n8n 2.37.6 → 2.38.0

package/dist/modules/workflow-reviews.ee/workflow-review-participant.resolver.js

@@ -0,0 +1,69 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkflowReviewParticipantResolver = void 0;
+const db_1 = require("@n8n/db");
+const di_1 = require("@n8n/di");
+const workflow_review_mapper_1 = require("./workflow-review.mapper");
+let WorkflowReviewParticipantResolver = class WorkflowReviewParticipantResolver {
+    constructor(workflowReviewRequestReviewerRepository, workflowReviewRequestAuthorRepository, userRepository) {
+        this.workflowReviewRequestReviewerRepository = workflowReviewRequestReviewerRepository;
+        this.workflowReviewRequestAuthorRepository = workflowReviewRequestAuthorRepository;
+        this.userRepository = userRepository;
+    }
+    async resolve(requests) {
+        const requestIds = requests.map((request) => request.id);
+        const [reviewerRows, authorRows] = await Promise.all([
+            this.workflowReviewRequestReviewerRepository.findByRequestIds(requestIds),
+            this.workflowReviewRequestAuthorRepository.findByRequestIds(requestIds),
+        ]);
+        const reviewerIdsByRequestId = groupUserIdsByRequestId(reviewerRows);
+        const authorIdsByRequestId = groupUserIdsByRequestId(authorRows);
+        const userIds = new Set([
+            ...requests.map((request) => request.createdById).filter((id) => id !== null),
+            ...reviewerRows.map((row) => row.userId),
+            ...authorRows.map((row) => row.userId),
+        ]);
+        const usersById = new Map();
+        if (userIds.size > 0) {
+            for (const user of await this.userRepository.findManyByIds([...userIds])) {
+                usersById.set(user.id, (0, workflow_review_mapper_1.toEligibleReviewer)(user));
+            }
+        }
+        const project = (userIdsForRequest) => userIdsForRequest.map((userId) => usersById.get(userId)).filter((user) => user !== undefined);
+        const participantsByRequestId = new Map(requests.map((request) => [
+            request.id,
+            {
+                requester: request.createdById ? (usersById.get(request.createdById) ?? null) : null,
+                authors: project(authorIdsByRequestId.get(request.id) ?? []),
+                reviewers: project(reviewerIdsByRequestId.get(request.id) ?? []),
+            },
+        ]));
+        return {
+            for: (requestId) => participantsByRequestId.get(requestId) ?? { requester: null, authors: [], reviewers: [] },
+        };
+    }
+};
+exports.WorkflowReviewParticipantResolver = WorkflowReviewParticipantResolver;
+exports.WorkflowReviewParticipantResolver = WorkflowReviewParticipantResolver = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [db_1.WorkflowReviewRequestReviewerRepository, db_1.WorkflowReviewRequestAuthorRepository, db_1.UserRepository])
+], WorkflowReviewParticipantResolver);
+function groupUserIdsByRequestId(rows) {
+    const idsByRequestId = new Map();
+    for (const { workflowReviewRequestId, userId } of rows) {
+        const ids = idsByRequestId.get(workflowReviewRequestId) ?? [];
+        ids.push(userId);
+        idsByRequestId.set(workflowReviewRequestId, ids);
+    }
+    return idsByRequestId;
+}
+//# sourceMappingURL=workflow-review-participant.resolver.js.map

package/dist/modules/workflow-reviews.ee/workflow-review-participant.resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-review-participant.resolver.js","sourceRoot":"","sources":["../../../src/modules/workflow-reviews.ee/workflow-review-participant.resolver.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,gCAKiB;AACjB,gCAAkC;AAElC,qEAA8D;AAoBvD,IAAM,iCAAiC,GAAvC,MAAM,iCAAiC;IAC7C,YACkB,uCAAgF,EAChF,qCAA4E,EAC5E,cAA8B;uDAF9B,uCAAuC;qDACvC,qCAAqC;8BACrC,cAAc;IAC7B,CAAC;IAOJ,KAAK,CAAC,OAAO,CAAC,QAAiC;QAC9C,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACzD,MAAM,CAAC,YAAY,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACpD,IAAI,CAAC,uCAAuC,CAAC,gBAAgB,CAAC,UAAU,CAAC;YACzE,IAAI,CAAC,qCAAqC,CAAC,gBAAgB,CAAC,UAAU,CAAC;SACvE,CAAC,CAAC;QAEH,MAAM,sBAAsB,GAAG,uBAAuB,CAAC,YAAY,CAAC,CAAC;QACrE,MAAM,oBAAoB,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;QAEjE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;YACvB,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC;YAC7E,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC;YACxC,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC;SACtC,CAAC,CAAC;QAEH,MAAM,SAAS,GAAG,IAAI,GAAG,EAA0C,CAAC;QACpE,IAAI,OAAO,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YACtB,KAAK,MAAM,IAAI,IAAI,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;gBAC1E,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAA,2CAAkB,EAAC,IAAI,CAAC,CAAC,CAAC;YAClD,CAAC;QACF,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,iBAA2B,EAAE,EAAE,CAC/C,iBAAiB,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;QAE/F,MAAM,uBAAuB,GAAG,IAAI,GAAG,CACtC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACzB,OAAO,CAAC,EAAE;YACV;gBACC,SAAS,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;gBACpF,OAAO,EAAE,OAAO,CAAC,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;gBAC5D,SAAS,EAAE,OAAO,CAAC,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;aAChE;SACD,CAAC,CACF,CAAC;QAEF,OAAO;YACN,GAAG,EAAE,CAAC,SAAS,EAAE,EAAE,CAClB,uBAAuB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE;SAC1F,CAAC;IACH,CAAC;CACD,CAAA;;4CAtDY,iCAAiC;IAD7C,IAAA,YAAO,GAAE;qCAGkD,4CAAuC,EACzC,0CAAqC,EAC5D,mBAAc;GAJpC,iCAAiC,CAsD7C;AAGD,SAAS,uBAAuB,CAC/B,IAAgE;IAEhE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAoB,CAAC;IACnD,KAAK,MAAM,EAAE,uBAAuB,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC;QACxD,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,EAAE,CAAC;QAC9D,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjB,cAAc,CAAC,GAAG,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,cAAc,CAAC;AACvB,CAAC"}

package/dist/modules/workflow-reviews.ee/workflow-review-request-decision.service.d.ts

