@elizaos/app-core 2.0.0-alpha.210 → 2.0.0-alpha.211

package/apps/app-lifeops/src/actions/calendar.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"calendar.d.ts","sourceRoot":"","sources":["../../../../../../../apps/app-lifeops/src/actions/calendar.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,MAAM,EAKN,aAAa,EACb,MAAM,EACN,KAAK,EACN,MAAM,eAAe,CAAC;AAyCvB,KAAK,iBAAiB,GAClB,MAAM,GACN,YAAY,GACZ,eAAe,GACf,cAAc,GACd,cAAc,GACd,cAAc,GACd,aAAa,CAAC;AAuBlB,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACpC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAkjDF,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,KAAK,GAAG,SAAS,EACxB,MAAM,EAAE,MAAM,EACd,QAAQ,SAA2B,GAClC,OAAO,CAAC,eAAe,CAAC,CA6J1B;AA2gCD,eAAO,MAAM,cAAc,EAAE,MAAM,GAAG;IACpC,8BAA8B,CAAC,EAAE,OAAO,CAAC;CAoqC1C,CAAC"}
+{"version":3,"file":"calendar.d.ts","sourceRoot":"","sources":["../../../../../../../apps/app-lifeops/src/actions/calendar.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,MAAM,EAKN,aAAa,EACb,MAAM,EACN,KAAK,EACN,MAAM,eAAe,CAAC;AAyCvB,KAAK,iBAAiB,GAClB,MAAM,GACN,YAAY,GACZ,eAAe,GACf,cAAc,GACd,cAAc,GACd,cAAc,GACd,aAAa,CAAC;AAuBlB,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,EAAE,iBAAiB,GAAG,IAAI,CAAC;IACpC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAkjDF,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,KAAK,GAAG,SAAS,EACxB,MAAM,EAAE,MAAM,EACd,QAAQ,SAA2B,GAClC,OAAO,CAAC,eAAe,CAAC,CA6J1B;AA2gCD,eAAO,MAAM,cAAc,EAAE,MAAM,GAAG;IACpC,8BAA8B,CAAC,EAAE,OAAO,CAAC;CAkqC1C,CAAC"}

package/apps/app-lifeops/src/actions/calendar.js

@@ -2110,8 +2110,6 @@ export const calendarAction = {
     tags: [
         "always-include",
         "calendar",
-        "schedule",
-        "meeting",
         "event",
         "recurring block",
         "time block",
@@ -2127,7 +2125,7 @@ export const calendarAction = {
         "DO NOT use this action for email inbox work, drafting or sending emails — use GMAIL_ACTION instead. " +
         "DO NOT use this action for personal habits, goals, routines, or reminders — use LIFE instead. " +
         "This action provides the final grounded reply; do not pair it with a speculative REPLY action." +
-        " DO NOT use this action when the user asks to 'help schedule' / 'set up' / 'find a time for' a meeting with a person or team without a specific time — that is SCHEDULING (subaction start). DO NOT use this action to 'propose', 'suggest', or 'offer' meeting time slots — that is PROPOSE_MEETING_TIMES. Use CALENDAR_ACTION only when the user specifies (or intends to specify) a concrete date/time for the event.",
+        " DO NOT use this action when the user asks to 'help schedule', 'help me schedule', 'set up a meeting with', 'find a time with', 'find us a time', 'find a slot with', or otherwise wants to negotiate a meeting with a person or team WITHOUT naming a concrete date or time — that is SCHEDULING (subaction: start). Any time the request mentions a person/team AND no specific time, route it to SCHEDULING, not here. DO NOT use this action to 'propose', 'suggest', or 'offer' meeting time slots — that is PROPOSE_MEETING_TIMES. Use CALENDAR_ACTION only when the user specifies (or intends to specify) a concrete date/time for the event.",
     descriptionCompressed: "Google Calendar via LifeOps: view schedule, search events, create events, query travel. Not for email or habits.",
     suppressPostActionContinuation: true,
     validate: async (runtime, message) => {

