feat(editor): Display workflow, credential and data table dependencies

packages/@n8n/api-types/src/dto/index.ts

@@ -79,6 +79,8 @@ export { TransferWorkflowBodyDto } from './workflows/transfer.dto';
 export { ActivateWorkflowDto } from './workflows/activate-workflow.dto';
 export { DeactivateWorkflowDto } from './workflows/deactivate-workflow.dto';
 export { ArchiveWorkflowDto } from './workflows/archive-workflow.dto';
+export { GetResourceDependencyCountsDto } from './workflows/get-resource-dependency-counts.dto';
+export { GetResourceDependenciesDto } from './workflows/get-resource-dependencies.dto';
 
 export { CreateOrUpdateTagRequestDto } from './tag/create-or-update-tag-request.dto';
 export { RetrieveTagQueryDto } from './tag/retrieve-tag-query.dto';

packages/@n8n/api-types/src/dto/workflows/get-resource-dependencies.dto.ts

@@ -0,0 +1,8 @@
+import { z } from 'zod';
+
+import { Z } from '../../zod-class';
+
+export class GetResourceDependenciesDto extends Z.class({
+	resourceIds: z.array(z.string()).min(1).max(100),
+	resourceType: z.enum(['workflow', 'credential', 'dataTable']),
+}) {}

packages/@n8n/api-types/src/dto/workflows/get-resource-dependency-counts.dto.ts

@@ -0,0 +1,8 @@
+import { z } from 'zod';
+
+import { Z } from '../../zod-class';
+
+export class GetResourceDependencyCountsDto extends Z.class({
+	resourceIds: z.array(z.string()).min(1).max(100),
+	resourceType: z.enum(['workflow', 'credential', 'dataTable']),
+}) {}

packages/@n8n/api-types/src/index.ts

@@ -120,6 +120,18 @@ export {
 	WORKFLOW_VERSION_NAME_MAX_LENGTH,
 	WORKFLOW_VERSION_DESCRIPTION_MAX_LENGTH,
 } from './schemas/workflow-version.schema';
+export type {
+	DependencyType,
+	DependencyResourceType,
+	ResolvedDependency,
+	ResolvedDependenciesResult,
+	DependenciesBatchResponse,
+} from './schemas/dependency.schema';
+
+export type {
+	DependencyTypeCounts,
+	DependencyCountsBatchResponse,
+} from './schemas/dependency-counts.schema';
 
 export type {
 	ProjectType,

packages/@n8n/api-types/src/schemas/dependency-counts.schema.ts

@@ -0,0 +1,12 @@
+export interface DependencyTypeCounts {
+	credentialId: number;
+	dataTableId: number;
+	workflowCall: number;
+	workflowParent: number;
+}
+
+/**
+ * Lightweight response for workflow cards — only the counts per type,
+ * no resolved names / project IDs.  Keyed by resource ID.
+ */
+export type DependencyCountsBatchResponse = Record<string, DependencyTypeCounts>;

packages/@n8n/api-types/src/schemas/dependency.schema.ts

@@ -0,0 +1,19 @@
+export type DependencyType = 'credentialId' | 'dataTableId' | 'workflowCall' | 'workflowParent';
+
+export type DependencyResourceType = 'workflow' | 'credential' | 'dataTable';
+
+export interface ResolvedDependency {
+	type: DependencyType;
+	id: string;
+	name: string;
+	/** Project ID — included for data tables so the frontend can build a direct link */
+	projectId?: string;
+}
+
+export interface ResolvedDependenciesResult {
+	dependencies: ResolvedDependency[];
+	/** Number of dependencies the user does not have access to view */
+	inaccessibleCount: number;
+}
+
+export type DependenciesBatchResponse = Record<string, ResolvedDependenciesResult>;

packages/cli/src/credentials/credentials-finder.service.ts

@@ -224,6 +224,54 @@ export class CredentialsFinderService {
 		return sharedCredentialsList;
 	}
 
+	/**
+	 * Given a list of credential IDs, return only those the user can access with the given scopes.
+	 */
+	async findCredentialIdsWithScopeForUser(
+		credentialIds: string[],
+		user: User,
+		scopes: Scope[],
+	): Promise<Set<string>> {
+		if (credentialIds.length === 0) return new Set();
+
+		let where: FindOptionsWhere<SharedCredentials> = { credentialsId: In(credentialIds) };
+
+		if (!hasGlobalScope(user, scopes, { mode: 'allOf' })) {
+			const [projectRoles, credentialRoles] = await Promise.all([
+				this.roleService.rolesWithScope('project', scopes),
+				this.roleService.rolesWithScope('credential', scopes),
+			]);
+			where = {
+				...where,
+				role: In(credentialRoles),
+				project: {
+					projectRelations: {
+						role: In(projectRoles),
+						userId: user.id,
+					},
+				},
+			};
+		}
+
+		const sharedCredentials = await this.sharedCredentialsRepository.find({
+			select: { credentialsId: true },
+			where,
+		});
+
+		const result = new Set(sharedCredentials.map((sc) => sc.credentialsId));
+
+		// Also include global credentials if scopes allow read-only access
+		if (this.hasGlobalReadOnlyAccess(scopes)) {
+			const globalCreds = await this.credentialsRepository.find({
+				where: { id: In(credentialIds), isGlobal: true },
+				select: ['id'],
+			});
+			for (const gc of globalCreds) result.add(gc.id);
+		}
+
+		return result;
+	}
+
 	async getCredentialIdsByUserAndRole(
 		userIds: string[],
 		options: