n8n 2.19.2 → 2.20.0

package/dist/modules/mcp/mcp.settings.service.js

@@ -10,14 +10,29 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.McpSettingsService = void 0;
+const backend_common_1 = require("@n8n/backend-common");
+const config_1 = require("@n8n/config");
 const db_1 = require("@n8n/db");
 const di_1 = require("@n8n/di");
+const typeorm_1 = require("@n8n/typeorm");
+const n8n_workflow_1 = require("n8n-workflow");
+const collaboration_service_1 = require("../../collaboration/collaboration.service");
+const bad_request_error_1 = require("../../errors/response-errors/bad-request.error");
 const cache_service_1 = require("../../services/cache/cache.service");
+const workflow_helpers_1 = require("../../workflow-helpers");
+const workflow_finder_service_1 = require("../../workflows/workflow-finder.service");
 const KEY = 'mcp.access.enabled';
+const BULK_CHUNK_SIZE = 500;
+const WORKFLOW_SETTINGS_FIELDS = ['id', 'settings'];
 let McpSettingsService = class McpSettingsService {
-    constructor(settingsRepository, cacheService) {
+    constructor(settingsRepository, cacheService, workflowRepository, workflowFinderService, globalConfig, logger, collaborationService) {
         this.settingsRepository = settingsRepository;
         this.cacheService = cacheService;
+        this.workflowRepository = workflowRepository;
+        this.workflowFinderService = workflowFinderService;
+        this.globalConfig = globalConfig;
+        this.logger = logger;
+        this.collaborationService = collaborationService;
     }
     async getEnabled() {
         const isMcpAccessEnabled = await this.cacheService.get(KEY);
@@ -33,11 +48,159 @@ let McpSettingsService = class McpSettingsService {
         await this.settingsRepository.upsert({ key: KEY, value: enabled.toString(), loadOnStartup: true }, ['key']);
         await this.cacheService.set(KEY, enabled.toString());
     }
+    async bulkSetAvailableInMCP(user, dto) {
+        const { availableInMCP, workflowIds, projectId, folderId } = dto;
+        const scopeCount = [workflowIds, projectId, folderId].filter(Boolean).length;
+        if (scopeCount !== 1) {
+            throw new bad_request_error_1.BadRequestError('Provide exactly one of workflowIds, projectId or folderId');
+        }
+        const candidateIds = await this.resolveCandidateIds(user, {
+            workflowIds,
+            projectId,
+            folderId,
+        });
+        const isWorkflowIdsScope = Boolean(workflowIds);
+        const baselineSize = isWorkflowIdsScope ? new Set(workflowIds).size : candidateIds.length;
+        if (candidateIds.length === 0) {
+            return {
+                updatedCount: 0,
+                skippedCount: baselineSize,
+                failedCount: 0,
+                changedWorkflows: [],
+                ...(isWorkflowIdsScope ? { updatedIds: [] } : {}),
+            };
+        }
+        const writtenIds = [];
+        const changedWorkflows = [];
+        const noOpIds = [];
+        let failedCount = 0;
+        for (let start = 0; start < candidateIds.length; start += BULK_CHUNK_SIZE) {
+            const chunk = candidateIds.slice(start, start + BULK_CHUNK_SIZE);
+            try {
+                const chunkResult = await this.workflowRepository.manager.transaction(async (trx) => {
+                    const chunkWritten = [];
+                    const chunkNoOp = [];
+                    const now = new Date();
+                    const settingsRows = await trx.find(db_1.WorkflowEntity, {
+                        where: { id: (0, typeorm_1.In)(chunk), isArchived: false },
+                        select: WORKFLOW_SETTINGS_FIELDS,
+                    });
+                    const nextSettingsByWorkflowId = new Map();
+                    for (const row of settingsRows) {
+                        if (row.settings?.availableInMCP === availableInMCP) {
+                            chunkNoOp.push(row.id);
+                            continue;
+                        }
+                        const nextSettings = (0, workflow_helpers_1.removeDefaultValues)({ ...(row.settings ?? {}), availableInMCP }, this.globalConfig.executions.timeout);
+                        nextSettingsByWorkflowId.set(row.id, nextSettings);
+                    }
+                    if (nextSettingsByWorkflowId.size === 0) {
+                        return { written: chunkWritten, noOp: chunkNoOp };
+                    }
+                    const rows = await trx.find(db_1.WorkflowEntity, {
+                        where: { id: (0, typeorm_1.In)([...nextSettingsByWorkflowId.keys()]), isArchived: false },
+                        select: ['id', ...n8n_workflow_1.WORKFLOW_CHECKSUM_FIELDS],
+                    });
+                    for (const row of rows) {
