n8n 2.45.6 → 2.46.1

package/dist/modules/instance-ai/instance-ai.adapter.service.js

@@ -53,16 +53,20 @@ const errors_1 = require("@n8n/errors");
 const evaluation_config_service_1 = require("../../evaluation.ee/evaluation-config.service");
 const llm_judge_provider_registry_1 = require("../../evaluation.ee/llm-judge-provider-registry");
 const execution_persistence_1 = require("../../executions/execution-persistence");
+const execution_viewer_reader_1 = require("../../executions/execution-viewer-reader");
+const pre_execution_checks_1 = require("../../executions/pre-execution-checks");
 const license_1 = require("../../license");
 const load_nodes_and_credentials_1 = require("../../load-nodes-and-credentials");
-const agents_credential_provider_1 = require("../../modules/agents/adapters/agents-credential-provider");
+const agents_builder_service_1 = require("../../modules/agents/builder/agents-builder.service");
 const scoped_credential_provider_1 = require("./eval/scoped-credential-provider");
-const instance_ai_builder_delegate_adapter_1 = require("../../modules/agents/instance-ai-builder-delegate.adapter");
+const instance_ai_builder_delegate_adapter_1 = require("./instance-ai-builder-delegate.adapter");
+const instance_ai_skills_adapter_1 = require("./instance-ai-skills.adapter");
 const data_table_repository_1 = require("../../modules/data-table/data-table.repository");
 const data_table_service_1 = require("../../modules/data-table/data-table.service");
 const node_description_transform_1 = require("../../modules/mcp-registry/node-description-transform");
 const mcp_registry_connection_1 = require("../../modules/mcp-registry/mcp-registry-connection");
 const mcp_registry_service_1 = require("../../modules/mcp-registry/registry/mcp-registry.service");
+const mcp_registry_types_1 = require("../../modules/mcp-registry/registry/mcp-registry.types");
 const workflow_dependency_query_service_1 = require("../../modules/workflow-index/workflow-dependency-query.service");
 const node_catalog_1 = require("../../node-catalog");
 const node_execution_1 = require("../../node-execution");
@@ -72,7 +76,6 @@ const policy_enforcement_service_1 = require("../../policy/policy-enforcement.se
 const posthog_1 = require("../../posthog");
 const ai_gateway_service_1 = require("../../services/ai-gateway.service");
 const ai_preference_write_1 = require("../../services/ai-preference-write");
-const ai_preference_service_1 = require("../../services/ai-preference.service");
 const folder_service_1 = require("../../services/folder.service");
 const node_resource_explorer_service_1 = require("../../services/node-resource-explorer.service");
 const project_service_ee_1 = require("../../services/project.service.ee");
@@ -97,6 +100,7 @@ const instance_context_service_1 = require("./instance-context.service");
 const mcp_1 = require("./mcp");
 const node_definition_resolver_1 = require("./node-definition-resolver");
 const web_research_1 = require("./web-research");
+const workflow_json_1 = require("./workflow-json");
 const workflow_templates_service_1 = require("./workflow-templates.service");
 function resolveDisplayedDefaults(nodeProperties, parameters, nodeType, typeVersion, desc) {
     const stubNode = {
@@ -248,30 +252,48 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
         });
     }
     createContext(user, options) {
-        const { searchProxyConfig, pushRef, threadId, projectId, getCredentialIdAllowlist, shouldBypassCredentialTest, getCredentialTestTarget, agentId, configEvalsEnabled, setupPanelVariant, mcpConnectionsAvailable, nodeUsageEnabled, instanceContextEnabled, conversationHistory, folderExplorationEnabled, onboardingThread, credentialDescriptionsEnabled, aiPreferencesEnabled, modelId, allowSendingParameterValues = this.allowSendingParameterValues, } = options ?? {};
+        const { searchProxyConfig, pushRef, threadId, projectId, getCredentialIdAllowlist, shouldBypassCredentialTest, getCredentialTestTarget, agentId, configEvalsEnabled, setupPanelVariant, mcpConnectionsAvailable, nodeUsageEnabled, instanceContextEnabled, conversationHistory, folderExplorationEnabled, onboardingThread, credentialDescriptionsEnabled, aiPreferencesEnabled, assistantSkillsEnabled, modelId, modelFetch, allowSendingParameterValues = this.allowSendingParameterValues, } = options ?? {};
         void this.trackGatewayAvailability();
         const builderDelegateAdapter = this.getBuilderDelegateAdapter();
         const credentialService = this.createCredentialAdapter(user, projectId, getCredentialIdAllowlist, shouldBypassCredentialTest, getCredentialTestTarget);
+        const dataTableService = this.createDataTableAdapter(user, projectId);
+        const { assertInBoundProject, assertWorkflowInBoundProject, assertCredentialInBoundProject } = this.createProjectScopeHelpers(user, projectId);
+        const assertInThreadProject = async (target) => {
+            if (projectId === undefined)
+                return;
+            if (target.kind === 'workflow')
+                return await assertWorkflowInBoundProject(target.id);
+            if (target.kind === 'credential')
+                return await assertCredentialInBoundProject(target.id);
+            if (target.kind === 'project')
+                return assertInBoundProject(target.id);
+            const table = await dataTableService.resolveTableReference?.(target.id, {
+                projectId: target.projectId,
+            });
+            assertInBoundProject(table?.projectId);
+        };
         return {
             userId: user.id,
             projectId,
+            assertInThreadProject,
             ...(folderExplorationEnabled ? { folderExplorationEnabled: true } : {}),
             ...(onboardingThread ? { onboardingThread: true } : {}),
             ...(credentialDescriptionsEnabled ? { credentialDescriptionsEnabled: true } : {}),
             modelId,
+            modelFetch,
             workflowService: this.createWorkflowAdapter(user, threadId, projectId, {
                 nodeUsageGateOpen: nodeUsageEnabled === true,
                 folderExploration: folderExplorationEnabled === true,
                 setupPanelVariant,
                 allowSendingParameterValues,
             }),
-            executionService: this.createExecutionAdapter(user, allowSendingParameterValues, pushRef, threadId),
+            executionService: this.createExecutionAdapter(user, allowSendingParameterValues, pushRef, threadId, projectId),
             credentialService,
-            nodeService: this.createNodeAdapter(user),
-            dataTableService: this.createDataTableAdapter(user, projectId),
+            nodeService: this.createNodeAdapter(user, projectId, shouldBypassCredentialTest),
+            dataTableService,
             ...(configEvalsEnabled && this.evaluationConfigService
                 ? {
-                    evaluationConfigService: this.createEvaluationConfigAdapter(this.evaluationConfigService, user),
+                    evaluationConfigService: this.createEvaluationConfigAdapter(this.evaluationConfigService, user, projectId),
                 }
                 : {}),
             mcpService: mcpConnectionsAvailable ? this.createMcpAdapter(user) : undefined,
@@ -283,6 +305,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
                 ? { activityService: this.createActivityAdapter(user, projectId) }
                 : {}),
             ...(aiPreferencesEnabled ? { aiPreferenceService: this.createPreferenceAdapter(user) } : {}),
+            skillService: this.getSkillService(user, assistantSkillsEnabled === true),
             webResearchService: this.createWebResearchAdapter(user, searchProxyConfig),
             workspaceService: this.createWorkspaceAdapter(user, projectId),
             templatesService: this.getTemplatesService(),
@@ -303,11 +326,25 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
         };
     }
     createAgentCredentialProvider(user, projectId, agentId, getCredentialIdAllowlist) {
-        const provider = new agents_credential_provider_1.AgentsCredentialProvider(this.credentialsService, projectId, user, agentId);
+        const provider = di_1.Container.get(agents_builder_service_1.AgentsBuilderService).createCredentialProvider(user, projectId, agentId);
         return getCredentialIdAllowlist
             ? (0, scoped_credential_provider_1.scopeCredentialProvider)(provider, getCredentialIdAllowlist)
             : provider;
     }
+    getSkillService(user, assistantSkillsEnabled) {
