Add missing resources to CLI, MCP, and n8n surfaces

Audit all three API surfaces against the console GraphQL schema and add
missing resources: asset, audit, datum, dpia, evidence upload, measure,
obligation, processing activity, rights request, snapshot, task, tia,
trust center (with references/files), and vendor management CLI
commands; MCP tools for deletes, rights requests, trust center, vendor
contacts/services, and compliance external URLs; n8n nodes for
obligation, finding, task, evidence, processing activity, dpia, tia,
rights request, snapshot, audit log, access review, organization
context, trust center, and additional control/measure/vendor operations.

Include MCP e2e test infrastructure (testutil MCP client with API key
auth and JSON-RPC session management) and tests covering all new MCP
tools.

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
This commit is contained in:
Sacha Al Himdani
2026-04-21 16:08:37 +02:00
parent f505e23cb0
commit 7be92defcc
220 changed files with 26395 additions and 7 deletions

View File

@@ -0,0 +1,253 @@
// Copyright (c) 2025-2026 Probo Inc <hello@getprobo.com>.
//
// Permission to use, copy, modify, and/or distribute this software for any
// purpose with or without fee is hereby granted, provided that the above
// copyright notice and this permission notice appear in all copies.
//
// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
// PERFORMANCE OF THIS SOFTWARE.
import type { INodeProperties, IExecuteFunctions, INodeExecutionData } from 'n8n-workflow';
import { proboApiRequest } from '../../GenericFunctions';
export const description: INodeProperties[] = [
{
displayName: 'Organization ID',
name: 'organizationId',
type: 'string',
displayOptions: {
show: {
resource: ['obligation'],
operation: ['create'],
},
},
default: '',
description: 'The ID of the organization',
required: true,
},
{
displayName: 'Area',
name: 'area',
type: 'string',
displayOptions: {
show: {
resource: ['obligation'],
operation: ['create'],
},
},
default: '',
description: 'The area of the obligation',
required: true,
},
{
displayName: 'Source',
name: 'source',
type: 'string',
displayOptions: {
show: {
resource: ['obligation'],
operation: ['create'],
},
},
default: '',
description: 'The source of the obligation',
required: true,
},
{
displayName: 'Requirement',
name: 'requirement',
type: 'string',
displayOptions: {
show: {
resource: ['obligation'],
operation: ['create'],
},
},
default: '',
description: 'The requirement of the obligation',
required: true,
},
{
displayName: 'Actions to Be Implemented',
name: 'actionsToBeImplemented',
type: 'string',
displayOptions: {
show: {
resource: ['obligation'],
operation: ['create'],
},
},
default: '',
description: 'The actions to be implemented for the obligation',
},
{
displayName: 'Regulator',
name: 'regulator',
type: 'string',
displayOptions: {
show: {
resource: ['obligation'],
operation: ['create'],
},
},
default: '',
description: 'The regulator of the obligation',
},
{
displayName: 'Owner ID',
name: 'ownerId',
type: 'string',
displayOptions: {
show: {
resource: ['obligation'],
operation: ['create'],
},
},
default: '',
description: 'The ID of the owner',
},
{
displayName: 'Last Review Date',
name: 'lastReviewDate',
type: 'string',
displayOptions: {
show: {
resource: ['obligation'],
operation: ['create'],
},
},
default: '',
description: 'The last review date of the obligation',
},
{
displayName: 'Due Date',
name: 'dueDate',
type: 'string',
displayOptions: {
show: {
resource: ['obligation'],
operation: ['create'],
},
},
default: '',
description: 'The due date of the obligation',
},
{
displayName: 'Status',
name: 'status',
type: 'options',
displayOptions: {
show: {
resource: ['obligation'],
operation: ['create'],
},
},
options: [
{
name: 'Non Compliant',
value: 'NON_COMPLIANT',
},
{
name: 'Partially Compliant',
value: 'PARTIALLY_COMPLIANT',
},
{
name: 'Compliant',
value: 'COMPLIANT',
},
],
default: 'NON_COMPLIANT',
description: 'The status of the obligation',
},
{
displayName: 'Type',
name: 'type',
type: 'options',
displayOptions: {
show: {
resource: ['obligation'],
operation: ['create'],
},
},
options: [
{
name: 'Legal',
value: 'LEGAL',
},
{
name: 'Contractual',
value: 'CONTRACTUAL',
},
],
default: 'LEGAL',
description: 'The type of the obligation',
},
];
export async function execute(
this: IExecuteFunctions,
itemIndex: number,
): Promise<INodeExecutionData> {
const organizationId = this.getNodeParameter('organizationId', itemIndex) as string;
const area = this.getNodeParameter('area', itemIndex) as string;
const source = this.getNodeParameter('source', itemIndex) as string;
const requirement = this.getNodeParameter('requirement', itemIndex) as string;
const actionsToBeImplemented = this.getNodeParameter('actionsToBeImplemented', itemIndex, '') as string;
const regulator = this.getNodeParameter('regulator', itemIndex, '') as string;
const ownerId = this.getNodeParameter('ownerId', itemIndex, '') as string;
const lastReviewDate = this.getNodeParameter('lastReviewDate', itemIndex, '') as string;
const dueDate = this.getNodeParameter('dueDate', itemIndex, '') as string;
const status = this.getNodeParameter('status', itemIndex, '') as string;
const type = this.getNodeParameter('type', itemIndex, '') as string;
const query = `
mutation CreateObligation($input: CreateObligationInput!) {
createObligation(input: $input) {
obligationEdge {
node {
id
area
source
requirement
actionsToBeImplemented
regulator
lastReviewDate
dueDate
status
type
createdAt
updatedAt
}
}
}
}
`;
const variables = {
input: {
organizationId,
area,
source,
requirement,
...(actionsToBeImplemented && { actionsToBeImplemented }),
...(regulator && { regulator }),
...(ownerId && { ownerId }),
...(lastReviewDate && { lastReviewDate }),
...(dueDate && { dueDate }),
...(status && { status }),
...(type && { type }),
},
};
const responseData = await proboApiRequest.call(this, query, variables);
return {
json: responseData,
pairedItem: { item: itemIndex },
};
}