+                        const nextSettings = nextSettingsByWorkflowId.get(row.id);
+                        if (nextSettings === undefined)
+                            continue;
+                        await trx.update(db_1.WorkflowEntity, { id: row.id }, { settings: nextSettings, updatedAt: now });
+                        const checksum = await (0, n8n_workflow_1.calculateWorkflowChecksum)({
+                            ...row,
+                            settings: nextSettings,
+                        });
+                        chunkWritten.push({
+                            workflowId: row.id,
+                            settings: { availableInMCP },
+                            checksum,
+                        });
+                    }
+                    return { written: chunkWritten, noOp: chunkNoOp };
+                });
+                writtenIds.push(...chunkResult.written.map(({ workflowId }) => workflowId));
+                changedWorkflows.push(...chunkResult.written);
+                noOpIds.push(...chunkResult.noOp);
+            }
+            catch (error) {
+                failedCount += chunk.length;
+                this.logger.error('Failed to bulk-update workflow MCP availability for chunk', {
+                    error,
+                    chunkSize: chunk.length,
+                    chunkStart: start,
+                    availableInMCP,
+                });
+            }
+        }
+        const confirmedIds = [...writtenIds, ...noOpIds];
+        return {
+            updatedCount: confirmedIds.length,
+            skippedCount: Math.max(0, baselineSize - confirmedIds.length - failedCount),
+            failedCount,
+            changedWorkflows,
+            ...(isWorkflowIdsScope ? { updatedIds: confirmedIds } : {}),
+        };
+    }
+    async broadcastWorkflowMCPAvailabilityChanged(changes) {
+        if (changes.length === 0)
+            return;
+        const workflowIds = changes.map(({ workflowId }) => workflowId);
+        let openWorkflowIds;
+        try {
+            openWorkflowIds = await this.collaborationService.filterOpenWorkflowIds(workflowIds);
+        }
+        catch (error) {
+            this.logger.warn('Failed to resolve open workflows for settings update broadcast', {
+                workflowCount: changes.length,
+                workflowIds: workflowIds.slice(0, 10),
+                cause: error instanceof Error ? error.message : String(error),
+            });
+            return;
+        }
+        if (openWorkflowIds.length === 0)
+            return;
+        const changesByWorkflowId = new Map(changes.map((change) => [change.workflowId, change]));
+        await Promise.all(openWorkflowIds.map(async (workflowId) => {
+            try {
+                const change = changesByWorkflowId.get(workflowId);
+                if (!change)
+                    return;
+                await this.collaborationService.broadcastWorkflowSettingsUpdated(workflowId, change.settings, change.checksum);
+            }
+            catch (error) {
+                this.logger.warn('Failed to broadcast workflow settings update', {
+                    workflowId,
+                    cause: error instanceof Error ? error.message : String(error),
+                });
+            }
+        }));
+    }
+    async resolveCandidateIds(user, scope) {
+        if (scope.workflowIds) {
+            const uniqueIds = [...new Set(scope.workflowIds)];
+            const accessibleIds = await this.workflowFinderService.findWorkflowIdsWithScopeForUser(uniqueIds, user, ['workflow:update']);
+            return uniqueIds.filter((id) => accessibleIds.has(id));
+        }
+        const projectId = scope.projectId ??
+            (scope.folderId
+                ? await this.workflowFinderService.findProjectIdForFolder(scope.folderId)
+                : null);
+        if (projectId === null ||
+            !(await this.workflowFinderService.hasProjectScopeForUser(user, ['workflow:update'], projectId))) {
+            return [];
+        }
+        return await this.workflowFinderService.findAllWorkflowIdsForUser(user, ['workflow:update'], scope.folderId, projectId);
+    }
 };
 exports.McpSettingsService = McpSettingsService;
 exports.McpSettingsService = McpSettingsService = __decorate([
     (0, di_1.Service)(),
     __metadata("design:paramtypes", [db_1.SettingsRepository,
-        cache_service_1.CacheService])
+        cache_service_1.CacheService,
+        db_1.WorkflowRepository,
+        workflow_finder_service_1.WorkflowFinderService,
+        config_1.GlobalConfig,
+        backend_common_1.Logger,
+        collaboration_service_1.CollaborationService])
 ], McpSettingsService);
 //# sourceMappingURL=mcp.settings.service.js.map