package/apps/app-lifeops/src/actions/cross-channel-send.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cross-channel-send.d.ts","sourceRoot":"","sources":["../../../../../../../apps/app-lifeops/src/actions/cross-channel-send.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EACV,MAAM,EAMP,MAAM,eAAe,CAAC;AAyBvB,eAAO,MAAM,2BAA2B,yIAY9B,CAAC;AACX,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AAwZnF,eAAO,MAAM,sBAAsB,EAAE,MAAM,GAAG;IAC5C,8BAA8B,CAAC,EAAE,OAAO,CAAC;CAoN1C,CAAC"}
+{"version":3,"file":"cross-channel-send.d.ts","sourceRoot":"","sources":["../../../../../../../apps/app-lifeops/src/actions/cross-channel-send.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EACV,MAAM,EAMP,MAAM,eAAe,CAAC;AAyBvB,eAAO,MAAM,2BAA2B,yIAY9B,CAAC;AACX,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AAwZnF,eAAO,MAAM,sBAAsB,EAAE,MAAM,GAAG;IAC5C,8BAA8B,CAAC,EAAE,OAAO,CAAC;CAuN1C,CAAC"}

package/apps/app-lifeops/src/actions/cross-channel-send.js

@@ -405,6 +405,9 @@ export const crossChannelSendAction = {
         "Use this for any 'post <msg> to <channel>', 'send <msg> on <platform>', " +
         "or 'dm <person> on <platform>' request — the channel name in the sentence " +
         "(discord, telegram, signal, etc.) is the strongest signal. " +
+        "Do NOT use this for 'broadcast/push/send <X> to all my devices' or " +
+        "'broadcast a reminder to my phone/desktop/watch' — device-targeted " +
+        "reminders belong to INTENT_SYNC, not CROSS_CHANNEL_SEND. " +
         "Do NOT use SCHEDULING for channel-send requests even if the message " +
         "mentions a meeting-like word (e.g. 'standup', 'sync'); SCHEDULING is for " +
         "negotiating calendar proposals, not relaying chat messages.",

package/apps/app-lifeops/src/actions/health.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../../../../../../apps/app-lifeops/src/actions/health.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,MAAM,EAOP,MAAM,eAAe,CAAC;AAqOvB,eAAO,MAAM,YAAY,EAAE,MAmO1B,CAAC"}
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../../../../../../../apps/app-lifeops/src/actions/health.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,MAAM,EAOP,MAAM,eAAe,CAAC;AAqOvB,eAAO,MAAM,YAAY,EAAE,MAwP1B,CAAC"}