+        try {
+            const moduleRegistry = di_1.Container.get(backend_common_1.ModuleRegistry);
+            if (!moduleRegistry.isActive('agents'))
+                return undefined;
+            return di_1.Container.get(instance_ai_skills_adapter_1.InstanceAiSkillsAdapterService).createService(user, assistantSkillsEnabled);
+        }
+        catch (error) {
+            this.logger.warn('Failed to resolve the skills adapter; skill tools disabled', {
+                error: error instanceof Error ? error.message : String(error),
+            });
+            return undefined;
+        }
+    }
     getBuilderDelegateAdapter() {
         if (!(0, agents_access_1.isAgentsAccessEnabled)())
             return null;
@@ -333,15 +370,19 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
     async resolveExperimentGates(user) {
         let flags = {};
         let instanceContextEnabled = false;
+        let assistantSkillsEnabled = false;
         try {
             const postHog = di_1.Container.get(posthog_1.PostHogClient);
-            const [userFlags, instanceFlag] = await Promise.allSettled([
+            const [userFlags, instanceFlag, assistantSkillsFlag] = await Promise.allSettled([
                 postHog.getFeatureFlags(user),
                 postHog.getFeatureFlagForInstance(api_types_1.INSTANCE_ACTIVITY_CONTEXT_FLAG),
+                postHog.getFeatureFlagForInstance(api_types_1.ASSISTANT_SKILLS_FLAG),
             ]);
             if (userFlags.status === 'fulfilled')
                 flags = userFlags.value;
             instanceContextEnabled = instanceFlag.status === 'fulfilled' && instanceFlag.value === true;
+            assistantSkillsEnabled =
+                assistantSkillsFlag.status === 'fulfilled' && assistantSkillsFlag.value === true;
         }
         catch {
         }
@@ -364,6 +405,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
                 api_types_1.INSTANCE_AI_FOLDER_EXPLORATION_ENABLED_VARIANT,
             aiPreferencesEnabled: flags[api_types_1.CONTEXT_PREFERENCES_FLAG] === api_types_1.CONTEXT_PREFERENCES_ENABLED_VARIANT,
             instanceContextEnabled,
+            assistantSkillsEnabled,
         };
     }
     createActivityAdapter(user, projectId) {
@@ -418,8 +460,9 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
         };
     }
     createMcpAdapter(user) {
+        const isAiGatewayOnly = (server) => server.authentication === 'none' && server.credential === api_types_1.AI_GATEWAY_MANAGED_TAG;
         const toSummaries = (servers) => servers
-            .filter((server) => !server.isTemplated)
+            .filter((server) => !server.isTemplated && !isAiGatewayOnly(server))
             .map((server) => ({
             slug: server.slug,
             title: server.title,
@@ -439,7 +482,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
                 const servers = await di_1.Container.get(mcp_registry_service_1.McpRegistryService).getBySlugs(slugs);
                 return servers
                     .filter((server) => {
-                    if (server.status !== 'active')
+                    if (server.status !== 'active' || (0, mcp_registry_types_1.isAiGatewayMcpServer)(server))
                         return false;
                     const connection = (0, mcp_registry_connection_1.resolveMcpRegistryConnection)(server);
                     return connection !== null && !connection.isTemplated;
@@ -448,7 +491,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
                     slug: server.slug,
                     title: server.title,
                     description: server.tagline,
-                    usesCredentials: (0, node_description_transform_1.getMcpRegistryCredentialOptions)(server),
+                    usesCredentials: (0, node_description_transform_1.getMcpRegistryCredentialOptions)(server).filter(({ credentialType }) => !(0, n8n_workflow_1.isMcpAiGatewayAuthentication)(credentialType)),
                     tools: server.tools.map((tool) => tool.name),
                 }));
             },
@@ -574,7 +617,35 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
             await assertProjectScope(scopes, boundProjectId);
             return boundProjectId;
         };
-        return { getPersonalProjectId, assertProjectScope, resolveProjectId, resolveBoundProjectId };
+        const assertInBoundProject = (projectId) => {
+            if (boundProjectId !== undefined && projectId !== boundProjectId) {
+                throw new instance_ai_1.OutsideThreadProjectError();
+            }
+        };
+        const assertWorkflowInBoundProject = async (workflowId) => {
+            if (boundProjectId === undefined)
+                return;
+            const projectIds = await this.sharedWorkflowRepository.findProjectIds(workflowId);
+            if (projectIds.length > 0 && !projectIds.includes(boundProjectId)) {
+                throw new instance_ai_1.OutsideThreadProjectError();
+            }
+        };
+        const assertCredentialInBoundProject = async (credentialId) => {
+            if (boundProjectId === undefined)
+                return;
+            const owner = await di_1.Container.get(db_1.SharedCredentialsRepository).findCredentialOwningProject(credentialId);
+            if (owner)
+                assertInBoundProject(owner.id);
+        };
+        return {
+            getPersonalProjectId,
+            assertProjectScope,
+            resolveProjectId,
+            resolveBoundProjectId,
+            assertInBoundProject,
+            assertWorkflowInBoundProject,
+            assertCredentialInBoundProject,
+        };
     }
     createWorkflowAdapter(user, threadId, boundProjectId, options = {}) {
         const setupExperimentProperties = options.setupPanelVariant
@@ -586,13 +657,13 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
         const foldersOn = options.folderExploration === true;
         const foldersAttributed = foldersOn && this.license.isLicensed('feat:folders');
         const { folderRepository, folderFinderService, projectService } = this;
-        const { workflowService, workflowFinderService, workflowRepository, sharedWorkflowRepository, aiBuilderTemporaryWorkflowRepository, workflowHistoryService, enterpriseWorkflowService, executionRepository, executionPersistence, license, telemetry, eventService, collaborationService, policyEnforcementService, workflowDependencyQueryService, } = this;
+        const { workflowService, workflowFinderService, workflowRepository, sharedWorkflowRepository, aiBuilderTemporaryWorkflowRepository, workflowHistoryService, enterpriseWorkflowService, executionRepository, license, telemetry, eventService, collaborationService, policyEnforcementService, workflowDependencyQueryService, } = this;
         const logger = this.logger;
         const maxExecutionTimeout = this.globalConfig.executions.maxTimeout;
         const assertNotReadOnly = () => this.assertInstanceNotReadOnly('workflows');
         const nodeUsageEnabled = options.nodeUsageGateOpen === true && workflowDependencyQueryService !== undefined;
         const resolveTargetProjectId = (options) => options?.projectId ?? (options?.scope !== 'instance' ? boundProjectId : undefined);
-        const { resolveBoundProjectId } = this.createProjectScopeHelpers(user, boundProjectId);
+        const { resolveBoundProjectId, assertWorkflowInBoundProject } = this.createProjectScopeHelpers(user, boundProjectId);
         const redactParameters = !(options.allowSendingParameterValues ?? this.allowSendingParameterValues);
         const assertParameterValuesAvailable = () => {
             if (redactParameters) {
@@ -855,6 +926,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
             },
             async archive(workflowId) {
                 assertNotReadOnly();
+                await assertWorkflowInBoundProject(workflowId);
                 await assertNotLockedByEditor(workflowId);
                 const result = await workflowService.archive(user, workflowId, { skipArchived: true });
                 if (!result) {
@@ -864,6 +936,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
             },
             async unarchive(workflowId) {
                 assertNotReadOnly();
+                await assertWorkflowInBoundProject(workflowId);
                 const result = await workflowService.unarchive(user, workflowId);
                 if (!result) {
                     throw new instance_ai_1.WorkflowNotFoundError(workflowId);