@@ -0,0 +1,34 @@
+import type { DecideWorkflowReviewRequestDto, DecideWorkflowReviewRequestResponse } from '@n8n/api-types';
+import { Logger } from '@n8n/backend-common';
+import { DbLockService, UserRepository, WorkflowReviewActivityRepository, WorkflowReviewRequestAuthorRepository, WorkflowReviewRequestRepository, WorkflowReviewRequestReviewerRepository, WorkflowReviewRequestWorkflowRepository, type User } from '@n8n/db';
+import { CollaborationService } from '../../collaboration/collaboration.service';
+import { EventService } from '../../events/event.service';
+import { WorkflowFinderService } from '../../workflows/workflow-finder.service';
+import { WorkflowService } from '../../workflows/workflow.service';
+import { WorkflowReviewAuthorizationService } from './workflow-review-authorization.service';
+import { WorkflowReviewFeatureGate } from './workflow-review-feature-gate.service';
+import { WorkflowReviewRequestMutationGuard } from './workflow-review-request-mutation-guard.service';
+import { WorkflowReviewStateNotifier } from './workflow-review-state-notifier.service';
+export declare class WorkflowReviewRequestDecisionService {
+    private readonly logger;
+    private readonly featureGate;
+    private readonly workflowFinderService;
+    private readonly workflowReviewRequestRepository;
+    private readonly workflowReviewRequestWorkflowRepository;
+    private readonly workflowReviewRequestAuthorRepository;
+    private readonly workflowReviewRequestReviewerRepository;
+    private readonly activityRepository;
+    private readonly userRepository;
+    private readonly dbLockService;
+    private readonly collaborationService;
+    private readonly workflowService;
+    private readonly authorizationService;
+    private readonly eventService;
+    private readonly mutationGuard;
+    private readonly stateNotifier;
+    constructor(logger: Logger, featureGate: WorkflowReviewFeatureGate, workflowFinderService: WorkflowFinderService, workflowReviewRequestRepository: WorkflowReviewRequestRepository, workflowReviewRequestWorkflowRepository: WorkflowReviewRequestWorkflowRepository, workflowReviewRequestAuthorRepository: WorkflowReviewRequestAuthorRepository, workflowReviewRequestReviewerRepository: WorkflowReviewRequestReviewerRepository, activityRepository: WorkflowReviewActivityRepository, userRepository: UserRepository, dbLockService: DbLockService, collaborationService: CollaborationService, workflowService: WorkflowService, authorizationService: WorkflowReviewAuthorizationService, eventService: EventService, mutationGuard: WorkflowReviewRequestMutationGuard, stateNotifier: WorkflowReviewStateNotifier);
+    decide(user: User, workflowReviewRequestId: string, dto: DecideWorkflowReviewRequestDto): Promise<DecideWorkflowReviewRequestResponse>;
+    private resolveRequesterPublishability;
+    private publishApprovedVersion;
+    private assertDecisionAllowed;
+}

package/dist/modules/workflow-reviews.ee/workflow-review-request-decision.service.js