package/dist/modules/mcp/mcp.settings.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.settings.service.js","sourceRoot":"","sources":["../../../src/modules/mcp/mcp.settings.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gCAA6C;AAC7C,gCAAkC;AAElC,kEAA8D;AAE9D,MAAM,GAAG,GAAG,oBAAoB,CAAC;AAG1B,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAC9B,YACkB,kBAAsC,EACtC,YAA0B;QAD1B,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,iBAAY,GAAZ,YAAY,CAAc;IACzC,CAAC;IAEJ,KAAK,CAAC,UAAU;QACf,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAS,GAAG,CAAC,CAAC;QAEpE,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,kBAAkB,KAAK,MAAM,CAAC;QACtC,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAEzD,MAAM,OAAO,GAAG,GAAG,EAAE,KAAK,KAAK,MAAM,CAAC;QAEtC,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAErD,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAgB;QAChC,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CACnC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,EAC5D,CAAC,KAAK,CAAC,CACP,CAAC;QAEF,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IACtD,CAAC;CACD,CAAA;AA9BY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,YAAO,GAAE;qCAG6B,uBAAkB;QACxB,4BAAY;GAHhC,kBAAkB,CA8B9B"}
+{"version":3,"file":"mcp.settings.service.js","sourceRoot":"","sources":["../../../src/modules/mcp/mcp.settings.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,wDAA6C;AAC7C,wCAA2C;AAE3C,gCAAiF;AACjF,gCAAkC;AAClC,0CAAkC;AAClC,+CAIsB;AAEtB,iFAA6E;AAC7E,kFAA6E;AAC7E,kEAA8D;AAC9D,yDAAyD;AACzD,iFAA4E;AAI5E,MAAM,GAAG,GAAG,oBAAoB,CAAC;AAEjC,MAAM,eAAe,GAAG,GAAG,CAAC;AAE5B,MAAM,wBAAwB,GAAgC,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;AAiB1E,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAC9B,YACkB,kBAAsC,EACtC,YAA0B,EAC1B,kBAAsC,EACtC,qBAA4C,EAC5C,YAA0B,EAC1B,MAAc,EACd,oBAA0C;QAN1C,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,iBAAY,GAAZ,YAAY,CAAc;QAC1B,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,0BAAqB,GAArB,qBAAqB,CAAuB;QAC5C,iBAAY,GAAZ,YAAY,CAAc;QAC1B,WAAM,GAAN,MAAM,CAAQ;QACd,yBAAoB,GAApB,oBAAoB,CAAsB;IACzD,CAAC;IAEJ,KAAK,CAAC,UAAU;QACf,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAS,GAAG,CAAC,CAAC;QAEpE,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,kBAAkB,KAAK,MAAM,CAAC;QACtC,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAEzD,MAAM,OAAO,GAAG,GAAG,EAAE,KAAK,KAAK,MAAM,CAAC;QAEtC,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAErD,OAAO,OAAO,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,OAAgB;QAChC,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,CACnC,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,EAC5D,CAAC,KAAK,CAAC,CACP,CAAC;QAEF,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,qBAAqB,CAC1B,IAAU,EACV,GAAmC;QAEnC,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC;QAEjE,MAAM,UAAU,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QAC7E,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,mCAAe,CAAC,2DAA2D,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE;YACzD,WAAW;YACX,SAAS;YACT,QAAQ;SACR,CAAC,CAAC;QAEH,MAAM,kBAAkB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,YAAY,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC;QAE1F,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO;gBACN,YAAY,EAAE,CAAC;gBACf,YAAY,EAAE,YAAY;gBAC1B,WAAW,EAAE,CAAC;gBACd,gBAAgB,EAAE,EAAE;gBACpB,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACjD,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,gBAAgB,GAAoC,EAAE,CAAC;QAC7D,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,WAAW,GAAG,CAAC,CAAC;QAEpB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,YAAY,CAAC,MAAM,EAAE,KAAK,IAAI,eAAe,EAAE,CAAC;YAC3E,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,eAAe,CAAC,CAAC;YAEjE,IAAI,CAAC;gBACJ,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;oBACnF,MAAM,YAAY,GAAoC,EAAE,CAAC;oBACzD,MAAM,SAAS,GAAa,EAAE,CAAC;oBAC/B,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;oBAEvB,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,mBAAc,EAAE;wBACnD,KAAK,EAAE,EAAE,EAAE,EAAE,IAAA,YAAE,EAAC,KAAK,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE;wBAC3C,MAAM,EAAE,wBAAwB;qBAChC,CAAC,CAAC;oBACH,MAAM,wBAAwB,GAAG,IAAI,GAAG,EAA6B,CAAC;oBAEtE,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