@@ -899,6 +972,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
                 return true;
             },
             async publish(workflowId, options) {
+                await assertWorkflowInBoundProject(workflowId);
                 await assertNotLockedByEditor(workflowId);
                 const wf = await workflowService.activateWorkflow(user, workflowId, {
                     versionId: options?.versionId,
@@ -922,6 +996,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
                 return { activeVersionId: wf.activeVersionId };
             },
             async unpublish(workflowId) {
+                await assertWorkflowInBoundProject(workflowId);
                 await assertNotLockedByEditor(workflowId);
                 await workflowService.deactivateWorkflow(user, workflowId, {
                     source: 'n8n-ai',
@@ -935,9 +1010,9 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
                 if (!wf)
                     throw new instance_ai_1.WorkflowNotFoundError(workflowId);
                 if (!versionId)
-                    return toWorkflowJSON(wf, { redactParameters });
+                    return (0, workflow_json_1.toWorkflowJSON)(wf, { redactParameters });
                 const version = await workflowHistoryService.getVersion(user, workflowId, versionId);
-                return toWorkflowJSON(wf, { redactParameters, graph: version });
+                return (0, workflow_json_1.toWorkflowJSON)(wf, { redactParameters, graph: version });
             },
             async getPinnedDataSummary(workflowId) {
                 const wf = await workflowFinderService.findWorkflowForUser(workflowId, user, [
@@ -969,7 +1044,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
                 if (!wf)
                     throw new instance_ai_1.WorkflowNotFoundError(workflowId);
                 return {
-                    json: toWorkflowJSON(wf, { redactParameters }),
+                    json: (0, workflow_json_1.toWorkflowJSON)(wf, { redactParameters }),
                     versionId: wf.versionId,
                     updatedAt: wf.updatedAt.getTime(),
                 };
@@ -977,6 +1052,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
             async getLatestRunData(workflowId) {
                 const accessible = await workflowFinderService.findWorkflowForUser(workflowId, user, [
                     'workflow:read',
+                    'execution:read',
                 ]);
                 if (!accessible)
                     return null;
@@ -988,10 +1064,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
                 });
                 if (!latest)
                     return null;
-                const execution = await executionPersistence.findSingleExecution(latest.id, {
-                    includeData: true,
-                    unflattenData: true,
-                });
+                const execution = await (0, execution_viewer_reader_1.loadExecutionForViewer)(latest.id, user);
                 return execution?.data?.resultData?.runData ?? null;
             },
             async createFromWorkflowJSON(json, options) {
@@ -1108,6 +1181,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
             async updateFromWorkflowJSON(workflowId, json, options) {
                 assertNotReadOnly();
                 assertParameterValuesAvailable();
+                await assertWorkflowInBoundProject(workflowId);
                 await assertNotLockedByEditor(workflowId);
                 const settings = (json.settings ?? {});
                 let storedWorkflow;
@@ -1229,6 +1303,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
             },
             async restoreVersion(workflowId, versionId) {
                 assertParameterValuesAvailable();
+                await assertWorkflowInBoundProject(workflowId);
                 await assertNotLockedByEditor(workflowId);
                 const version = await workflowHistoryService.getVersion(user, workflowId, versionId);
                 const updateData = workflowRepository.create({
@@ -1245,18 +1320,20 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
             ...(this.license.isLicensed('feat:namedVersions')
                 ? {
                     async updateVersion(workflowId, versionId, data) {
+                        await assertWorkflowInBoundProject(workflowId);
                         await workflowHistoryService.updateVersionForUser(user, workflowId, versionId, data);
                     },
                 }
                 : {}),
         };
     }
-    createExecutionAdapter(user, allowSendingParameterValues, pushRef, threadId) {
-        const { workflowFinderService, workflowRunner, activeExecutions, executionRepository, executionPersistence, workflowHistoryService, nodeTypes, roleService, telemetry, logger, globalConfig, } = this;
+    createExecutionAdapter(user, allowSendingParameterValues, pushRef, threadId, boundProjectId) {
+        const { workflowFinderService, workflowRunner, activeExecutions, executionRepository, workflowHistoryService, nodeTypes, roleService, telemetry, logger, globalConfig, } = this;
         const assertNotReadOnly = () => this.assertInstanceNotReadOnly('executions');
+        const { assertWorkflowInBoundProject } = this.createProjectScopeHelpers(user, boundProjectId);
         const DEFAULT_TIMEOUT_MS = 5 * constants_1.Time.minutes.toMilliseconds;
         const MAX_TIMEOUT_MS = 10 * constants_1.Time.minutes.toMilliseconds;
-        const assertExecutionAccess = async (executionId, scopes = ['workflow:read']) => {
+        const assertExecutionAccess = async (executionId, scopes = ['workflow:read', 'execution:read']) => {
             const execution = await executionRepository.findSingleExecution(executionId, {
                 includeData: false,
             });
@@ -1269,9 +1346,23 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
             }
             return execution;
         };
+        const loadExecution = async (executionId) => {
+            const execution = await (0, execution_viewer_reader_1.loadExecutionForViewer)(executionId, user);
+            if (!execution) {
+                throw new Error(`Execution ${executionId} not found`);
+            }
+            return execution;
+        };
+        const readOutcome = async (executionId, subNodeTarget) => {
+            const execution = await (0, execution_viewer_reader_1.loadExecutionForViewer)(executionId, user);
+            if (!execution) {
+                return { result: { executionId, status: 'unknown' } };
+            }
+            return await extractExecutionOutcome(execution, allowSendingParameterValues, nodeTypes, subNodeTarget);
+        };
         return {
             async list(options) {
-                const scope = 'workflow:read';
+                const scope = 'execution:read';
                 const projectRoles = await roleService.rolesWithScope('project', [scope]);
                 const workflowRoles = await roleService.rolesWithScope('workflow', [scope]);
                 const sharingOptions = {
@@ -1306,6 +1397,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
             },
             async run(workflowId, inputData, options) {
                 assertNotReadOnly();
+                await assertWorkflowInBoundProject(workflowId);
                 const workflow = await workflowFinderService.findWorkflowForUser(workflowId, user, [
                     'workflow:execute',
                 ]);
@@ -1320,6 +1412,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
                 const connections = options?.omitConnections?.length
                     ? omitWorkflowConnections(workflow.connections, options.omitConnections)
                     : workflow.connections;
+                const credentialRefusal = await (0, pre_execution_checks_1.findCredentialRefusal)(workflowId, nodes, user.id);
                 const runData = {
                     executionMode: triggerNode ? getExecutionModeForTrigger(triggerNode) : 'manual',
                     workflowData: {
@@ -1336,7 +1429,9 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
                     userId: user.id,
                     pushRef,
                     callerAwaitsOutcome: 'completion',
-                    ...(options?.isVerificationRun ? { suppressErrorWorkflow: true } : {}),
+                    ...(options?.isVerificationRun || credentialRefusal