@@ -0,0 +1,237 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkflowReviewRequestDecisionService = void 0;
+const backend_common_1 = require("@n8n/backend-common");
+const db_1 = require("@n8n/db");
+const di_1 = require("@n8n/di");
+const ensure_error_1 = require("@n8n/utils/errors/ensure-error");
+const collaboration_service_1 = require("../../collaboration/collaboration.service");
+const bad_request_error_1 = require("../../errors/response-errors/bad-request.error");
+const forbidden_error_1 = require("../../errors/response-errors/forbidden.error");
+const not_found_error_1 = require("../../errors/response-errors/not-found.error");
+const event_service_1 = require("../../events/event.service");
+const workflow_finder_service_1 = require("../../workflows/workflow-finder.service");
+const workflow_service_1 = require("../../workflows/workflow.service");
+const workflow_review_authorization_service_1 = require("./workflow-review-authorization.service");
+const workflow_review_decision_policy_1 = require("./workflow-review-decision-policy");
+const workflow_review_feature_gate_service_1 = require("./workflow-review-feature-gate.service");
+const workflow_review_mapper_1 = require("./workflow-review.mapper");
+const workflow_review_request_mutation_guard_service_1 = require("./workflow-review-request-mutation-guard.service");
+const workflow_review_state_notifier_service_1 = require("./workflow-review-state-notifier.service");
+let WorkflowReviewRequestDecisionService = class WorkflowReviewRequestDecisionService {
+    constructor(logger, featureGate, workflowFinderService, workflowReviewRequestRepository, workflowReviewRequestWorkflowRepository, workflowReviewRequestAuthorRepository, workflowReviewRequestReviewerRepository, activityRepository, userRepository, dbLockService, collaborationService, workflowService, authorizationService, eventService, mutationGuard, stateNotifier) {
+        this.logger = logger;
+        this.featureGate = featureGate;
+        this.workflowFinderService = workflowFinderService;
+        this.workflowReviewRequestRepository = workflowReviewRequestRepository;
+        this.workflowReviewRequestWorkflowRepository = workflowReviewRequestWorkflowRepository;
+        this.workflowReviewRequestAuthorRepository = workflowReviewRequestAuthorRepository;
+        this.workflowReviewRequestReviewerRepository = workflowReviewRequestReviewerRepository;
+        this.activityRepository = activityRepository;
+        this.userRepository = userRepository;
+        this.dbLockService = dbLockService;
+        this.collaborationService = collaborationService;
+        this.workflowService = workflowService;
+        this.authorizationService = authorizationService;
+        this.eventService = eventService;
+        this.mutationGuard = mutationGuard;
+        this.stateNotifier = stateNotifier;
+    }
+    async decide(user, workflowReviewRequestId, dto) {
+        await this.featureGate.assertAvailable();
+        const request = await this.workflowReviewRequestRepository.findById(workflowReviewRequestId, {});
+        if (!request) {
+            throw new not_found_error_1.NotFoundError('Could not find review request');
+        }
+        const workflowRows = await this.workflowReviewRequestWorkflowRepository.findByRequestId(workflowReviewRequestId, {});
+        const [workflowRow] = workflowRows;
+        if (!workflowRow) {
+            throw new not_found_error_1.NotFoundError('Could not find review request');
+        }
+        const readableWorkflows = await Promise.all(workflowRows.map(async (row) => await this.workflowFinderService.findWorkflowForUser(row.workflowId, user, [
+            'workflow:read',
+        ])));
+        const canReadEveryWorkflow = readableWorkflows.every((workflow) => workflow !== null);
+        if (!canReadEveryWorkflow) {
+            throw new not_found_error_1.NotFoundError('Could not find review request');
+        }
+        (0, workflow_review_request_mutation_guard_service_1.assertWorkflowReviewRequestUpdatable)(request);
+        const hasAdminOverride = await this.authorizationService.isAdminForProject(user, request.projectId);
+        const isAuthor = await this.workflowReviewRequestAuthorRepository.isAuthor({ workflowReviewRequestId, userId: user.id }, {});
+        const isAssignedReviewer = await this.workflowReviewRequestReviewerRepository.isReviewer({ workflowReviewRequestId, userId: user.id }, {});
+        this.assertDecisionAllowed({
+            canReadEveryWorkflow,
+            isAuthor,
+            isAssignedReviewer,
+            hasAdminOverride,
+        });
+        const requesterPublishability = dto.decision === 'approved'
+            ? await this.resolveRequesterPublishability(request.createdById, workflowRow.workflowId)
+            : null;
+        if (dto.decision === 'changes_requested' && !dto.note) {
+            throw new bad_request_error_1.BadRequestError('A note is required when requesting changes');
+        }
+        const { request: saved, pinnedVersionId, decidedAsAssignedReviewer, } = await this.dbLockService.withLockContext(1004, async (ctx) => {
+            const current = await this.workflowReviewRequestRepository.findById(workflowReviewRequestId, ctx);
+            if (!current) {
+                throw new not_found_error_1.NotFoundError('Could not find review request');
+            }
+            (0, workflow_review_request_mutation_guard_service_1.assertWorkflowReviewRequestUpdatable)(current);
+            const isAuthorNow = await this.workflowReviewRequestAuthorRepository.isAuthor({ workflowReviewRequestId, userId: user.id }, ctx);
+            const isAssignedReviewerNow = await this.workflowReviewRequestReviewerRepository.isReviewer({ workflowReviewRequestId, userId: user.id }, ctx);
+            this.assertDecisionAllowed({
+                canReadEveryWorkflow,
+                isAuthor: isAuthorNow,
+                isAssignedReviewer: isAssignedReviewerNow,
+                hasAdminOverride,
+            });
+            const currentRows = await this.workflowReviewRequestWorkflowRepository.findByRequestId(workflowReviewRequestId, ctx);
+            const currentRow = currentRows.find((row) => row.workflowId === workflowRow.workflowId);
+            if (!currentRow) {
+                throw new not_found_error_1.NotFoundError('Could not find review request');
+            }
+            await this.mutationGuard.assertWorkflowStillReviewable(currentRow.workflowId, current.projectId, ctx, 'review');
+            if (dto.decision === 'approved') {
+                for (const row of currentRows) {
+                    await this.workflowReviewRequestWorkflowRepository.captureApprovalBaseline({
+                        workflowReviewRequestId,
+                        workflowId: row.workflowId,
+                    }, ctx);
+                }
+            }
+            current.decision = dto.decision;
+            current.updatedById = user.id;
+            if (dto.decision === 'approved') {
+                current.state = 'closed';
+                current.closedById = requesterPublishability?.canPublish === true ? user.id : null;
+                current.approvedAt = new Date();
+            }
+            const savedRequest = await this.workflowReviewRequestRepository.saveRequest(current, ctx);
+            await this.activityRepository.createActivity({
+                workflowReviewRequestId,
+                type: dto.decision === 'approved' ? 'review.approved' : 'review.changes_requested',
+                data: {
+                    workflowVersions: currentRows.flatMap((row) => row.workflowVersionId === null
+                        ? []
+                        : [{ workflowId: row.workflowId, workflowVersionId: row.workflowVersionId }]),
+                    note: dto.note ?? null,
+                },
+                createdById: user.id,
+            }, ctx);
+            return {
+                request: savedRequest,
+                pinnedVersionId: currentRow.workflowVersionId,
+                decidedAsAssignedReviewer: isAssignedReviewerNow,
+            };
+        });
+        this.stateNotifier.notify(workflowRow.workflowId);
+        this.eventService.emit('workflow-review-decided', {
+            user,
+            workflowReviewRequestId,
+            workflowId: workflowRow.workflowId,
+            workflowVersionId: pinnedVersionId,
+            decision: dto.decision,
+            decidedVia: decidedAsAssignedReviewer ? 'assigned-reviewer' : 'admin-override',
+            reviewCreatedAt: saved.createdAt,
+        });
+        const summary = (0, workflow_review_mapper_1.toRequestSummary)(saved, pinnedVersionId);
+        if (dto.decision !== 'approved' || requesterPublishability === null) {
+            return summary;
+        }
+        if (!requesterPublishability.canPublish) {
+            this.logger.warn('Cannot publish approved review: requester cannot publish', {
+                workflowId: workflowRow.workflowId,
+                message: requesterPublishability.failureMessage,
+            });
+            return {
+                ...summary,
+                autoPublish: {
+                    status: 'failed',
+                    message: requesterPublishability.failureMessage,
+                },
+            };
+        }
+        return {
+            ...summary,
+            autoPublish: await this.publishApprovedVersion(requesterPublishability.requester, workflowRow.workflowId, pinnedVersionId),
+        };
+    }
+    async resolveRequesterPublishability(createdById, workflowId) {
+        if (!createdById) {
+            return {
+                canPublish: false,
+                failureMessage: 'The review requester is no longer available',
+            };
+        }
+        const [requester] = await this.userRepository.findManyByIds([createdById], {
+            includeRole: true,
+        });
+        if (!requester || requester.disabled) {
+            return {
+                canPublish: false,
+                failureMessage: 'The review requester is no longer available',
+            };
+        }
+        const workflow = await this.workflowFinderService.findWorkflowForUser(workflowId, requester, [
+            'workflow:publish',
+        ]);
+        if (!workflow) {
+            return {
+                canPublish: false,
+                failureMessage: 'The review requester no longer has permission to publish this workflow',
+            };
+        }
+        return { canPublish: true, requester };
+    }
+    async publishApprovedVersion(requester, workflowId, pinnedVersionId) {
+        if (pinnedVersionId === null) {
+            this.logger.warn('Cannot publish approved review: the pinned version was pruned', {
+                workflowId,
+            });
+            return { status: 'failed', message: 'The reviewed workflow version no longer exists' };
+        }
+        try {
+            await this.workflowService.activateWorkflow(requester, workflowId, {
+                versionId: pinnedVersionId,
+                source: 'review-approval',
+            });
+        }
+        catch (error) {
+            this.logger.error('Failed to publish workflow after review approval', {
+                workflowId,
+                pinnedVersionId,
+                error,
+            });
+            return { status: 'failed', message: (0, ensure_error_1.ensureError)(error).message };
+        }
+        this.collaborationService
+            .broadcastWorkflowUpdate(workflowId, requester.id)
+            .catch((error) => this.logger.warn('Failed to broadcast workflow update', { workflowId, error }));
+        return { status: 'published' };
+    }
+    assertDecisionAllowed(facts) {
+        const capability = (0, workflow_review_decision_policy_1.resolveDecisionCapability)(facts);
+        if (capability.allowed) {
+            return;
+        }
+        if (capability.reason === 'author') {
+            throw new forbidden_error_1.ForbiddenError('Authors cannot decide on their own review request');
+        }
+        throw new not_found_error_1.NotFoundError('Could not find review request');
+    }
+};
+exports.WorkflowReviewRequestDecisionService = WorkflowReviewRequestDecisionService;
+exports.WorkflowReviewRequestDecisionService = WorkflowReviewRequestDecisionService = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [backend_common_1.Logger, workflow_review_feature_gate_service_1.WorkflowReviewFeatureGate, workflow_finder_service_1.WorkflowFinderService, db_1.WorkflowReviewRequestRepository, db_1.WorkflowReviewRequestWorkflowRepository, db_1.WorkflowReviewRequestAuthorRepository, db_1.WorkflowReviewRequestReviewerRepository, db_1.WorkflowReviewActivityRepository, db_1.UserRepository, db_1.DbLockService, collaboration_service_1.CollaborationService, workflow_service_1.WorkflowService, workflow_review_authorization_service_1.WorkflowReviewAuthorizationService, event_service_1.EventService, workflow_review_request_mutation_guard_service_1.WorkflowReviewRequestMutationGuard, workflow_review_state_notifier_service_1.WorkflowReviewStateNotifier])
+], WorkflowReviewRequestDecisionService);
+//# sourceMappingURL=workflow-review-request-decision.service.js.map