;wBAChC,IAAI,GAAG,CAAC,QAAQ,EAAE,cAAc,KAAK,cAAc,EAAE,CAAC;4BACrD,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;4BACvB,SAAS;wBACV,CAAC;wBAED,MAAM,YAAY,GAAG,IAAA,sCAAmB,EACvC,EAAE,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,cAAc,EAAE,EAC3C,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,CACpC,CAAC;wBAEF,wBAAwB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;oBACpD,CAAC;oBAED,IAAI,wBAAwB,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;wBACzC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;oBACnD,CAAC;oBAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,mBAAc,EAAE;wBAC3C,KAAK,EAAE,EAAE,EAAE,EAAE,IAAA,YAAE,EAAC,CAAC,GAAG,wBAAwB,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE;wBAC1E,MAAM,EAAE,CAAC,IAAI,EAAE,GAAG,uCAAwB,CAAC;qBAC3C,CAAC,CAAC;oBAEH,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;wBACxB,MAAM,YAAY,GAAG,wBAAwB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;wBAC1D,IAAI,YAAY,KAAK,SAAS;4BAAE,SAAS;wBAEzC,MAAM,GAAG,CAAC,MAAM,CACf,mBAAc,EACd,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EACd,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,EAAE,CAC1C,CAAC;wBAGF,MAAM,QAAQ,GAAG,MAAM,IAAA,wCAAyB,EAAC;4BAChD,GAAG,GAAG;4BACN,QAAQ,EAAE,YAAY;yBACtB,CAAC,CAAC;wBAEH,YAAY,CAAC,IAAI,CAAC;4BACjB,UAAU,EAAE,GAAG,CAAC,EAAE;4BAClB,QAAQ,EAAE,EAAE,cAAc,EAAE;4BAC5B,QAAQ;yBACR,CAAC,CAAC;oBACJ,CAAC;oBAED,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;gBACnD,CAAC,CAAC,CAAC;gBAEH,UAAU,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;gBAC5E,gBAAgB,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;gBAC9C,OAAO,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC;gBAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2DAA2D,EAAE;oBAC9E,KAAK;oBACL,SAAS,EAAE,KAAK,CAAC,MAAM;oBACvB,UAAU,EAAE,KAAK;oBACjB,cAAc;iBACd,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAED,MAAM,YAAY,GAAG,CAAC,GAAG,UAAU,EAAE,GAAG,OAAO,CAAC,CAAC;QAEjD,OAAO;YACN,YAAY,EAAE,YAAY,CAAC,MAAM;YACjC,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,GAAG,YAAY,CAAC,MAAM,GAAG,WAAW,CAAC;YAC3E,WAAW;YACX,gBAAgB;YAChB,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,uCAAuC,CAC5C,OAAwC;QAExC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEjC,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC;QAEhE,IAAI,eAAyB,CAAC;QAC9B,IAAI,CAAC;YACJ,eAAe,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC;QACtF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gEAAgE,EAAE;gBAClF,aAAa,EAAE,OAAO,CAAC,MAAM;gBAC7B,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;gBACrC,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC7D,CAAC,CAAC;YACH,OAAO;QACR,CAAC;QAED,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEzC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAE1F,MAAM,OAAO,CAAC,GAAG,CAChB,eAAe,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE;YACxC,IAAI,CAAC;gBACJ,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBACnD,IAAI,CAAC,MAAM;oBAAE,OAAO;gBAEpB,MAAM,IAAI,CAAC,oBAAoB,CAAC,gCAAgC,CAC/D,UAAU,EACV,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,QAAQ,CACf,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8CAA8C,EAAE;oBAChE,UAAU;oBACV,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC7D,CAAC,CAAC;YACJ,CAAC;QACF,CAAC,CAAC,CACF,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAChC,IAAU,EACV,KAIC;QAED,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YACvB,MAAM,SAAS,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;YAClD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,+BAA+B,CACrF,SAAS,EACT,IAAI,EACJ,CAAC,iBAAiB,CAAC,CACnB,CAAC;YACF,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,SAAS,GACd,KAAK,CAAC,SAAS;YACf,CAAC,KAAK,CAAC,QAAQ;gBACd,CAAC,CAAC,MAAM,IAAI,CAAC,qBAAqB,CAAC,sBAAsB,CAAC,KAAK,CAAC,QAAQ,CAAC;gBACzE,CAAC,CAAC,IAAI,CAAC,CAAC;QAEV,IACC,SAAS,KAAK,IAAI;YAClB,CAAC,CAAC,MAAM,IAAI,CAAC,qBAAqB,CAAC,sBAAsB,CACxD,IAAI,EACJ,CAAC,iBAAiB,CAAC,EACnB,SAAS,CACT,CAAC,EACD,CAAC;YACF,OAAO,EAAE,CAAC;QACX,CAAC;QAED,OAAO,MAAM,IAAI,CAAC,qBAAqB,CAAC,yBAAyB,CAChE,IAAI,EACJ,CAAC,iBAAiB,CAAC,EACnB,KAAK,CAAC,QAAQ,EACd,SAAS,CACT,CAAC;IACH,CAAC;CACD,CAAA;AAtPY,gDAAkB;6BAAlB,kBAAkB;IAD9B,IAAA,YAAO,GAAE;qCAG6B,uBAAkB;QACxB,4BAAY;QACN,uBAAkB;QACf,+CAAqB;QAC9B,qBAAY;QAClB,uBAAM;QACQ,4CAAoB;GARhD,kBAAkB,CAsP9B"}