+                        ? { suppressErrorWorkflow: true }
+                        : {}),
                 };
                 const pinDataPlan = (0, instance_ai_run_pin_data_1.buildInstanceAiRunPinDataPlan)({
                     workflowPinData: workflow.pinData ?? {},
@@ -1432,7 +1527,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
                         trackBuilderExecutedWorkflow(result.status, result.error);
                         return result;
                     }
-                    const { result, telemetryError } = await extractExecutionOutcome(executionId, allowSendingParameterValues, nodeTypes);
+                    const { result, telemetryError } = withCredentialRefusal(await readOutcome(executionId), credentialRefusal);
                     await pruneVerificationPins(result.executedNodeNames);
                     trackBuilderExecutedWorkflow(result.status, telemetryError);
                     const workflowPinnedNodeNames = Object.keys(workflow.pinData ?? {});
@@ -1454,6 +1549,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
             },
             async runStep(workflowId, nodeName, options) {
                 assertNotReadOnly();
+                await assertWorkflowInBoundProject(workflowId);
                 const workflow = await workflowFinderService.findWorkflowForUser(workflowId, user, [
                     'workflow:execute',
                 ]);
@@ -1482,10 +1578,10 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
                     if (execution.workflowId !== workflowId) {
                         throw new n8n_workflow_1.UserError(`Execution ${options.reuseExecutionId} belongs to a different workflow.`);
                     }
-                    const stored = await executionPersistence.findSingleExecution(options.reuseExecutionId, {
-                        includeData: true,
-                        unflattenData: true,
-                    });
+                    const stored = await (0, execution_viewer_reader_1.loadExecutionForViewer)(options.reuseExecutionId, user);
+                    if (stored && (0, execution_viewer_reader_1.getExecutionRedaction)(stored)) {
+                        throw new n8n_workflow_1.UserError(`n8n redacted the data of execution ${options.reuseExecutionId} for this user, so it cannot be replayed. Omit reuseExecutionId to run the chain, or pass mockInput.`);
+                    }
                     priorRunData = stored?.data?.resultData?.runData ?? {};
                     reusedFromExecutionId = options.reuseExecutionId;
                 }
@@ -1635,6 +1731,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
                             : {}),
                     };
                 };
+                const credentialRefusal = await (0, pre_execution_checks_1.findCredentialRefusal)(workflowId, nodes, user.id);
                 try {
                     const executionId = await workflowRunner.run(runData);
                     const waitOutcome = await (0, instance_ai_execution_wait_1.waitForInstanceAiExecution)({
@@ -1651,7 +1748,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
                             error: waitOutcome.message,
                         });
                     }
-                    const { result, telemetryError } = await extractExecutionOutcome(executionId, allowSendingParameterValues, nodeTypes, plan.rootNodeNames ? nodeName : undefined);
+                    const { result, telemetryError } = withCredentialRefusal(await readOutcome(executionId, plan.rootNodeNames ? nodeName : undefined), credentialRefusal);
                     trackStepRun(result.status, telemetryError);
                     return describe(result);
                 }
@@ -1666,18 +1763,19 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
                 if (isRunning) {
                     return { executionId, status: 'running' };
                 }
-                return await extractExecutionResult(executionId, allowSendingParameterValues, nodeTypes);
+                return (await readOutcome(executionId)).result;
             },
             async getResult(executionId) {
                 await assertExecutionAccess(executionId);
                 if (activeExecutions.has(executionId)) {
                     await activeExecutions.getPostExecutePromise(executionId);
                 }
-                return await extractExecutionResult(executionId, allowSendingParameterValues, nodeTypes);
+                return (await readOutcome(executionId)).result;
             },
             async stop(executionId) {
                 assertNotReadOnly();
-                await assertExecutionAccess(executionId, ['workflow:execute']);
+                const execution = await assertExecutionAccess(executionId, ['workflow:execute']);
+                await assertWorkflowInBoundProject(execution.workflowId);
                 if (!activeExecutions.has(executionId)) {
                     return {
                         success: false,
@@ -1697,7 +1795,11 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
             },
             async getDebugInfo(executionId) {
                 await assertExecutionAccess(executionId);
-                return await extractExecutionDebugInfo(executionId, allowSendingParameterValues, nodeTypes);
+                const execution = await (0, execution_viewer_reader_1.loadExecutionForViewer)(executionId, user);
+                if (!execution) {
+                    return { executionId, status: 'unknown', nodeTrace: [] };
+                }
+                return await extractExecutionDebugInfo(execution, allowSendingParameterValues, nodeTypes);
             },
             async getNodeOutput(executionId, nodeName, options) {
                 await assertExecutionAccess(executionId);
@@ -1709,7 +1811,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
                         returned: { from: 0, to: 0 },
                     };
                 }
-                return await extractNodeOutput(executionId, nodeName, options, nodeTypes);
+                return await extractNodeOutput(await loadExecution(executionId), nodeName, options, nodeTypes);
             },
             getResolvedNodeParameters: async (executionId, nodeName, options) => {
                 await assertExecutionAccess(executionId);
@@ -1725,13 +1827,14 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
                         suppressed: 'parameter-values-disabled',
                     };
                 }
-                return await (0, extract_resolved_node_parameters_1.extractResolvedNodeParameters)(nodeTypes, executionId, nodeName, options);
+                return await (0, extract_resolved_node_parameters_1.extractResolvedNodeParameters)(nodeTypes, await loadExecution(executionId), nodeName, options);
             },
         };
     }
     createCredentialAdapter(user, boundProjectId, getCredentialIdAllowlist, shouldBypassCredentialTest, getCredentialTestTarget) {
         const { credentialsService, credentialsFinderService, loadNodesAndCredentials, aiGatewayService, } = this;
         const getGatewayConfig = async () => await this.getGatewayConfigOrNull();
+        const { assertCredentialInBoundProject } = this.createProjectScopeHelpers(user, boundProjectId);
         const adapter = {
             async list(options) {
                 if (boundProjectId) {
@@ -1785,6 +1888,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
                 };
             },
             async delete(credentialId) {
+                await assertCredentialInBoundProject(credentialId);
                 await credentialsService.delete(user, credentialId);
             },
             async test(credentialId) {
@@ -1792,7 +1896,8 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
                 if (!credential) {
                     throw new Error(`Credential ${credentialId} not found or not accessible`);
                 }
-                if (shouldBypassCredentialTest?.(credentialId) === true) {
+                if (shouldBypassCredentialTest?.(credentialId) === true &&
+                    credentialsService.hasConnectionTest(credential.type)) {
                     return { success: true, message: 'Connection tested successfully' };
                 }
                 const data = await credentialsService.decryptForUse(credential, { kind: 'user', user }, boundProjectId);
@@ -2060,9 +2165,10 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