package/dist/modules/workflow-reviews.ee/workflow-review-request-decision.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-review-request-decision.service.js","sourceRoot":"","sources":["../../../src/modules/workflow-reviews.ee/workflow-review-request-decision.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAKA,wDAA6C;AAC7C,gCAUiB;AACjB,gCAAkC;AAClC,iEAA6D;AAE7D,iFAA6E;AAC7E,kFAA6E;AAC7E,8EAA0E;AAC1E,8EAAyE;AACzE,0DAAsD;AACtD,iFAA4E;AAC5E,mEAA+D;AAE/D,mGAA6F;AAC7F,uFAG2C;AAC3C,iGAAmF;AACnF,qEAA4D;AAC5D,qHAG0D;AAC1D,qGAAuF;AAGhF,IAAM,oCAAoC,GAA1C,MAAM,oCAAoC;IAChD,YACkB,MAAc,EACd,WAAsC,EACtC,qBAA4C,EAC5C,+BAAgE,EAChE,uCAAgF,EAChF,qCAA4E,EAC5E,uCAAgF,EAChF,kBAAoD,EACpD,cAA8B,EAC9B,aAA4B,EAC5B,oBAA0C,EAC1C,eAAgC,EAChC,oBAAwD,EACxD,YAA0B,EAC1B,aAAiD,EACjD,aAA0C;sBAf1C,MAAM;2BACN,WAAW;qCACX,qBAAqB;+CACrB,+BAA+B;uDAC/B,uCAAuC;qDACvC,qCAAqC;uDACrC,uCAAuC;kCACvC,kBAAkB;8BAClB,cAAc;6BACd,aAAa;oCACb,oBAAoB;+BACpB,eAAe;oCACf,oBAAoB;4BACpB,YAAY;6BACZ,aAAa;6BACb,aAAa;IAC5B,CAAC;IAEJ,KAAK,CAAC,MAAM,CACX,IAAU,EACV,uBAA+B,EAC/B,GAAmC;QAEnC,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,CAAC;QAEzC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,+BAA+B,CAAC,QAAQ,CAClE,uBAAuB,EACvB,EAAE,CACF,CAAC;QACF,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,IAAI,+BAAa,CAAC,+BAA+B,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,uCAAuC,CAAC,eAAe,CACtF,uBAAuB,EACvB,EAAE,CACF,CAAC;QAEF,MAAM,CAAC,WAAW,CAAC,GAAG,YAAY,CAAC;QACnC,IAAI,CAAC,WAAW,EAAE,CAAC;YAClB,MAAM,IAAI,+BAAa,CAAC,+BAA+B,CAAC,CAAC;QAC1D,CAAC;QAGD,MAAM,iBAAiB,GAAG,MAAM,OAAO,CAAC,GAAG,CAC1C,YAAY,CAAC,GAAG,CACf,KAAK,EAAE,GAAG,EAAE,EAAE,CACb,MAAM,IAAI,CAAC,qBAAqB,CAAC,mBAAmB,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE;YAC1E,eAAe;SACf,CAAC,CACH,CACD,CAAC;QACF,MAAM,oBAAoB,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;QAEtF,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC3B,MAAM,IAAI,+BAAa,CAAC,+BAA+B,CAAC,CAAC;QAC1D,CAAC;QAED,IAAA,qFAAoC,EAAC,OAAO,CAAC,CAAC;QAG9C,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,iBAAiB,CACzE,IAAI,EACJ,OAAO,CAAC,SAAS,CACjB,CAAC;QAGF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,qCAAqC,CAAC,QAAQ,CACzE,EAAE,uBAAuB,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,EAC5C,EAAE,CACF,CAAC;QACF,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,uCAAuC,CAAC,UAAU,CACvF,EAAE,uBAAuB,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,EAC5C,EAAE,CACF,CAAC;QACF,IAAI,CAAC,qBAAqB,CAAC;YAC1B,oBAAoB;YACpB,QAAQ;YACR,kBAAkB;YAClB,gBAAgB;SAChB,CAAC,CAAC;QAIH,MAAM,uBAAuB,GAC5B,GAAG,CAAC,QAAQ,KAAK,UAAU;YAC1B,CAAC,CAAC,MAAM,IAAI,CAAC,8BAA8B,CAAC,OAAO,CAAC,WAAW,EAAE,WAAW,CAAC,UAAU,CAAC;YACxF,CAAC,CAAC,IAAI,CAAC;QAGT,IAAI,GAAG,CAAC,QAAQ,KAAK,mBAAmB,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACvD,MAAM,IAAI,mCAAe,CAAC,4CAA4C,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,EACL,OAAO,EAAE,KAAK,EACd,eAAe,EACf,yBAAyB,GACzB,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,eAAe,OAAkC,KAAK,EAAE,GAAG,EAAE,EAAE;YAE3F,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,+BAA+B,CAAC,QAAQ,CAClE,uBAAuB,EACvB,GAAG,CACH,CAAC;YACF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,MAAM,IAAI,+BAAa,CAAC,+BAA+B,CAAC,CAAC;YAC1D,CAAC;YACD,IAAA,qFAAoC,EAAC,OAAO,CAAC,CAAC;YAG9C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,qCAAqC,CAAC,QAAQ,CAC5E,EAAE,uBAAuB,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,EAC5C,GAAG,CACH,CAAC;YACF,MAAM,qBAAqB,GAAG,MAAM,IAAI,CAAC,uCAAuC,CAAC,UAAU,CAC1F,EAAE,uBAAuB,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,EAC5C,GAAG,CACH,CAAC;YACF,IAAI,CAAC,qBAAqB,CAAC;gBAC1B,oBAAoB;gBACpB,QAAQ,EAAE,WAAW;gBACrB,kBAAkB,EAAE,qBAAqB;gBACzC,gBAAgB;aAChB,CAAC,CAAC;YAGH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,uCAAuC,CAAC,eAAe,CACrF,uBAAuB,EACvB,GAAG,CACH,CAAC;YACF,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,KAAK,WAAW,CAAC,UAAU,CAAC,CAAC;YACxF,IAAI,CAAC,UAAU,EAAE,CAAC;gBACjB,MAAM,IAAI,+BAAa,CAAC,+BAA+B,CAAC,CAAC;YAC1D,CAAC;YAGD,MAAM,IAAI,CAAC,aAAa,CAAC,6BAA6B,CACrD,UAAU,CAAC,UAAU,EACrB,OAAO,CAAC,SAAS,EACjB,GAAG,EACH,QAAQ,CACR,CAAC;YAEF,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;gBAEjC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;oBAC/B,MAAM,IAAI,CAAC,uCAAuC,CAAC,uBAAuB,CACzE;wBACC,uBAAuB;wBACvB,UAAU,EAAE,GAAG,CAAC,UAAU;qBAC1B,EACD,GAAG,CACH,CAAC;gBACH,CAAC;YACF,CAAC;YAED