package/dist/modules/mcp/tools/search-executions.tool.d.ts

@@ -0,0 +1,16 @@
+import type { User } from '@n8n/db';
+import z from 'zod';
+import type { ExecutionService } from '../../../executions/execution.service';
+import type { Telemetry } from '../../../telemetry';
+import type { WorkflowFinderService } from '../../../workflows/workflow-finder.service';
+import type { ToolDefinition } from '../mcp.types';
+declare const inputSchema: {
+    workflowId: z.ZodOptional<z.ZodString>;
+    status: z.ZodOptional<z.ZodArray<z.ZodEnum<["canceled", "crashed", "error", "new", "running", "success", "unknown", "waiting"]>, "many">>;
+    startedAfter: z.ZodOptional<z.ZodString>;
+    startedBefore: z.ZodOptional<z.ZodString>;
+    limit: z.ZodOptional<z.ZodNumber>;
+    lastId: z.ZodOptional<z.ZodString>;
+};
+export declare const createSearchExecutionsTool: (user: User, executionService: ExecutionService, workflowFinderService: WorkflowFinderService, telemetry: Telemetry) => ToolDefinition<typeof inputSchema>;
+export {};

package/dist/modules/mcp/tools/search-executions.tool.js

@@ -0,0 +1,140 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createSearchExecutionsTool = void 0;
+const n8n_workflow_1 = require("n8n-workflow");
+const zod_1 = __importDefault(require("zod"));
+const mcp_constants_1 = require("../mcp.constants");
+const mcp_errors_1 = require("../mcp.errors");
+const schemas_1 = require("./schemas");
+const workflow_validation_utils_1 = require("./workflow-validation.utils");
+const MAX_RESULTS = 200;
+const inputSchema = {
+    workflowId: zod_1.default.string().optional().describe('Filter executions by workflow ID'),
+    status: zod_1.default
+        .array(zod_1.default.enum(n8n_workflow_1.ExecutionStatusList))
+        .optional()
+        .describe('Filter by execution status(es)'),
+    startedAfter: zod_1.default
+        .string()
+        .datetime({ offset: true })
+        .optional()
+        .describe('ISO 8601 timestamp — only return executions that started after this time'),
+    startedBefore: zod_1.default
+        .string()
+        .datetime({ offset: true })
+        .optional()
+        .describe('ISO 8601 timestamp — only return executions that started before this time'),
+    limit: (0, schemas_1.createLimitSchema)(MAX_RESULTS),
+    lastId: zod_1.default
+        .string()
+        .optional()
+        .describe('Cursor for pagination — pass the last execution ID from the previous page'),
+};
+const outputSchema = {
+    data: zod_1.default
+        .array(zod_1.default.object({
+        id: zod_1.default.string().describe('The unique identifier of the execution'),
+        workflowId: zod_1.default.string().describe('The workflow this execution belongs to'),
+        status: zod_1.default.enum(n8n_workflow_1.ExecutionStatusList).describe('The execution status'),
+        mode: zod_1.default.enum(n8n_workflow_1.WorkflowExecuteModeList).describe('How the execution was triggered'),
+        startedAt: zod_1.default.string().nullable().describe('ISO timestamp when the execution started'),
+        stoppedAt: zod_1.default.string().nullable().describe('ISO timestamp when the execution stopped'),
+        waitTill: zod_1.default
+            .string()
+            .nullable()
+            .describe('ISO timestamp until when the execution is waiting'),
+    }))
+        .describe('List of executions matching the query'),
+    count: zod_1.default
+        .union([zod_1.default.literal(-1), zod_1.default.number().int().min(0)])
+        .describe('Total matching executions, or -1 if the count is unavailable'),
+    estimated: zod_1.default.boolean().describe('Whether the count is an estimate (for large datasets)'),
+    error: zod_1.default.string().optional().describe('Error message if the query failed'),
+};