             },
         };
     }
-    createEvaluationConfigAdapter(evaluationConfigService, user) {
+    createEvaluationConfigAdapter(evaluationConfigService, user, boundProjectId) {
         const { workflowFinderService, credentialsFinderService, llmJudgeProviderRegistry } = this;
         const assertNotReadOnly = () => this.assertInstanceNotReadOnly('evaluations');
+        const { assertWorkflowInBoundProject } = this.createProjectScopeHelpers(user, boundProjectId);
         const findWorkflow = async (workflowId, scope) => {
             const workflow = await workflowFinderService.findWorkflowForUser(workflowId, user, [scope]);
             if (!workflow) {
@@ -2093,6 +2199,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
             },
             async create(workflowId, input) {
                 assertNotReadOnly();
+                await assertWorkflowInBoundProject(workflowId);
                 const workflow = await findWorkflow(workflowId, 'workflow:update');
                 const resolved = await resolveProviders(input);
                 const config = await evaluationConfigService.create(workflowId, workflow, user, buildEvaluationConfigDto(resolved));
@@ -2100,6 +2207,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
             },
             async update(workflowId, configId, input) {
                 assertNotReadOnly();
+                await assertWorkflowInBoundProject(workflowId);
                 const workflow = await findWorkflow(workflowId, 'workflow:update');
                 const resolved = await resolveProviders(input);
                 const config = await evaluationConfigService.update(workflowId, configId, workflow, user, buildEvaluationConfigDto(resolved));
@@ -2107,6 +2215,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
             },
             async delete(workflowId, configId) {
                 assertNotReadOnly();
+                await assertWorkflowInBoundProject(workflowId);
                 await findWorkflow(workflowId, 'workflow:update');
                 await evaluationConfigService.delete(workflowId, configId);
             },
@@ -2115,7 +2224,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
     createDataTableAdapter(user, boundProjectId) {
         const { dataTableService, dataTableRepository } = this;
         const assertNotReadOnly = () => this.assertInstanceNotReadOnly('data tables');
-        const { resolveProjectId, resolveBoundProjectId } = this.createProjectScopeHelpers(user, boundProjectId);
+        const { resolveProjectId, resolveBoundProjectId, assertInBoundProject } = this.createProjectScopeHelpers(user, boundProjectId);
         const logger = this.logger;
         const resolveAccessibleTable = async (scopes, dataTableId, disambiguator) => {
             const projectIdFilter = disambiguator?.projectId;
@@ -2182,6 +2291,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
             async delete(dataTableId, options) {
                 assertNotReadOnly();
                 const { projectId, resolvedId } = await resolveProjectIdForTable(['dataTable:delete'], dataTableId, options);
+                assertInBoundProject(projectId);
                 await dataTableService.deleteDataTable(resolvedId, projectId);
             },
             async resolveTableReference(dataTableId, options) {
@@ -2201,6 +2311,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
             async addColumn(dataTableId, column, options) {
                 assertNotReadOnly();
                 const { projectId, resolvedId } = await resolveProjectIdForTable(['dataTable:update'], dataTableId, options);
+                assertInBoundProject(projectId);
                 const result = await dataTableService.addColumn(resolvedId, projectId, column);
                 return {
                     id: result.id,
@@ -2212,11 +2323,13 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
             async deleteColumn(dataTableId, columnId, options) {
                 assertNotReadOnly();
                 const { projectId, resolvedId } = await resolveProjectIdForTable(['dataTable:update'], dataTableId, options);
+                assertInBoundProject(projectId);
                 await dataTableService.deleteColumn(resolvedId, projectId, columnId);
             },
             async renameColumn(dataTableId, columnId, newName, options) {
                 assertNotReadOnly();
                 const { projectId, resolvedId } = await resolveProjectIdForTable(['dataTable:update'], dataTableId, options);
+                assertInBoundProject(projectId);
                 await dataTableService.renameColumn(resolvedId, projectId, columnId, {
                     name: newName,
                 });
@@ -2231,6 +2344,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
             },
             async insertRows(dataTableId, rows, options) {
                 const { projectId, tableName, resolvedId } = await resolveTableMeta(['dataTable:writeRow'], dataTableId, options);
+                assertInBoundProject(projectId);
                 const result = await dataTableService.insertRows(resolvedId, projectId, rows, 'count');
                 return {
                     insertedCount: typeof result === 'number' ? result : rows.length,
@@ -2241,6 +2355,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
             },
             async updateRows(dataTableId, filter, data, options) {
                 const { projectId, tableName, resolvedId } = await resolveTableMeta(['dataTable:writeRow'], dataTableId, options);
+                assertInBoundProject(projectId);
                 const result = await dataTableService.updateRows(resolvedId, projectId, { filter, data: data }, true);
                 return {
                     updatedCount: Array.isArray(result) ? result.length : 0,
@@ -2251,6 +2366,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
             },
             async deleteRows(dataTableId, filter, options) {
                 const { projectId, tableName, resolvedId } = await resolveTableMeta(['dataTable:writeRow'], dataTableId, options);
+                assertInBoundProject(projectId);
                 const result = await dataTableService.deleteRows(resolvedId, projectId, { filter }, true);
                 return {
                     deletedCount: Array.isArray(result) ? result.length : 0,
@@ -2371,7 +2487,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
     getNodeCatalogService() {
         return this.nodeCatalogService ?? di_1.Container.get(node_catalog_1.NodeCatalogService);
     }
-    createNodeAdapter(user) {
+    createNodeAdapter(user, boundProjectId, shouldBypassCredentialTest) {
         const getAllNodes = async () => await this.getNodesFromCache();
         const getNodes = async () => {
             const nodes = await getAllNodes();
@@ -2550,13 +2666,29 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
                     ...(operation ? { operation } : {}),
                     ...(mode ? { mode } : {}),
                 });
+                const enrichDefinition = async (nodeId, defResult) => {
+                    if (defResult.error)
+                        return defResult;
+                    const [nodes, gatewayConfig] = await Promise.all([getAllNodes(), getGatewayConfig()]);
+                    const parsedVersion = version ? Number.parseFloat(version.replace(/^v/i, '')) : undefined;
+                    const desc = findNodeByVersion(nodes, nodeId, Number.isFinite(parsedVersion) ? parsedVersion : undefined);
+                    const meta = buildMeta(gatewayConfig, desc?.name ?? nodeId);
+                    const unavailable = getUnavailableNotice(nodeId);
+                    return {
+                        ...defResult,
+                        ...(unavailable ? { unavailable } : {}),
+                        ...(meta ? { aiGateway: meta } : {}),
+                        ...(desc?.webhooks ? { webhooks: desc.webhooks } : {}),
+                        ...(desc?.polling ? { polling: desc.polling } : {}),
+                        ...(desc?.triggerPanel !== undefined ? { triggerPanel: desc.triggerPanel } : {}),
+                    };
+                };
                 const result = await getDefinition(nodeType);
-                const unavailable = getUnavailableNotice(nodeType);
-                if (unavailable && !result.error)
-                    return { ...result, unavailable };
-                if (!result.error || nodeType.includes('.'))