,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;YAChC,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,EAAE,CAAC;YAC9B,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;gBACjC,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC;gBAEzB,OAAO,CAAC,UAAU,GAAG,uBAAuB,EAAE,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;gBACnF,OAAO,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;YACjC,CAAC;YAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,+BAA+B,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YAE1F,MAAM,IAAI,CAAC,kBAAkB,CAAC,cAAc,CAC3C;gBACC,uBAAuB;gBACvB,IAAI,EAAE,GAAG,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,0BAA0B;gBAClF,IAAI,EAAE;oBAEL,gBAAgB,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAC7C,GAAG,CAAC,iBAAiB,KAAK,IAAI;wBAC7B,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAC7E;oBACD,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI;iBACtB;gBACD,WAAW,EAAE,IAAI,CAAC,EAAE;aACpB,EACD,GAAG,CACH,CAAC;YAEF,OAAO;gBACN,OAAO,EAAE,YAAY;gBACrB,eAAe,EAAE,UAAU,CAAC,iBAAiB;gBAC7C,yBAAyB,EAAE,qBAAqB;aAChD,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAElD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,yBAAyB,EAAE;YACjD,IAAI;YACJ,uBAAuB;YACvB,UAAU,EAAE,WAAW,CAAC,UAAU;YAClC,iBAAiB,EAAE,eAAe;YAClC,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,UAAU,EAAE,yBAAyB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,gBAAgB;YAC9E,eAAe,EAAE,KAAK,CAAC,SAAS;SAChC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,IAAA,yCAAgB,EAAC,KAAK,EAAE,eAAe,CAAC,CAAC;QAEzD,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,IAAI,uBAAuB,KAAK,IAAI,EAAE,CAAC;YACrE,OAAO,OAAO,CAAC;QAChB,CAAC;QAED,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,CAAC;YACzC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0DAA0D,EAAE;gBAC5E,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,OAAO,EAAE,uBAAuB,CAAC,cAAc;aAC/C,CAAC,CAAC;YACH,OAAO;gBACN,GAAG,OAAO;gBACV,WAAW,EAAE;oBACZ,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,uBAAuB,CAAC,cAAc;iBAC/C;aACD,CAAC;QACH,CAAC;QAED,OAAO;YACN,GAAG,OAAO;YACV,WAAW,EAAE,MAAM,IAAI,CAAC,sBAAsB,CAC7C,uBAAuB,CAAC,SAAS,EACjC,WAAW,CAAC,UAAU,EACtB,eAAe,CACf;SACD,CAAC;IACH,CAAC;IAMO,KAAK,CAAC,8BAA8B,CAC3C,WAA0B,EAC1B,UAAkB;QAIlB,IAAI,CAAC,WAAW,EAAE,CAAC;YAClB,OAAO;gBACN,UAAU,EAAE,KAAK;gBACjB,cAAc,EAAE,6CAA6C;aAC7D,CAAC;QACH,CAAC;QAED,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,WAAW,CAAC,EAAE;YAC1E,WAAW,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;YACtC,OAAO;gBACN,UAAU,EAAE,KAAK;gBACjB,cAAc,EAAE,6CAA6C;aAC7D,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,mBAAmB,CAAC,UAAU,EAAE,SAAS,EAAE;YAC5F,kBAAkB;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,OAAO;gBACN,UAAU,EAAE,KAAK;gBACjB,cAAc,EAAE,wEAAwE;aACxF,CAAC;QACH,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACxC,CAAC;IAEO,KAAK,CAAC,sBAAsB,CACnC,SAAe,EACf,UAAkB,EAClB,eAA8B;QAE9B,IAAI,eAAe,KAAK,IAAI,EAAE,CAAC;YAE9B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+DAA+D,EAAE;gBACjF,UAAU;aACV,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC;QACxF,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,eAAe,CAAC,gBAAgB,CAAC,SAAS,EAAE,UAAU,EAAE;gBAClE,SAAS,EAAE,eAAe;gBAC1B,MAAM,EAAE,iBAAiB;aACzB,CAAC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kDAAkD,EAAE;gBACrE,UAAU;gBACV,eAAe;gBACf,KAAK;aACL,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAA,0BAAW,EAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;QAClE,CAAC;QAGD,IAAI,CAAC,oBAAoB;aACvB,uBAAuB,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,CAAC;aACjD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAChB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAC9E,CAAC;QAEH,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAChC,CAAC;IAMO,qBAAqB,CAAC,KAAkC;QAC/D,MAAM,UAAU,GAAG,IAAA,2DAAyB,EAAC,KAAK,CAAC,CAAC;QACpD,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACxB,OAAO;QACR,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,gCAAc,CAAC,mDAAmD,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,IAAI,+BAAa,CAAC,+BAA+B,CAAC,CAAC;IAC1D,CAAC;CACD,CAAA;;+CAzUY,oCAAoC;IADhD,IAAA,YAAO,GAAE;qCAGiB,uBAAM,EACD,gEAAyB,EACf,+CAAqB,EACX,oCAA+B,EACvB,4CAAuC,EACzC,0CAAqC,EACnC,4CAAuC,EAC5D,qCAAgC,EACpC,mBAAc,EACf,kBAAa,EACN,4CAAoB,EACzB,kCAAe,EACV,0EAAkC,EAC1C,4BAAY,EACX,mFAAkC,EAClC,oEAA2B;GAjBhD,oCAAoC,CAyUhD"}