+const createSearchExecutionsTool = (user, executionService, workflowFinderService, telemetry) => ({
+    name: 'search_executions',
+    config: {
+        description: 'Search for workflow executions with optional filters. Returns execution metadata including status, timing, and workflow ID.',
+        inputSchema,
+        outputSchema,
+        annotations: {
+            title: 'Search Executions',
+            readOnlyHint: true,
+            destructiveHint: false,
+            idempotentHint: true,
+            openWorldHint: false,
+        },
+    },
+    handler: async ({ workflowId, status, startedAfter, startedBefore, limit = MAX_RESULTS, lastId, }) => {
+        const parameters = { workflowId, status, startedAfter, startedBefore, limit, lastId };
+        const telemetryPayload = {
+            user_id: user.id,
+            tool_name: 'search_executions',
+            parameters,
+        };
+        try {
+            if (workflowId) {
+                await (0, workflow_validation_utils_1.getMcpWorkflow)(workflowId, user, ['workflow:read'], workflowFinderService);
+            }
+            const safeLimit = Math.min(Math.max(1, limit), MAX_RESULTS);
+            const sharingOptions = await executionService.buildSharingOptions('workflow:read');
+            const query = {
+                kind: 'range',
+                user,
+                sharingOptions,
+                range: {
+                    limit: safeLimit,
+                    ...(lastId ? { lastId } : {}),
+                },
+                order: { startedAt: 'DESC' },
+                ...(workflowId ? { workflowId } : {}),
+                ...(status?.length ? { status } : {}),
+                ...(startedAfter ? { startedAfter } : {}),
+                ...(startedBefore ? { startedBefore } : {}),
+                isArchived: false,
+                workflowBooleanSettings: [{ key: 'availableInMCP', value: true }],
+            };
+            const { results, count, estimated } = await executionService.findRangeWithCount(query);
+            const data = results.map((execution) => ({
+                id: execution.id,
+                workflowId: execution.workflowId,
+                status: execution.status,
+                mode: execution.mode,
+                startedAt: execution.startedAt ?? null,
+                stoppedAt: execution.stoppedAt ?? null,
+                waitTill: execution.waitTill ?? null,
+            }));
+            const payload = { data, count, estimated };
+            telemetryPayload.results = {
+                success: true,
+                data: { count, estimated },
+            };
+            telemetry.track(mcp_constants_1.USER_CALLED_MCP_TOOL_EVENT, telemetryPayload);
+            return {
+                structuredContent: payload,
+                content: [{ type: 'text', text: JSON.stringify(payload) }],
+            };
+        }
+        catch (er) {
+            const error = er instanceof Error ? er : new Error(String(er));
+            const isAccessError = error instanceof mcp_errors_1.WorkflowAccessError;
+            telemetryPayload.results = {
+                success: false,
+                error: error.message,
+                error_reason: isAccessError ? error.reason : undefined,
+            };
+            telemetry.track(mcp_constants_1.USER_CALLED_MCP_TOOL_EVENT, telemetryPayload);
+            const output = { data: [], count: 0, estimated: false, error: error.message };
+            return {
+                content: [{ type: 'text', text: JSON.stringify(output) }],
+                structuredContent: output,
+                isError: true,
+            };
+        }
+    },
+});
+exports.createSearchExecutionsTool = createSearchExecutionsTool;
+//# sourceMappingURL=search-executions.tool.js.map

