;gBACpC,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACzD,CAAC;YACD,MAAM,KAAK,CAAC;QACb,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IACf,CAAC,CAAC;AACH,CAAC,CAAC;AAEK,MAAM,WAAW,GAAG,CAAC,MAAuB,EAAE,EAAE,CACtD,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;AADrF,QAAA,WAAW,eAC0E;AAE3F,MAAM,YAAY,GAAG,CAAC,MAAuB,EAAE,QAA8B,EAAE,EAAE,CACvF,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;AADrF,QAAA,YAAY,gBACyE;AAE3F,MAAM,WAAW,GAAG,CAC1B,GAAqB,EACrB,GAAqB,EACrB,IAA0B,EACA,EAAE;IAC5B,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC;QAC7B,IAAI,CAAC;YACJ,MAAM,cAAc,GAAG,IAAA,iCAAY,EAAC,MAAM,CAAC,CAAC;YAC5C,IAAI,QAAQ,IAAI,cAAc,EAAE,CAAC;gBAChC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC;gBACzC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC;YACxC,CAAC;iBAAM,CAAC;gBACP,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC;gBACzC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC;YACxC,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC3B,OAAO,EAAE,gCAAgC;aACzC,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,OAAO,IAAI,EAAE,CAAC;AACf,CAAC,CAAC;AAxBW,QAAA,WAAW,eAwBtB;AAQF,SAAS,aAAa,CAAC,UAAsB,EAAE,WAAwB;IACtE,MAAM,MAAM,GAA0B,MAAM,CAAC,MAAM,CAClD,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,EAC/E,EAAE,aAAa,EAAE,WAAW,EAAE,CAC9B,CAAC;IACF,OAAO,MAAM,CAAC;AACf,CAAC;AAED,SAAS,uCAAuC,CAAC,aAA0B;IAC1E,OAAO,KAAK,EACX,GAAyB,EACzB,GAAqB,EACrB,IAA0B,EACV,EAAE;QAClB,MAAM,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC;QAE3B,IAAI,CAAC,UAAU,EAAE,CAAC;YACjB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;YAC/C,OAAO;QACR,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;YAC/C,OAAO;QACR,CAAC;QAED,IAAI,EAAE,CAAC;QACP,OAAO;IACR,CAAC,CAAC;AACH,CAAC;AAEM,MAAM,cAAc,GAAG,CAAC,WAAwB,EAAE,EAAE,CAC1D,aAAa,CAAC,uCAAuC,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC,CAAC;AADrE,QAAA,cAAc,kBACuD;AAE3E,MAAM,qCAAqC,GAAG,CACpD,MAAyF,EACxF,EAAE;IACH,MAAM,KAAK,GAAG,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;IACpE,OAAO,aAAa,CAAC,uCAAuC,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;AAC7E,CAAC,CAAC;AALW,QAAA,qCAAqC,yCAKhD;AAEK,MAAM,yBAAyB,GAAG,CACxC,CAAkB,EAClB,GAAqB,EACrB,IAA0B,EACA,EAAE;IAC5B,MAAM,OAAO,GAAG,cAAS,CAAC,GAAG,CAAC,iBAAO,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,aAAa,EAAE,KAAK,qBAAqB,EAAE,CAAC;QACvD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC3B,OAAO,EAAE,gFAAgF;SACzF,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,EAAE,CAAC;AACf,CAAC,CAAC;AAbW,QAAA,yBAAyB,6BAapC;AAEK,MAAM,UAAU,GAAG,CAAC,OAA8B,EAAE,EAAE;IAC5D,OAAO,KAAK,EAAE,CAAuB,EAAE,GAAqB,EAAE,IAA0B,EAAE,EAAE;QAC3F,IAAI,cAAS,CAAC,GAAG,CAAC,iBAAO,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,EAAE,CAAC;QAE9D,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,oDAAuB,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACxF,CAAC,CAAC;AACH,CAAC,CAAC;AANW,QAAA,UAAU,cAMrB"}

package/dist/public-api/v1/shared/services/utils.service.d.ts

@@ -0,0 +1,3 @@
+import { type User } from '@n8n/db';
+import type { Scope } from '@n8n/permissions';
+export declare function assertProjectScope(user: User, projectId: string, scopes: Scope[]): Promise<void>;