package/dist/modules/workflow-reviews.ee/workflow-review-request-mutation-guard.service.d.ts

@@ -0,0 +1,10 @@
+import { SharedWorkflowRepository, WorkflowRepository, type OperationContext, type WorkflowReviewRequest } from '@n8n/db';
+type BlockedAction = 'submit' | 'review' | 'update';
+export declare function assertWorkflowReviewRequestUpdatable(request: WorkflowReviewRequest): void;
+export declare class WorkflowReviewRequestMutationGuard {
+    private readonly workflowRepository;
+    private readonly sharedWorkflowRepository;
+    constructor(workflowRepository: WorkflowRepository, sharedWorkflowRepository: SharedWorkflowRepository);
+    assertWorkflowStillReviewable(workflowId: string, expectedProjectId: string, ctx: OperationContext, action: BlockedAction): Promise<void>;
+}
+export {};

package/dist/modules/workflow-reviews.ee/workflow-review-request-mutation-guard.service.js

@@ -0,0 +1,57 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkflowReviewRequestMutationGuard = void 0;
+exports.assertWorkflowReviewRequestUpdatable = assertWorkflowReviewRequestUpdatable;
+const db_1 = require("@n8n/db");
+const di_1 = require("@n8n/di");
+const bad_request_error_1 = require("../../errors/response-errors/bad-request.error");
+const conflict_error_1 = require("../../errors/response-errors/conflict.error");
+const not_found_error_1 = require("../../errors/response-errors/not-found.error");
+const BLOCKED_ACTION_TEXT = {
+    submit: 'submitted for review',
+    review: 'reviewed',
+    update: 'submitted as a new review version',
+};
+function assertWorkflowReviewRequestUpdatable(request) {
+    if (request.state === 'closed' || request.decision === 'approved') {
+        throw new conflict_error_1.ConflictError('The review request is no longer open');
+    }
+}
+let WorkflowReviewRequestMutationGuard = class WorkflowReviewRequestMutationGuard {
+    constructor(workflowRepository, sharedWorkflowRepository) {
+        this.workflowRepository = workflowRepository;
+        this.sharedWorkflowRepository = sharedWorkflowRepository;
+    }
+    async assertWorkflowStillReviewable(workflowId, expectedProjectId, ctx, action) {
+        const blockedAction = BLOCKED_ACTION_TEXT[action];
+        const workflow = await this.workflowRepository.findArchivedState(workflowId, ctx);
+        if (!workflow) {
+            throw new not_found_error_1.NotFoundError('Could not find workflow');
+        }
+        if (workflow.isArchived) {
+            throw new bad_request_error_1.BadRequestError(`The workflow '${workflowId}' is archived and cannot be ${blockedAction}`);
+        }
+        const project = await this.sharedWorkflowRepository.getWorkflowOwningProject(workflowId, ctx);
+        if (!project) {
+            throw new not_found_error_1.NotFoundError('Could not find workflow');
+        }
+        if (project.id !== expectedProjectId) {
+            throw new conflict_error_1.ConflictError(`The workflow '${workflowId}' moved to another project and cannot be ${blockedAction} here`, 'Retry from the project that now owns the workflow');
+        }
+    }
+};
+exports.WorkflowReviewRequestMutationGuard = WorkflowReviewRequestMutationGuard;
+exports.WorkflowReviewRequestMutationGuard = WorkflowReviewRequestMutationGuard = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [db_1.WorkflowRepository, db_1.SharedWorkflowRepository])
+], WorkflowReviewRequestMutationGuard);
+//# sourceMappingURL=workflow-review-request-mutation-guard.service.js.map

package/dist/modules/workflow-reviews.ee/workflow-review-request-mutation-guard.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-review-request-mutation-guard.service.js","sourceRoot":"","sources":["../../../src/modules/workflow-reviews.ee/workflow-review-request-mutation-guard.service.ts"],"names":[],"mappings":";;;;;;;;;;;;;AAAA,gCAKiB;AACjB,gCAAkC;AAElC,kFAA6E;AAC7E,4EAAwE;AACxE,8EAAyE;AAIzE,MAAM,mBAAmB,GAAkC;IAC1D,MAAM,EAAE,sBAAsB;IAC9B,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,mCAAmC;CAC3C,CAAC;AAEF,8CAAqD,OAA8B;IAClF,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QACnE,MAAM,IAAI,8BAAa,CAAC,sCAAsC,CAAC,CAAC;IACjE,CAAC;AACF,CAAC;AAGM,IAAM,kCAAkC,GAAxC,MAAM,kCAAkC;IAC9C,YACkB,kBAAsC,EACtC,wBAAkD;kCADlD,kBAAkB;wCAClB,wBAAwB;IACvC,CAAC;IAGJ,KAAK,CAAC,6BAA6B,CAClC,UAAkB,EAClB,iBAAyB,EACzB,GAAqB,EACrB,MAAqB;QAErB,MAAM,aAAa,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,iBAAiB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAClF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,IAAI,+BAAa,CAAC,yBAAyB,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YACzB,MAAM,IAAI,mCAAe,CACxB,iBAAiB,UAAU,+BAA+B,aAAa,EAAE,CACzE,CAAC;QACH,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,wBAAwB,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAC9F,IAAI,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,IAAI,+BAAa,CAAC,yBAAyB,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,OAAO,CAAC,EAAE,KAAK,iBAAiB,EAAE,CAAC;YACtC,MAAM,IAAI,8BAAa,CACtB,iBAAiB,UAAU,4CAA4C,aAAa,OAAO,EAC3F,mDAAmD,CACnD,CAAC;QACH,CAAC;IACF,CAAC;CACD,CAAA;;6CArCY,kCAAkC;IAD9C,IAAA,YAAO,GAAE;qCAG6B,uBAAkB,EACZ,6BAAwB;GAHxD,kCAAkC,CAqC9C"}

package/dist/modules/workflow-reviews.ee/workflow-review-request-status.service.d.ts