-                    return result;
-                return await getDefinition(`${node_description_transform_1.MCP_REGISTRY_PACKAGE_NAME}.${nodeType}`);
+                if (!result.error || nodeType.includes('.')) {
+                    return await enrichDefinition(nodeType, result);
+                }
+                const registryId = `${node_description_transform_1.MCP_REGISTRY_PACKAGE_NAME}.${nodeType}`;
+                return await enrichDefinition(registryId, await getDefinition(registryId));
             },
             listDiscriminators: async (nodeType) => {
                 const nodeCatalogService = this.getNodeCatalogService();
@@ -2672,14 +2804,42 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
                     await workflow.expression.releaseIsolate();
                 }
             },
-            exploreResources: async (params) => await this.nodeResourceExplorerService.exploreResources(user, params),
+            exploreResources: async (params) => {
+                if (shouldBypassCredentialTest?.(params.credentialId) === true) {
+                    await this.nodeResourceExplorerService.assertExploreCredentialAccess(user, params);
+                    throw new n8n_workflow_1.OperationalError(instance_ai_1.RESOURCE_EXPLORATION_UNAVAILABLE);
+                }
+                return await this.nodeResourceExplorerService.exploreResources(user, params);
+            },
+            resolveParameterOptions: async (params) => {
+                const references = (0, node_resource_explorer_service_1.getParameterOptionsCredentialReferences)(params);
+                if (references.some(({ credentialId }) => shouldBypassCredentialTest?.(credentialId))) {
+                    try {
+                        for (const reference of references) {
+                            await this.nodeResourceExplorerService.assertExploreCredentialAccess(user, reference);
+                        }
+                    }
+                    catch (error) {
+                        return {
+                            ok: false,
+                            code: 'lookup_failed',
+                            message: error instanceof Error ? error.message : String(error),
+                        };
+                    }
+                    return { ok: false, code: 'lookup_failed', message: instance_ai_1.RESOURCE_EXPLORATION_UNAVAILABLE };
+                }
+                return await this.nodeResourceExplorerService.resolveParameterOptions(user, {
+                    ...params,
+                    ...(boundProjectId ? { projectId: boundProjectId } : {}),
+                });
+            },
             findUnavailableLocatorValues: async (params) => await this.nodeResourceExplorerService.findUnavailableResourceLocatorValues(user, params),
         };
     }
     createWorkspaceAdapter(user, boundProjectId) {
         const { projectService, folderService, tagService, workflowFinderService, workflowService, executionRepository, executionPersistence, eventService, } = this;
         const assertNotReadOnly = (resource) => this.assertInstanceNotReadOnly(resource);
-        const { assertProjectScope } = this.createProjectScopeHelpers(user);
+        const { assertProjectScope, assertInBoundProject, assertWorkflowInBoundProject } = this.createProjectScopeHelpers(user, boundProjectId);
         const teamProjectsLicensed = this.teamProjectsLicensed();
         const adapter = {
             async getProject(projectId) {
@@ -2713,6 +2873,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
                     },
                     async createFolder(name, projectId, parentFolderId) {
                         assertNotReadOnly('folders');
+                        assertInBoundProject(projectId);
                         await assertProjectScope(['folder:create'], projectId);
                         const folder = await folderService.createFolder({ name, parentFolderId: parentFolderId ?? undefined }, projectId);
                         return {
@@ -2723,6 +2884,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
                     },
                     async deleteFolder(folderId, projectId, transferToFolderId) {
                         assertNotReadOnly('folders');
+                        assertInBoundProject(projectId);
                         await assertProjectScope(['folder:delete'], projectId);
                         await folderService.deleteFolder(user, folderId, projectId, {
                             transferToFolderId: transferToFolderId ?? undefined,
@@ -2730,6 +2892,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
                     },
                     async moveWorkflowToFolder(workflowId, folderId) {
                         assertNotReadOnly('workflows');
+                        await assertWorkflowInBoundProject(workflowId);
                         const workflow = await workflowFinderService.findWorkflowForUser(workflowId, user, [
                             'workflow:update',
                         ]);
@@ -2745,6 +2908,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
                 : {}),
             async tagWorkflow(workflowId, tagNames) {
                 assertNotReadOnly('workflows');
+                await assertWorkflowInBoundProject(workflowId);
                 const workflow = await workflowFinderService.findWorkflowForUser(workflowId, user, [
                     'workflow:update',
                 ]);
@@ -2791,6 +2955,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
             },
             async cleanupTestExecutions(workflowId, options) {
                 assertNotReadOnly('executions');
+                await assertWorkflowInBoundProject(workflowId);
                 const workflow = await workflowFinderService.findWorkflowForUser(workflowId, user, [
                     'execution:delete',
                 ]);
@@ -2838,7 +3003,7 @@ let InstanceAiAdapterService = class InstanceAiAdapterService {
 exports.InstanceAiAdapterService = InstanceAiAdapterService;
 exports.InstanceAiAdapterService = InstanceAiAdapterService = __decorate([
     (0, di_1.Service)(),
-    __metadata("design:paramtypes", [backend_common_1.Logger, config_1.GlobalConfig, workflow_service_1.WorkflowService, workflow_finder_service_1.WorkflowFinderService, db_1.WorkflowRepository, db_1.SharedWorkflowRepository, db_1.ProjectRepository, db_1.ExecutionRepository, credentials_service_1.CredentialsService, backend_services_1.CredentialsFinderService, active_executions_1.ActiveExecutions, workflow_runner_1.WorkflowRunner, load_nodes_and_credentials_1.LoadNodesAndCredentials, node_types_1.NodeTypes, n8n_core_1.InstanceSettings, data_table_service_1.DataTableService, data_table_repository_1.DataTableRepository, node_resource_explorer_service_1.NodeResourceExplorerService, folder_service_1.FolderService, project_service_ee_1.ProjectService, tag_service_1.TagService, backend_services_1.InstanceWriteAccessService, instance_ai_settings_service_1.InstanceAiSettingsService, workflow_history_service_1.WorkflowHistoryService, workflow_service_ee_1.EnterpriseWorkflowService, license_1.License, execution_persistence_1.ExecutionPersistence, backend_services_1.EventService, backend_services_1.RoleService, telemetry_2.Telemetry, db_1.AiBuilderTemporaryWorkflowRepository, backend_network_1.OutboundHttp, ai_gateway_service_1.AiGatewayService, workflow_templates_service_1.WorkflowTemplatesService, collaboration_service_1.CollaborationService, policy_enforcement_service_1.PolicyEnforcementService, node_catalog_1.NodeCatalogService, evaluation_config_service_1.EvaluationConfigService, llm_judge_provider_registry_1.LlmJudgeProviderRegistry, workflow_dependency_query_service_1.WorkflowDependencyQueryService, db_1.FolderRepository, backend_services_1.FolderFinderService, instance_context_service_1.InstanceContextService, node_execution_1.ExecuteNodeService, backend_common_1.LicenseState, ai_preference_service_1.AiPreferenceService])