View File

@@ -0,0 +1,55 @@
// Copyright (c) 2025-2026 Probo Inc <hello@getprobo.com>.
//
// Permission to use, copy, modify, and/or distribute this software for any
// purpose with or without fee is hereby granted, provided that the above
// copyright notice and this permission notice appear in all copies.
//
// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
// PERFORMANCE OF THIS SOFTWARE.
import type { INodeProperties, IExecuteFunctions, INodeExecutionData } from 'n8n-workflow';
import { proboApiRequest } from '../../GenericFunctions';
export const description: INodeProperties[] = [
{
displayName: 'Obligation ID',
name: 'obligationId',
type: 'string',
displayOptions: {
show: {
resource: ['obligation'],
operation: ['delete'],
},
},
default: '',
description: 'The ID of the obligation to delete',
required: true,
},
];
export async function execute(
this: IExecuteFunctions,
itemIndex: number,
): Promise<INodeExecutionData> {
const obligationId = this.getNodeParameter('obligationId', itemIndex) as string;
const query = `
mutation DeleteObligation($input: DeleteObligationInput!) {
deleteObligation(input: $input) {
deletedObligationId
}
}
`;
const responseData = await proboApiRequest.call(this, query, { input: { obligationId } });
return {
json: responseData,
pairedItem: { item: itemIndex },
};
}

View File

@@ -0,0 +1,72 @@
// Copyright (c) 2025-2026 Probo Inc <hello@getprobo.com>.
//
// Permission to use, copy, modify, and/or distribute this software for any
// purpose with or without fee is hereby granted, provided that the above
// copyright notice and this permission notice appear in all copies.
//
// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
// PERFORMANCE OF THIS SOFTWARE.
import type { INodeProperties, IExecuteFunctions, INodeExecutionData } from 'n8n-workflow';
import { proboApiRequest } from '../../GenericFunctions';
export const description: INodeProperties[] = [
{
displayName: 'Obligation ID',
name: 'obligationId',
type: 'string',
displayOptions: {
show: {
resource: ['obligation'],
operation: ['get'],
},
},
default: '',
description: 'The ID of the obligation',
required: true,
},
];
export async function execute(
this: IExecuteFunctions,
itemIndex: number,
): Promise<INodeExecutionData> {
const obligationId = this.getNodeParameter('obligationId', itemIndex) as string;
const query = `
query GetObligation($obligationId: ID!) {
node(id: $obligationId) {
... on Obligation {
id
area
source
requirement
actionsToBeImplemented
regulator
lastReviewDate
dueDate
status
type
createdAt
updatedAt
}
}
}
`;
const variables = {
obligationId,
};
const responseData = await proboApiRequest.call(this, query, variables);
return {
json: responseData,
pairedItem: { item: itemIndex },
};
}