@@ -0,0 +1,17 @@
+import type { ListWorkflowReviewRequestsQueryDto, WorkflowReviewRequestList } from '@n8n/api-types';
+import { UserRepository, WorkflowReviewRequestRepository, type User } from '@n8n/db';
+import { WorkflowFinderService } from '../../workflows/workflow-finder.service';
+import { WorkflowReviewAuthorizationService } from './workflow-review-authorization.service';
+import { WorkflowReviewFeatureGate } from './workflow-review-feature-gate.service';
+export declare class WorkflowReviewRequestStatusService {
+    private readonly featureGate;
+    private readonly workflowFinderService;
+    private readonly workflowReviewRequestRepository;
+    private readonly userRepository;
+    private readonly authorizationService;
+    constructor(featureGate: WorkflowReviewFeatureGate, workflowFinderService: WorkflowFinderService, workflowReviewRequestRepository: WorkflowReviewRequestRepository, userRepository: UserRepository, authorizationService: WorkflowReviewAuthorizationService);
+    list(user: User, query: ListWorkflowReviewRequestsQueryDto): Promise<WorkflowReviewRequestList>;
+    private toWorkflowScopedItems;
+    private resolveDecisionActors;
+    private pickDecisionActor;
+}

package/dist/modules/workflow-reviews.ee/workflow-review-request-status.service.js

@@ -0,0 +1,93 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkflowReviewRequestStatusService = void 0;
+const db_1 = require("@n8n/db");
+const di_1 = require("@n8n/di");
+const not_found_error_1 = require("../../errors/response-errors/not-found.error");
+const workflow_finder_service_1 = require("../../workflows/workflow-finder.service");
+const workflow_review_authorization_service_1 = require("./workflow-review-authorization.service");
+const workflow_review_feature_gate_service_1 = require("./workflow-review-feature-gate.service");
+const workflow_review_mapper_1 = require("./workflow-review.mapper");
+let WorkflowReviewRequestStatusService = class WorkflowReviewRequestStatusService {
+    constructor(featureGate, workflowFinderService, workflowReviewRequestRepository, userRepository, authorizationService) {
+        this.featureGate = featureGate;
+        this.workflowFinderService = workflowFinderService;
+        this.workflowReviewRequestRepository = workflowReviewRequestRepository;
+        this.userRepository = userRepository;
+        this.authorizationService = authorizationService;
+    }
+    async list(user, query) {
+        await this.featureGate.assertAvailable();
+        const workflow = await this.workflowFinderService.findWorkflowForUser(query.workflowId, user, [
+            'workflow:read',
+        ]);
+        if (!workflow) {
+            throw new not_found_error_1.NotFoundError('Could not find workflow');
+        }
+        const [[requests, count], canPublish] = await Promise.all([
+            this.workflowReviewRequestRepository.findRequestsForWorkflow(query.workflowId, {
+                state: query.state,
+                skip: query.skip,
+                take: query.take,
+            }),
+            this.workflowFinderService
+                .findWorkflowForUser(query.workflowId, user, ['workflow:publish'])
+                .then((found) => found !== null),
+        ]);
+        return {
+            count,
+            data: await this.toWorkflowScopedItems(requests, canPublish, user),
+        };
+    }
+    async toWorkflowScopedItems(requests, canPublish, user) {
+        const [decisionActors, openableIds] = await Promise.all([
+            this.resolveDecisionActors(requests),
+            this.authorizationService.resolveOpenableRequestIds(user, requests),
+        ]);
+        return requests.map((request) => ({
+            id: request.id,
+            state: request.state,
+            decision: request.decision,
+            description: canPublish ? request.description : null,
+            workflowVersionId: request.workflowVersionId,
+            workflowVersionName: request.workflowVersionName,
+            createdAt: request.createdAt.toISOString(),
+            updatedAt: request.updatedAt.toISOString(),
+            decisionBy: this.pickDecisionActor(request, decisionActors),
+            viewerCanOpen: openableIds.has(request.id),
+        }));
+    }
+    async resolveDecisionActors(requests) {
+        const actorIds = [
+            ...new Set(requests.flatMap((request) => request.decision === 'changes_requested' && request.updatedById
+                ? [request.updatedById]
+                : [])),
+        ];
+        if (actorIds.length === 0) {
+            return new Map();
+        }
+        const actors = await this.userRepository.findManyByIds(actorIds);
+        return new Map(actors.map((actor) => [actor.id, (0, workflow_review_mapper_1.toEligibleReviewer)(actor)]));
+    }
+    pickDecisionActor(request, actors) {
+        if (request.decision !== 'changes_requested' || !request.updatedById) {
+            return null;
+        }
+        return actors.get(request.updatedById) ?? null;
+    }
+};
+exports.WorkflowReviewRequestStatusService = WorkflowReviewRequestStatusService;
+exports.WorkflowReviewRequestStatusService = WorkflowReviewRequestStatusService = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [workflow_review_feature_gate_service_1.WorkflowReviewFeatureGate, workflow_finder_service_1.WorkflowFinderService, db_1.WorkflowReviewRequestRepository, db_1.UserRepository, workflow_review_authorization_service_1.WorkflowReviewAuthorizationService])
+], WorkflowReviewRequestStatusService);
+//# sourceMappingURL=workflow-review-request-status.service.js.map