package/dist/modules/mcp/tools/search-executions.tool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-executions.tool.js","sourceRoot":"","sources":["../../../../src/modules/mcp/tools/search-executions.tool.ts"],"names":[],"mappings":";;;;;;AACA,+CAAkG;AAClG,8CAAoB;AAMpB,oDAA8D;AAC9D,8CAAoD;AAEpD,uCAA8C;AAC9C,2EAA6D;AAE7D,MAAM,WAAW,GAAG,GAAG,CAAC;AAExB,MAAM,WAAW,GAAG;IACnB,UAAU,EAAE,aAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kCAAkC,CAAC;IAC9E,MAAM,EAAE,aAAC;SACP,KAAK,CAAC,aAAC,CAAC,IAAI,CAAC,kCAAmB,CAAC,CAAC;SAClC,QAAQ,EAAE;SACV,QAAQ,CAAC,gCAAgC,CAAC;IAC5C,YAAY,EAAE,aAAC;SACb,MAAM,EAAE;SACR,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;SAC1B,QAAQ,EAAE;SACV,QAAQ,CAAC,0EAA0E,CAAC;IACtF,aAAa,EAAE,aAAC;SACd,MAAM,EAAE;SACR,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;SAC1B,QAAQ,EAAE;SACV,QAAQ,CAAC,2EAA2E,CAAC;IACvF,KAAK,EAAE,IAAA,2BAAiB,EAAC,WAAW,CAAC;IACrC,MAAM,EAAE,aAAC;SACP,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CAAC,2EAA2E,CAAC;CAC/D,CAAC;AAE1B,MAAM,YAAY,GAAG;IACpB,IAAI,EAAE,aAAC;SACL,KAAK,CACL,aAAC,CAAC,MAAM,CAAC;QACR,EAAE,EAAE,aAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;QACjE,UAAU,EAAE,aAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;QACzE,MAAM,EAAE,aAAC,CAAC,IAAI,CAAC,kCAAmB,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC;QACpE,IAAI,EAAE,aAAC,CAAC,IAAI,CAAC,sCAAuB,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC;QACjF,SAAS,EAAE,aAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;QACrF,SAAS,EAAE,aAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,0CAA0C,CAAC;QACrF,QAAQ,EAAE,aAAC;aACT,MAAM,EAAE;aACR,QAAQ,EAAE;aACV,QAAQ,CAAC,mDAAmD,CAAC;KAC/D,CAAC,CACF;SACA,QAAQ,CAAC,uCAAuC,CAAC;IACnD,KAAK,EAAE,aAAC;SACN,KAAK,CAAC,CAAC,aAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,aAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;SAC/C,QAAQ,CAAC,8DAA8D,CAAC;IAC1E,SAAS,EAAE,aAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,uDAAuD,CAAC;IACxF,KAAK,EAAE,aAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,mCAAmC,CAAC;CAClD,CAAC;AAEnB,MAAM,0BAA0B,GAAG,CACzC,IAAU,EACV,gBAAkC,EAClC,qBAA4C,EAC5C,SAAoB,EACiB,EAAE,CAAC,CAAC;IACzC,IAAI,EAAE,mBAAmB;IACzB,MAAM,EAAE;QACP,WAAW,EACV,6HAA6H;QAC9H,WAAW;QACX,YAAY;QACZ,WAAW,EAAE;YACZ,KAAK,EAAE,mBAAmB;YAC1B,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,KAAK;YACtB,cAAc,EAAE,IAAI;YACpB,aAAa,EAAE,KAAK;SACpB;KACD;IACD,OAAO,EAAE,KAAK,EAAE,EACf,UAAU,EACV,MAAM,EACN,YAAY,EACZ,aAAa,EACb,KAAK,GAAG,WAAW,EACnB,MAAM,GAQN,EAAE,EAAE;QACJ,MAAM,UAAU,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QACtF,MAAM,gBAAgB,GAAkC;YACvD,OAAO,EAAE,IAAI,CAAC,EAAE;YAChB,SAAS,EAAE,mBAAmB;YAC9B,UAAU;SACV,CAAC;QAEF,IAAI,CAAC;YAEJ,IAAI,UAAU,EAAE,CAAC;gBAChB,MAAM,IAAA,0CAAc,EAAC,UAAU,EAAE,IAAI,EAAE,CAAC,eAAe,CAAC,EAAE,qBAAqB,CAAC,CAAC;YAClF,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,WAAW,CAAC,CAAC;YAC5D,MAAM,cAAc,GAAG,MAAM,gBAAgB,CAAC,mBAAmB,CAAC,eAAe,CAAC,CAAC;YAEnF,MAAM,KAAK,GAAG;gBACb,IAAI,EAAE,OAAgB;gBACtB,IAAI;gBACJ,cAAc;gBACd,KAAK,EAAE;oBACN,KAAK,EAAE,SAAS;oBAChB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC7B;gBACD,KAAK,EAAE,EAAE,SAAS,EAAE,MAAe,EAAE;gBACrC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACrC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3C,UAAU,EAAE,KAAK;gBACjB,uBAAuB,EAAE,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;aACjE,CAAC;YAEF,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,gBAAgB,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAEvF,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gBACxC,EAAE,EAAE,SAAS,CAAC,EAAE;gBAChB,UAAU,EAAE,SAAS,CAAC,UAAU;gBAChC,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,SAAS,EAAE,SAAS,CAAC,SAAS,IAAI,IAAI;gBACtC,SAAS,EAAE,SAAS,CAAC,SAAS,IAAI,IAAI;gBACtC,QAAQ,EAAE,SAAS,CAAC,QAAQ,IAAI,IAAI;aACpC,CAAC,CAAC,CAAC;YAEJ,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;YAE3C,gBAAgB,CAAC,OAAO,GAAG;gBAC1B,OAAO,EAAE,IAAI;gBACb,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE;aAC1B,CAAC;YACF,SAAS,CAAC,KAAK,CAAC,0CAA0B,EAAE,gBAAgB,CAAC,CAAC;YAE9D,OAAO;gBACN,iBAAiB,EAAE,OAAO;gBAC1B,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;aAC1D,CAAC;QACH,CAAC;QAAC,OAAO,EAAE,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,EAAE,YAAY,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/D,MAAM,aAAa,GAAG,KAAK,YAAY,gCAAmB,CAAC;YAE3D,gBAAgB,CAAC,OAAO,GAAG;gBAC1B,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,KAAK,CAAC,OAAO;gBACpB,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;aACtD,CAAC;YACF,SAAS,CAAC,KAAK,CAAC,0CAA0B,EAAE,gBAAgB,CAAC,CAAC;YAE9D,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YAC9E,OAAO;gBACN,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzD,iBAAiB,EAAE,MAAM;gBACzB,OAAO,EAAE,IAAI;aACb,CAAC;QACH,CAAC;IACF,CAAC;CACD,CAAC,CAAC;AA/GU,QAAA,0BAA0B,8BA+GpC"}