View File

@@ -0,0 +1,121 @@
// Copyright (c) 2025-2026 Probo Inc <hello@getprobo.com>.
//
// Permission to use, copy, modify, and/or distribute this software for any
// purpose with or without fee is hereby granted, provided that the above
// copyright notice and this permission notice appear in all copies.
//
// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
// PERFORMANCE OF THIS SOFTWARE.
import type { INodeProperties, IExecuteFunctions, INodeExecutionData, IDataObject } from 'n8n-workflow';
import { proboApiRequestAllItems } from '../../GenericFunctions';
export const description: INodeProperties[] = [
{
displayName: 'Organization ID',
name: 'organizationId',
type: 'string',
displayOptions: {
show: {
resource: ['obligation'],
operation: ['getAll'],
},
},
default: '',
description: 'The ID of the organization',
required: true,
},
{
displayName: 'Return All',
name: 'returnAll',
type: 'boolean',
displayOptions: {
show: {
resource: ['obligation'],
operation: ['getAll'],
},
},
default: false,
description: 'Whether to return all results or only up to a given limit',
},
{
displayName: 'Limit',
name: 'limit',
type: 'number',
displayOptions: {
show: {
resource: ['obligation'],
operation: ['getAll'],
returnAll: [false],
},
},
typeOptions: {
minValue: 1,
},
default: 50,
description: 'Max number of results to return',
},
];
export async function execute(
this: IExecuteFunctions,
itemIndex: number,
): Promise<INodeExecutionData> {
const organizationId = this.getNodeParameter('organizationId', itemIndex) as string;
const returnAll = this.getNodeParameter('returnAll', itemIndex) as boolean;
const limit = this.getNodeParameter('limit', itemIndex, 50) as number;
const query = `
query GetObligations($organizationId: ID!, $first: Int, $after: CursorKey) {
node(id: $organizationId) {
... on Organization {
obligations(first: $first, after: $after) {
edges {
node {
id
area
source
requirement
actionsToBeImplemented
regulator
lastReviewDate
dueDate
status
type
createdAt
updatedAt
}
}
pageInfo {
hasNextPage
endCursor
}
}
}
}
}
`;
const obligations = await proboApiRequestAllItems.call(
this,
query,
{ organizationId },
(response) => {
const data = response?.data as IDataObject | undefined;
const node = data?.node as IDataObject | undefined;
return node?.obligations as IDataObject | undefined;
},
returnAll,
limit,
);
return {
json: { obligations },
pairedItem: { item: itemIndex },
};
}

View File

@@ -0,0 +1,74 @@
// Copyright (c) 2025-2026 Probo Inc <hello@getprobo.com>.
//
// Permission to use, copy, modify, and/or distribute this software for any
// purpose with or without fee is hereby granted, provided that the above
// copyright notice and this permission notice appear in all copies.
//
// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
// PERFORMANCE OF THIS SOFTWARE.
import type { INodeProperties } from 'n8n-workflow';
import * as createOp from './create.operation';
import * as updateOp from './update.operation';
import * as deleteOp from './delete.operation';
import * as getOp from './get.operation';
import * as getAllOp from './getAll.operation';
export const description: INodeProperties[] = [
{
displayName: 'Operation',
name: 'operation',
type: 'options',
noDataExpression: true,
displayOptions: {
show: {
resource: ['obligation'],
},
},
options: [
{
name: 'Create',
value: 'create',
description: 'Create a new obligation',
action: 'Create an obligation',
},
{
name: 'Delete',
value: 'delete',
description: 'Delete an obligation',
action: 'Delete an obligation',
},
{
name: 'Get',
value: 'get',
description: 'Get an obligation',
action: 'Get an obligation',
},
{
name: 'Get Many',
value: 'getAll',
description: 'Get many obligations',
action: 'Get many obligations',
},
{
name: 'Update',
value: 'update',
description: 'Update an existing obligation',
action: 'Update an obligation',
},
],
default: 'create',
},
...createOp.description,
...updateOp.description,
...deleteOp.description,
...getOp.description,
...getAllOp.description,
];
export { createOp as create, updateOp as update, deleteOp as delete, getOp as get, getAllOp as getAll };