package/dist/modules/workflow-reviews.ee/workflow-review-request-status.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-review-request-status.service.js","sourceRoot":"","sources":["../../../src/modules/workflow-reviews.ee/workflow-review-request-status.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAMA,gCAKiB;AACjB,gCAAkC;AAElC,8EAAyE;AACzE,iFAA4E;AAE5E,mGAA6F;AAC7F,iGAAmF;AACnF,qEAA8D;AAGvD,IAAM,kCAAkC,GAAxC,MAAM,kCAAkC;IAC9C,YACkB,WAAsC,EACtC,qBAA4C,EAC5C,+BAAgE,EAChE,cAA8B,EAC9B,oBAAwD;2BAJxD,WAAW;qCACX,qBAAqB;+CACrB,+BAA+B;8BAC/B,cAAc;oCACd,oBAAoB;IACnC,CAAC;IAEJ,KAAK,CAAC,IAAI,CACT,IAAU,EACV,KAAyC;QAEzC,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,CAAC;QAEzC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,mBAAmB,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE;YAC7F,eAAe;SACf,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,IAAI,+BAAa,CAAC,yBAAyB,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACzD,IAAI,CAAC,+BAA+B,CAAC,uBAAuB,CAAC,KAAK,CAAC,UAAU,EAAE;gBAC9E,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;aAChB,CAAC;YACF,IAAI,CAAC,qBAAqB;iBACxB,mBAAmB,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,kBAAkB,CAAC,CAAC;iBACjE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC;SACjC,CAAC,CAAC;QAEH,OAAO;YACN,KAAK;YACL,IAAI,EAAE,MAAM,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,CAAC;SAClE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAClC,QAA+C,EAC/C,UAAmB,EACnB,IAAU;QAEV,MAAM,CAAC,cAAc,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACvD,IAAI,CAAC,qBAAqB,CAAC,QAAQ,CAAC;YACpC,IAAI,CAAC,oBAAoB,CAAC,yBAAyB,CAAC,IAAI,EAAE,QAAQ,CAAC;SACnE,CAAC,CAAC;QAEH,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACjC,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;YACpD,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;YAC5C,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;YAChD,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE;YAC1C,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE;YAC1C,UAAU,EAAE,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,cAAc,CAAC;YAC3D,aAAa,EAAE,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;SAC1C,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAClC,QAA+C;QAE/C,MAAM,QAAQ,GAAG;YAChB,GAAG,IAAI,GAAG,CACT,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAC5B,OAAO,CAAC,QAAQ,KAAK,mBAAmB,IAAI,OAAO,CAAC,WAAW;gBAC9D,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;gBACvB,CAAC,CAAC,EAAE,CACL,CACD;SACD,CAAC;QACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,GAAG,EAAE,CAAC;QAClB,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACjE,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,IAAA,2CAAkB,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,CAAC;IAEO,iBAAiB,CACxB,OAA4C,EAC5C,MAAmD;QAEnD,IAAI,OAAO,CAAC,QAAQ,KAAK,mBAAmB,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACtE,OAAO,IAAI,CAAC;QACb,CAAC;QAED,OAAO,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC;IAChD,CAAC;CACD,CAAA;;6CA7FY,kCAAkC;IAD9C,IAAA,YAAO,GAAE;qCAGsB,gEAAyB,EACf,+CAAqB,EACX,oCAA+B,EAChD,mBAAc,EACR,0EAAkC;GAN9D,kCAAkC,CA6F9C"}

package/dist/modules/workflow-reviews.ee/workflow-review-request-submission.service.d.ts

@@ -0,0 +1,34 @@
+import type { CreateWorkflowReviewRequestDto, GetWorkflowReviewEligibleReviewersQueryDto, UpdateWorkflowReviewRequestVersionDto, WorkflowReviewEligibleReviewersList, WorkflowReviewRequestSummary } from '@n8n/api-types';
+import { DbLockService, SharedWorkflowRepository, UserRepository, WorkflowHistoryRepository, WorkflowReviewRequestAuthorRepository, WorkflowReviewRequestRepository, WorkflowReviewActivityRepository, WorkflowReviewRequestReviewerRepository, WorkflowReviewRequestWorkflowRepository, type User } from '@n8n/db';
+import { EventService } from '../../events/event.service';
+import { RoleService } from '../../services/role.service';
+import { WorkflowFinderService } from '../../workflows/workflow-finder.service';
+import { WorkflowHistoryService } from '../../workflows/workflow-history/workflow-history.service';
+import { WorkflowReviewFeatureGate } from './workflow-review-feature-gate.service';
+import { WorkflowReviewRequestMutationGuard } from './workflow-review-request-mutation-guard.service';
+import { WorkflowReviewStateNotifier } from './workflow-review-state-notifier.service';
+export declare class WorkflowReviewRequestSubmissionService {
+    private readonly featureGate;
+    private readonly workflowFinderService;
+    private readonly workflowHistoryService;
+    private readonly workflowHistoryRepository;
+    private readonly sharedWorkflowRepository;
+    private readonly workflowReviewRequestRepository;
+    private readonly workflowReviewRequestWorkflowRepository;
+    private readonly workflowReviewRequestAuthorRepository;
+    private readonly workflowReviewRequestReviewerRepository;
+    private readonly activityRepository;
+    private readonly userRepository;
+    private readonly roleService;
+    private readonly dbLockService;
+    private readonly eventService;
+    private readonly mutationGuard;
+    private readonly stateNotifier;
+    constructor(featureGate: WorkflowReviewFeatureGate, workflowFinderService: WorkflowFinderService, workflowHistoryService: WorkflowHistoryService, workflowHistoryRepository: WorkflowHistoryRepository, sharedWorkflowRepository: SharedWorkflowRepository, workflowReviewRequestRepository: WorkflowReviewRequestRepository, workflowReviewRequestWorkflowRepository: WorkflowReviewRequestWorkflowRepository, workflowReviewRequestAuthorRepository: WorkflowReviewRequestAuthorRepository, workflowReviewRequestReviewerRepository: WorkflowReviewRequestReviewerRepository, activityRepository: WorkflowReviewActivityRepository, userRepository: UserRepository, roleService: RoleService, dbLockService: DbLockService, eventService: EventService, mutationGuard: WorkflowReviewRequestMutationGuard, stateNotifier: WorkflowReviewStateNotifier);
+    private findEligibleReviewers;
+    getEligibleReviewers(user: User, query: GetWorkflowReviewEligibleReviewersQueryDto): Promise<WorkflowReviewEligibleReviewersList>;
+    private nameVersion;
+    private updateVersionMetadataIfChanged;
+    create(user: User, dto: CreateWorkflowReviewRequestDto): Promise<WorkflowReviewRequestSummary>;
+    updateVersion(user: User, workflowReviewRequestId: string, dto: UpdateWorkflowReviewRequestVersionDto): Promise<WorkflowReviewRequestSummary>;
+}