+    __metadata("design:paramtypes", [backend_common_1.Logger, config_1.GlobalConfig, workflow_service_1.WorkflowService, workflow_finder_service_1.WorkflowFinderService, db_1.WorkflowRepository, db_1.SharedWorkflowRepository, db_1.ProjectRepository, db_1.ExecutionRepository, credentials_service_1.CredentialsService, backend_services_1.CredentialsFinderService, active_executions_1.ActiveExecutions, workflow_runner_1.WorkflowRunner, load_nodes_and_credentials_1.LoadNodesAndCredentials, node_types_1.NodeTypes, n8n_core_1.InstanceSettings, data_table_service_1.DataTableService, data_table_repository_1.DataTableRepository, node_resource_explorer_service_1.NodeResourceExplorerService, folder_service_1.FolderService, project_service_ee_1.ProjectService, tag_service_1.TagService, backend_services_1.InstanceWriteAccessService, instance_ai_settings_service_1.InstanceAiSettingsService, workflow_history_service_1.WorkflowHistoryService, workflow_service_ee_1.EnterpriseWorkflowService, license_1.License, execution_persistence_1.ExecutionPersistence, backend_services_1.EventService, backend_services_1.RoleService, telemetry_2.Telemetry, db_1.AiBuilderTemporaryWorkflowRepository, backend_network_1.OutboundHttp, ai_gateway_service_1.AiGatewayService, workflow_templates_service_1.WorkflowTemplatesService, collaboration_service_1.CollaborationService, policy_enforcement_service_1.PolicyEnforcementService, node_catalog_1.NodeCatalogService, evaluation_config_service_1.EvaluationConfigService, llm_judge_provider_registry_1.LlmJudgeProviderRegistry, workflow_dependency_query_service_1.WorkflowDependencyQueryService, db_1.FolderRepository, backend_services_1.FolderFinderService, instance_context_service_1.InstanceContextService, node_execution_1.ExecuteNodeService, backend_common_1.LicenseState, backend_services_1.AiPreferenceService])
 ], InstanceAiAdapterService);
 const MAX_RESULT_CHARS = 20_000;
 const MAX_NODE_OUTPUT_CHARS = 1_000;
@@ -3030,7 +3195,7 @@ function extractNodeErrors(runData, includeUpstreamDetails, workflowNodes = [])
         const message = failedRun.error
             ? formatExecutionError(failedRun.error, includeUpstreamDetails)
             : failedRun.redactedError
-                ? `${failedRun.redactedError.type} error${failedRun.redactedError.httpCode ? ` (${failedRun.redactedError.httpCode})` : ''}`
+                ? (0, instance_ai_1.formatRedactedError)(failedRun.redactedError)
                 : undefined;
         nodeErrors.push({
             nodeName,
@@ -3039,8 +3204,22 @@ function extractNodeErrors(runData, includeUpstreamDetails, workflowNodes = [])
     }
     return nodeErrors;
 }
-async function extractExecutionResult(executionId, includeOutputData = true, nodeTypes) {
-    return (await extractExecutionOutcome(executionId, includeOutputData, nodeTypes)).result;
+async function extractExecutionResult(execution, includeOutputData = true, nodeTypes) {
+    return (await extractExecutionOutcome(execution, includeOutputData, nodeTypes)).result;
+}
+function withCredentialRefusal(outcome, refusal) {
+    const { result } = outcome;
+    if (!refusal || result.status !== 'error')
+        return outcome;
+    const message = [refusal.message, refusal.description].filter(Boolean).join('. ');
+    return {
+        result: {
+            ...result,
+            error: message,
+            nodeErrors: result.nodeErrors?.map((nodeError) => nodeError.nodeName === refusal.nodeName ? { ...nodeError, message } : nodeError),
+        },
+        telemetryError: refusal.message,
+    };
 }
 function nonMainOutputs(run) {
     return Object.entries(run?.data ?? {}).find(([type]) => type !== n8n_workflow_1.NodeConnectionTypes.Main)?.[1];
@@ -3062,14 +3241,9 @@ function foldToolExecutorRun(runData, subNodeTarget) {
     }
     return folded;
 }
-async function extractExecutionOutcome(executionId, includeOutputData = true, nodeTypes, subNodeTarget) {
-    const execution = await di_1.Container.get(execution_persistence_1.ExecutionPersistence).findSingleExecution(executionId, {
-        includeData: true,
-        unflattenData: true,
-    });
-    if (!execution) {
-        return { result: { executionId, status: 'unknown' } };
-    }
+async function extractExecutionOutcome(execution, includeOutputData = true, nodeTypes, subNodeTarget) {
+    const executionId = execution.id;
+    const redaction = (0, execution_viewer_reader_1.getExecutionRedaction)(execution);
     const status = execution.status === 'error' || execution.status === 'crashed'
         ? 'error'
         : execution.status === 'running' || execution.status === 'new'
@@ -3081,7 +3255,7 @@ async function extractExecutionOutcome(executionId, includeOutputData = true, no
     const runData = foldToolExecutorRun(execution.data?.resultData?.runData, subNodeTarget);
     const executedNodeNames = Object.keys(runData ?? {});
     const binaryOutputNodeNames = [];
-    if (includeOutputData && runData) {
+    if (includeOutputData && runData && !redaction) {
         const workflow = buildExecutionWorkflow(execution.workflowData, nodeTypes);
         await workflow?.expression.acquireIsolate();
         try {
@@ -3118,7 +3292,12 @@ async function extractExecutionOutcome(executionId, includeOutputData = true, no
         }
     }
     const error = execution.data?.resultData?.error;
-    const errorMessage = error ? formatExecutionError(error, includeOutputData) : undefined;
+    const redactedError = execution.data?.resultData?.redactedError;
+    const errorMessage = error
+        ? formatExecutionError(error, includeOutputData)
+        : redactedError
+            ? (0, instance_ai_1.formatRedactedError)(redactedError)
+            : undefined;
     const nodeErrors = extractNodeErrors(runData, includeOutputData, execution.workflowData?.nodes);
     return {
         result: {
@@ -3132,11 +3311,16 @@ async function extractExecutionOutcome(executionId, includeOutputData = true, no
             nodeErrors: nodeErrors.length > 0 ? nodeErrors : undefined,
             lastNodeExecuted: renameToolExecutor(execution.data?.resultData?.lastNodeExecuted, subNodeTarget),
             workflowVersionId: execution.workflowVersionId,
+            ...(redaction ? { redaction } : {}),
             error: errorMessage,
             startedAt: execution.startedAt?.toISOString(),
             finishedAt: execution.stoppedAt?.toISOString(),
         },
-        telemetryError: error ? formatExecutionError(error, false) : undefined,
+        telemetryError: error
+            ? formatExecutionError(error, false)
+            : redactedError
+                ? (0, instance_ai_1.formatRedactedError)(redactedError)
+                : undefined,
     };
 }
 const MAX_ERROR_CHARS = 4_000;
@@ -3190,9 +3374,37 @@ function capItemsBySerializedSize(items, maxBytes) {
     return kept;
 }