package/dist/public-api/v1/shared/services/utils.service.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.assertProjectScope = assertProjectScope;
+const db_1 = require("@n8n/db");
+const di_1 = require("@n8n/di");
+const forbidden_error_1 = require("../../../../errors/response-errors/forbidden.error");
+const not_found_error_1 = require("../../../../errors/response-errors/not-found.error");
+const project_service_ee_1 = require("../../../../services/project.service.ee");
+async function assertProjectScope(user, projectId, scopes) {
+    const exists = await di_1.Container.get(db_1.ProjectRepository).findOneBy({ id: projectId });
+    if (!exists) {
+        throw new not_found_error_1.NotFoundError(`Project with ID "${projectId}" not found`);
+    }
+    const project = await di_1.Container.get(project_service_ee_1.ProjectService).getProjectWithScope(user, projectId, scopes);
+    if (!project)
+        throw new forbidden_error_1.ForbiddenError();
+}
+//# sourceMappingURL=utils.service.js.map

package/dist/public-api/v1/shared/services/utils.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.service.js","sourceRoot":"","sources":["../../../../../src/public-api/v1/shared/services/utils.service.ts"],"names":[],"mappings":";;AAQA,gDAYC;AApBD,gCAAuD;AACvD,gCAAoC;AAGpC,8EAA0E;AAC1E,8EAAyE;AACzE,sEAA+D;AAExD,KAAK,UAAU,kBAAkB,CACvC,IAAU,EACV,SAAiB,EACjB,MAAe;IAEf,MAAM,MAAM,GAAG,MAAM,cAAS,CAAC,GAAG,CAAC,sBAAiB,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IACnF,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,MAAM,IAAI,+BAAa,CAAC,oBAAoB,SAAS,aAAa,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,cAAS,CAAC,GAAG,CAAC,mCAAc,CAAC,CAAC,mBAAmB,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACjG,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,gCAAc,EAAE,CAAC;AAC1C,CAAC"}

package/dist/push/index.d.ts

@@ -9,7 +9,7 @@ import { Publisher } from '../scaling/pubsub/publisher.service';
 import { TypedEmitter } from '../typed-emitter';
 import { PushConfig } from './push.config';
 import { SSEPush } from './sse.push';
-import type { OnPushMessage, PushResponse, SSEPushRequest, WebSocketPushRequest } from './types';
+import { type OnPushMessage, type PushResponse, type SSEPushRequest, type WebSocketPushRequest } from './types';
 import { WebSocketPush } from './websocket.push';
 type PushEvents = {
     editorUiConnected: string;

package/dist/push/index.js

@@ -29,6 +29,8 @@ const origin_validator_1 = require("./origin-validator");
 const push_config_1 = require("./push.config");
 const sse_push_1 = require("./sse.push");
 const websocket_push_1 = require("./websocket.push");
+const push_helpers_1 = require("./push-helpers");
+const internal_server_error_1 = require("../errors/response-errors/internal-server.error");
 const MAX_PAYLOAD_SIZE_BYTES = 5 * 1024 * 1024;
 let Push = class Push extends typed_emitter_1.TypedEmitter {
     constructor(config, instanceSettings, logger, authService, publisher) {
@@ -68,7 +70,15 @@ let Push = class Push extends typed_emitter_1.TypedEmitter {
         }
     }
     setupPushHandler(restEndpoint, app) {
-        app.use(`/${restEndpoint}/push`, this.authService.createAuthMiddleware({ allowSkipMFA: false }), (req, res) => this.handleRequest(req, res));
+        app.use(`/${restEndpoint}/push`, this.authService.createAuthMiddleware({ allowSkipMFA: false }), (req, res) => {
+            if (!(0, push_helpers_1.isWebSocketPushRequest)(req) && !(0, push_helpers_1.isSSEPushRequest)(req)) {
+                throw new bad_request_error_1.BadRequestError('Request is not a PushRequest');
+            }
+            if (!(0, push_helpers_1.isPushResponse)(res)) {
+                throw new internal_server_error_1.InternalServerError('Malformed response object');
+            }
+            return this.handleRequest(req, res);
+        });
     }
     handleRequest(req, res) {
         const { ws, query: { pushRef }, user, headers, } = req;