View File

@@ -0,0 +1,252 @@
// Copyright (c) 2025-2026 Probo Inc <hello@getprobo.com>.
//
// Permission to use, copy, modify, and/or distribute this software for any
// purpose with or without fee is hereby granted, provided that the above
// copyright notice and this permission notice appear in all copies.
//
// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
// PERFORMANCE OF THIS SOFTWARE.
import type { INodeProperties, IExecuteFunctions, INodeExecutionData } from 'n8n-workflow';
import { proboApiRequest } from '../../GenericFunctions';
export const description: INodeProperties[] = [
{
displayName: 'Obligation ID',
name: 'id',
type: 'string',
displayOptions: {
show: {
resource: ['obligation'],
operation: ['update'],
},
},
default: '',
description: 'The ID of the obligation to update',
required: true,
},
{
displayName: 'Area',
name: 'area',
type: 'string',
displayOptions: {
show: {
resource: ['obligation'],
operation: ['update'],
},
},
default: '',
description: 'The area of the obligation',
},
{
displayName: 'Source',
name: 'source',
type: 'string',
displayOptions: {
show: {
resource: ['obligation'],
operation: ['update'],
},
},
default: '',
description: 'The source of the obligation',
},
{
displayName: 'Requirement',
name: 'requirement',
type: 'string',
displayOptions: {
show: {
resource: ['obligation'],
operation: ['update'],
},
},
default: '',
description: 'The requirement of the obligation',
},
{
displayName: 'Actions to Be Implemented',
name: 'actionsToBeImplemented',
type: 'string',
displayOptions: {
show: {
resource: ['obligation'],
operation: ['update'],
},
},
default: '',
description: 'The actions to be implemented for the obligation',
},
{
displayName: 'Regulator',
name: 'regulator',
type: 'string',
displayOptions: {
show: {
resource: ['obligation'],
operation: ['update'],
},
},
default: '',
description: 'The regulator of the obligation',
},
{
displayName: 'Owner ID',
name: 'ownerId',
type: 'string',
displayOptions: {
show: {
resource: ['obligation'],
operation: ['update'],
},
},
default: '',
description: 'The ID of the owner',
},
{
displayName: 'Last Review Date',
name: 'lastReviewDate',
type: 'string',
displayOptions: {
show: {
resource: ['obligation'],
operation: ['update'],
},
},
default: '',
description: 'The last review date of the obligation',
},
{
displayName: 'Due Date',
name: 'dueDate',
type: 'string',
displayOptions: {
show: {
resource: ['obligation'],
operation: ['update'],
},
},
default: '',
description: 'The due date of the obligation',
},
{
displayName: 'Status',
name: 'status',
type: 'options',
displayOptions: {
show: {
resource: ['obligation'],
operation: ['update'],
},
},
options: [
{
name: '(Unchanged)',
value: '',
},
{
name: 'Non Compliant',
value: 'NON_COMPLIANT',
},
{
name: 'Partially Compliant',
value: 'PARTIALLY_COMPLIANT',
},
{
name: 'Compliant',
value: 'COMPLIANT',
},
],
default: '',
description: 'The status of the obligation',
},
{
displayName: 'Type',
name: 'type',
type: 'options',
displayOptions: {
show: {
resource: ['obligation'],
operation: ['update'],
},
},
options: [
{
name: '(Unchanged)',
value: '',
},
{
name: 'Legal',
value: 'LEGAL',
},
{
name: 'Contractual',
value: 'CONTRACTUAL',
},
],
default: '',
description: 'The type of the obligation',
},
];
export async function execute(
this: IExecuteFunctions,
itemIndex: number,
): Promise<INodeExecutionData> {
const id = this.getNodeParameter('id', itemIndex) as string;
const area = this.getNodeParameter('area', itemIndex, '') as string;
const source = this.getNodeParameter('source', itemIndex, '') as string;
const requirement = this.getNodeParameter('requirement', itemIndex, '') as string;
const actionsToBeImplemented = this.getNodeParameter('actionsToBeImplemented', itemIndex, '') as string;
const regulator = this.getNodeParameter('regulator', itemIndex, '') as string;
const ownerId = this.getNodeParameter('ownerId', itemIndex, '') as string;
const lastReviewDate = this.getNodeParameter('lastReviewDate', itemIndex, '') as string;
const dueDate = this.getNodeParameter('dueDate', itemIndex, '') as string;
const status = this.getNodeParameter('status', itemIndex, '') as string;
const type = this.getNodeParameter('type', itemIndex, '') as string;
const query = `
mutation UpdateObligation($input: UpdateObligationInput!) {
updateObligation(input: $input) {
obligation {
id
area
source
requirement
actionsToBeImplemented
regulator
lastReviewDate
dueDate
status
type
createdAt
updatedAt
}
}
}
`;
const input: Record<string, string> = { id };
if (area) input.area = area;
if (source) input.source = source;
if (requirement) input.requirement = requirement;
if (actionsToBeImplemented) input.actionsToBeImplemented = actionsToBeImplemented;
if (regulator) input.regulator = regulator;
if (ownerId) input.ownerId = ownerId;
if (lastReviewDate) input.lastReviewDate = lastReviewDate;
if (dueDate) input.dueDate = dueDate;
if (status) input.status = status;
if (type) input.type = type;
const responseData = await proboApiRequest.call(this, query, { input });
return {
json: responseData,
pairedItem: { item: itemIndex },
};
}