package/dist/modules/mcp/tools/workflow-builder/get-workflow-node-types.tool.d.ts

@@ -12,16 +12,16 @@ declare const inputSchema: {
         mode: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         nodeId: string;
-        version?: string | undefined;
         resource?: string | undefined;
         operation?: string | undefined;
         mode?: string | undefined;
+        version?: string | undefined;
     }, {
         nodeId: string;
-        version?: string | undefined;
         resource?: string | undefined;
         operation?: string | undefined;
         mode?: string | undefined;
+        version?: string | undefined;
     }>]>, "many">;
 };
 export declare const createGetWorkflowNodeTypesTool: (user: User, workflowBuilderToolsService: WorkflowBuilderToolsService, telemetry: Telemetry) => ToolDefinition<typeof inputSchema>;

package/dist/modules/oauth-jwe/oauth-jwe-decrypt.service.d.ts

@@ -0,0 +1,7 @@
+import type { IDataObject } from 'n8n-workflow';
+import { OAuthJweKeyService } from './oauth-jwe-key.service';
+export declare class OAuthJweDecryptService {
+    private readonly keyService;
+    constructor(keyService: OAuthJweKeyService);
+    decryptOAuth2TokenData(tokenData: IDataObject): Promise<IDataObject>;
+}

package/dist/modules/oauth-jwe/oauth-jwe-decrypt.service.js

@@ -0,0 +1,48 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OAuthJweDecryptService = void 0;
+const di_1 = require("@n8n/di");
+const n8n_workflow_1 = require("n8n-workflow");
+const oauth_jwe_key_service_1 = require("./oauth-jwe-key.service");
+const oauth_jwe_utils_1 = require("./oauth-jwe.utils");
+const JWE_TOKEN_FIELDS = ['access_token', 'id_token'];
+let OAuthJweDecryptService = class OAuthJweDecryptService {
+    constructor(keyService) {
+        this.keyService = keyService;
+    }
+    async decryptOAuth2TokenData(tokenData) {
+        const { privateKey } = await this.keyService.getKeyPair();
+        const result = { ...tokenData };
+        let presentAny = false;
+        let decryptedAny = false;
+        for (const field of JWE_TOKEN_FIELDS) {
+            const value = result[field];
+            if (value === undefined || value === null)
+                continue;
+            presentAny = true;
+            if ((0, oauth_jwe_utils_1.isJweToken)(value)) {
+                result[field] = await (0, oauth_jwe_utils_1.decryptJweToken)(value, privateKey);
+                decryptedAny = true;
+            }
+        }
+        if (presentAny && !decryptedAny) {
+            throw new n8n_workflow_1.UserError('Expected at least one JWE-encrypted token but received only plaintext');
+        }
+        return result;
+    }
+};
+exports.OAuthJweDecryptService = OAuthJweDecryptService;
+exports.OAuthJweDecryptService = OAuthJweDecryptService = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [oauth_jwe_key_service_1.OAuthJweKeyService])
+], OAuthJweDecryptService);
+//# sourceMappingURL=oauth-jwe-decrypt.service.js.map

package/dist/modules/oauth-jwe/oauth-jwe-decrypt.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-jwe-decrypt.service.js","sourceRoot":"","sources":["../../../src/modules/oauth-jwe/oauth-jwe-decrypt.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gCAAkC;AAElC,+CAAyC;AAEzC,mEAA6D;AAC7D,uDAAgE;AAEhE,MAAM,gBAAgB,GAAG,CAAC,cAAc,EAAE,UAAU,CAAU,CAAC;AASxD,IAAM,sBAAsB,GAA5B,MAAM,sBAAsB;IAClC,YAA6B,UAA8B;QAA9B,eAAU,GAAV,UAAU,CAAoB;IAAG,CAAC;IAE/D,KAAK,CAAC,sBAAsB,CAAC,SAAsB;QAClD,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAgB,EAAE,GAAG,SAAS,EAAE,CAAC;QAC7C,IAAI,UAAU,GAAG,KAAK,CAAC;QACvB,IAAI,YAAY,GAAG,KAAK,CAAC;QAEzB,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;YACtC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;gBAAE,SAAS;YACpD,UAAU,GAAG,IAAI,CAAC;YAClB,IAAI,IAAA,4BAAU,EAAC,KAAK,CAAC,EAAE,CAAC;gBACvB,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,IAAA,iCAAe,EAAC,KAAK,EAAE,UAAU,CAAC,CAAC;gBACzD,YAAY,GAAG,IAAI,CAAC;YACrB,CAAC;QACF,CAAC;QAED,IAAI,UAAU,IAAI,CAAC,YAAY,EAAE,CAAC;YACjC,MAAM,IAAI,wBAAS,CAAC,uEAAuE,CAAC,CAAC;QAC9F,CAAC;QAED,OAAO,MAAM,CAAC;IACf,CAAC;CACD,CAAA;AAzBY,wDAAsB;iCAAtB,sBAAsB;IADlC,IAAA,YAAO,GAAE;qCAEgC,0CAAkB;GAD/C,sBAAsB,CAyBlC"}

package/dist/modules/oauth-jwe/oauth-jwe-key.service.d.ts

@@ -0,0 +1,31 @@
+import { Logger } from '@n8n/backend-common';
+import { DeploymentKeyRepository } from '@n8n/db';
+import type { CryptoKey, JWK } from 'jose';
+import { Cipher } from 'n8n-core';
+import { CacheService } from '../../services/cache/cache.service';
+import { type JweKeyAlgorithm } from './oauth-jwe.constants';
+type OAuthJweKeyPair = {
+    algorithm: JweKeyAlgorithm;
+    privateKey: CryptoKey;
+    publicKey: CryptoKey;
+    publicJwk: JWK;
+    kid: string;
+};
+export declare class OAuthJweKeyService {
+    private readonly deploymentKeyRepository;
+    private readonly cipher;
+    private readonly cacheService;
+    private readonly logger;
+    constructor(deploymentKeyRepository: DeploymentKeyRepository, cipher: Cipher, cacheService: CacheService, logger: Logger);
+    initialize(): Promise<void>;
+    getKeyPair(algorithm?: JweKeyAlgorithm): Promise<OAuthJweKeyPair>;
+    getPublicJwk(algorithm?: JweKeyAlgorithm): Promise<JWK>;
+    getPublicJwks(): Promise<JWK[]>;
+    private findEntry;
+    private loadData;
+    private deriveKeyPair;
+    private loadOrGenerate;
+    private readActiveEntry;
+    private generateAndPersist;
+}
+export {};