 const EXECUTE_NODE_DETAILS_SUPPRESSED = '(upstream error details suppressed by the instance AI privacy setting; ask the user to share the node error from the UI)';
+function describeExecuteNodeRedaction(reason) {
+    if (reason === 'credential_inaccessible') {
+        return ('The node used a credential that is not owned by or shared with the user, so n8n hides the data. ' +
+            'Do not run the node again with this credential. Use a credential that the user owns or that is shared with them.');
+    }
+    return 'n8n hides the data of every run like this one, so do not run the node again to see it. Tell the user that n8n redacted the data.';
+}
 function redactExecuteNodeResult(result, allowSendingParameterValues) {
+    if (result.status === 'redacted') {
+        const redaction = { reason: result.reason, canReveal: false };
+        const guidance = describeExecuteNodeRedaction(result.reason);
+        if (result.failed) {
+            return {
+                status: 'error',
+                error: {
+                    message: (0, instance_ai_1.formatRedactedError)(result.error ?? { type: '' }),
+                    description: guidance,
+                    ...(result.error?.type ? { nodeErrorType: result.error.type } : {}),
+                },
+                redaction,
+            };
+        }
+        return {
+            status: 'success',
+            output: '',
+            outputSuppressed: `The node executed successfully, but n8n redacted its output for this user (${result.reason}). ${guidance}`,
+            redaction,
+        };
+    }
     if (result.status === 'error') {
-        const { message, description, nodeErrorType } = result.error;
+        const { message, description, nodeErrorType, refused } = result.error;
         const cappedDescription = description && description.length > MAX_ERROR_CHARS
             ? `${description.slice(0, MAX_ERROR_CHARS)}…`
             : description;
@@ -3200,7 +3412,7 @@ function redactExecuteNodeResult(result, allowSendingParameterValues) {
             status: 'error',
             error: {
                 message,
-                description: allowSendingParameterValues
+                description: allowSendingParameterValues || refused
                     ? cappedDescription
                     : description
                         ? EXECUTE_NODE_DETAILS_SUPPRESSED
@@ -3277,18 +3489,22 @@ function resolveOutputNames(workflow, nodeName) {
         return [];
     }
 }
-async function extractNodeOutput(executionId, nodeName, options, nodeTypes) {
-    const execution = await di_1.Container.get(execution_persistence_1.ExecutionPersistence).findSingleExecution(executionId, {
-        includeData: true,
-        unflattenData: true,
-    });
-    if (!execution) {
-        throw new Error(`Execution ${executionId} not found`);
-    }
+async function extractNodeOutput(execution, nodeName, options, nodeTypes) {
+    const executionId = execution.id;
     const runData = execution.data?.resultData?.runData;
     if (!runData?.[nodeName]) {
         throw new Error(`Node "${nodeName}" not found in execution ${executionId}`);
     }
+    const redaction = (0, execution_viewer_reader_1.getExecutionRedaction)(execution);
+    if (redaction) {
+        return {
+            nodeName,
+            outputs: [],
+            totalItems: 0,
+            returned: { from: 0, to: 0 },
+            redaction,
+        };
+    }
     const nodeRuns = runData[nodeName];
     const lastRun = nodeRuns[nodeRuns.length - 1];
     const startIndex = options?.startIndex ?? 0;
@@ -3398,19 +3614,8 @@ function getExecutionModeForTrigger(node) {
             return 'manual';
     }
 }
-async function extractExecutionDebugInfo(executionId, includeOutputData = true, nodeTypes) {
-    const execution = await di_1.Container.get(execution_persistence_1.ExecutionPersistence).findSingleExecution(executionId, {
-        includeData: true,
-        unflattenData: true,
-    });
-    if (!execution) {
-        return {
-            executionId,
-            status: 'unknown',
-            nodeTrace: [],
-        };
-    }
-    const baseResult = await extractExecutionResult(executionId, includeOutputData, nodeTypes);
+async function extractExecutionDebugInfo(execution, includeOutputData = true, nodeTypes) {
+    const baseResult = await extractExecutionResult(execution, includeOutputData, nodeTypes);
     const runData = execution.data?.resultData?.runData;
     const nodeTrace = [];
     let failedNode;
@@ -3433,6 +3638,13 @@ async function extractExecutionDebugInfo(executionId, includeOutputData = true,
                     ? new Date(lastRun.startTime + lastRun.executionTime).toISOString()
                     : undefined,
             });
+            if (lastRun.redactedError !== undefined && !failedNode) {
+                failedNode = {
+                    name: nodeName,
+                    type: nodeType,
+                    error: (0, instance_ai_1.formatRedactedError)(lastRun.redactedError),
+                };
+            }
             if (lastRun.error !== undefined && !failedNode) {
                 const errorContext = lastRun.error.context;
                 failedItemIndex =
@@ -3460,9 +3672,9 @@ async function extractExecutionDebugInfo(executionId, includeOutputData = true,
             }
         }
     }
-    if (failedNode && includeOutputData && nodeTypes) {
+    if (failedNode && includeOutputData && nodeTypes && !baseResult.redaction) {
         try {
-            const { nodeName: _omitName, suppressed: _omitSuppressed, ...bundle } = await (0, extract_resolved_node_parameters_1.extractResolvedNodeParameters)(nodeTypes, executionId, failedNode.name, {
+            const { nodeName: _omitName, suppressed: _omitSuppressed, ...bundle } = await (0, extract_resolved_node_parameters_1.extractResolvedNodeParameters)(nodeTypes, execution, failedNode.name, {
                 itemIndex: failedItemIndex,
                 runIndex: failedRunIndex,
             });
@@ -3558,38 +3770,6 @@ function sanitizeCredentialReferencesForSave(nodes) {
         return sanitized;
     });
 }
-function toWorkflowJSON(workflow, options) {
-    const redact = options?.redactParameters ?? false;
-    const source = options?.graph ?? workflow;
-    return {
-        id: workflow.id,
-        name: workflow.name,
-        nodes: (source.nodes ?? []).map((n) => ({
-            id: n.id ?? '',
-            name: n.name,
-            type: n.type,
-            typeVersion: n.typeVersion,
-            position: n.position,
-            parameters: redact ? {} : n.parameters,
-            credentials: n.credentials,
-            webhookId: n.webhookId,
-            disabled: n.disabled,
-            notes: n.notes,
-            notesInFlow: n.notesInFlow,
-            executeOnce: n.executeOnce,
-            retryOnFail: n.retryOnFail,
-            maxTries: n.maxTries,
-            waitBetweenTries: n.waitBetweenTries,
-            alwaysOutputData: n.alwaysOutputData,
-            onError: n.onError ?? (n.continueOnFail ? 'continueRegularOutput' : undefined),
-            extendsCredential: n.extendsCredential,
-            customTelemetryTags: n.customTelemetryTags,
-        })),
-        connections: source.connections,
-        settings: workflow.settings,
-        ...(source.nodeGroups ? { nodeGroups: source.nodeGroups } : {}),
-    };
-}
 function toWorkflowDetail(workflow, options) {
     const redact = options?.redactParameters ?? false;
     return {