package/apps/app-lifeops/src/actions/health.js

@@ -178,8 +178,29 @@ function formatSummary(summary) {
 }
 export const healthAction = {
     name: "HEALTH",
-    similes: ["FITNESS", "HEALTHKIT", "GOOGLE_FIT", "WELLNESS"],
-    description: "Query health and fitness data from HealthKit or Google Fit. Subactions: today, trend, by_metric, status.",
+    similes: [
+        "FITNESS",
+        "HEALTHKIT",
+        "GOOGLE_FIT",
+        "WELLNESS",
+        "SLEEP",
+        "SLEEP_DATA",
+        "SLEEP_STATS",
+        "STEPS",
+        "STEP_COUNT",
+        "HEART_RATE",
+        "WORKOUT",
+        "EXERCISE",
+        "CALORIES",
+        "ACTIVITY_METRICS",
+    ],
+    description: "Query health and fitness telemetry from HealthKit or Google Fit — sleep " +
+        "(duration, quality, stages), steps, heart rate, workouts, calories, and " +
+        "other body/activity metrics. Subactions: today, trend, by_metric, status. " +
+        "Use this for questions like 'how did I sleep last night', 'how many steps " +
+        "today', 'what was my resting heart rate', 'show my sleep trend this week'. " +
+        "Do NOT route health-metric questions through LIFE (LIFE is for tasks/goals/" +
+        "habits lifecycle, not wearable/quantified-self data).",
     validate: async (runtime, message) => hasLifeOpsAccess(runtime, message),
     handler: async (runtime, message, state, options, callback) => {
         if (!(await hasLifeOpsAccess(runtime, message))) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@elizaos/app-core",
-  "version": "2.0.0-alpha.210",
+  "version": "2.0.0-alpha.211",
   "description": "Shared application core for elizaOS white-label agent apps.",
   "type": "module",
   "license": "MIT",
@@ -477,7 +477,7 @@
     "@capacitor/keyboard": "8.0.3",
     "@capacitor/preferences": "^8.0.1",
     "@clack/prompts": "^1.0.0",
-    "@elizaos/agent": "^2.0.0-alpha.210",
+    "@elizaos/agent": "^2.0.0-alpha.211",
     "@elizaos/app-companion": "^0.0.0",
     "@elizaos/app-elizamaker": "^0.0.0",
     "@elizaos/app-lifeops": "^0.0.0",
@@ -486,9 +486,9 @@
     "@elizaos/app-task-coordinator": "^0.0.0",
     "@elizaos/app-training": "^0.0.1",
     "@elizaos/app-vincent": "^0.0.0",
-    "@elizaos/core": "^2.0.0-alpha.210",
-    "@elizaos/shared": "^2.0.0-alpha.210",
-    "@elizaos/ui": "^2.0.0-alpha.210",
+    "@elizaos/core": "^2.0.0-alpha.211",
+    "@elizaos/shared": "^2.0.0-alpha.211",
+    "@elizaos/ui": "^2.0.0-alpha.211",
     "@radix-ui/react-checkbox": "^1.3.3",
     "@radix-ui/react-dialog": "^1.1.15",
     "@radix-ui/react-dropdown-menu": "^2.1.16",

package/packages/app-core/src/services/n8n-sidecar.d.ts

@@ -200,10 +200,12 @@ export declare class N8nSidecar {
     /** Push a line into the bounded recent-output buffer and publish. */
     private recordOutput;
     /**
-     * Wait for the current child to exit. Returns early if the child is null.
-     * Capped at CHILD_EXIT_WAIT_TIMEOUT_MS — beyond that we assume the child
-     * is hung, send SIGKILL, and treat it as exited so the supervisor can
-     * make forward progress instead of blocking forever.
+     * Block until the current child exits. Returns early if the child is null
+     * or if `stop()` has flipped `stopping`. No timeout — n8n is a long-running
+     * service, so timing out here would SIGKILL a healthy child and bounce the
+     * supervisor into a "child exited unexpectedly" → retry loop that ends in
+     * the `max retries exceeded` error state. Shutdown-side timeouts live in
+     * `killChild()` (SIGTERM with a 5s SIGKILL fallback).
      */
     private waitForChildExitWithTimeout;
     private killChild;
@@ -231,8 +233,15 @@ export declare class N8nSidecar {
     private loadPersistedApiKey;
     private persistApiKey;
     /**
-     * Validate a cached API key by listing keys through n8n's public API.
-     * A 2xx means the key is still live; 401/403 means it was revoked.
+     * Validate a cached API key by calling the public REST API that accepts
+     * the X-N8N-API-KEY header. A 2xx means the key is still live; 401/403
+     * means it was revoked.
+     *
+     * Important: /rest/api-keys is the internal endpoint that requires the
+     * JWT cookie and will always 401 for an X-N8N-API-KEY regardless of
+     * whether the key itself is valid. Using /api/v1/workflows instead —
+     * the same endpoint the proxy hits, so "valid for probe" = "valid for
+     * real traffic".
      */
     private validateApiKey;
     /**
@@ -270,6 +279,14 @@ export declare class N8nSidecar {
     private acquireOwnerCookie;
     /** List scopes the current role may grant when creating an API key. */
     private fetchApiKeyScopes;
+    /**
+     * Delete every api-key row with a matching label. Used to recover from the
+     * "already exists" case when a previous provisioning run created the label
+     * but lost the `rawApiKey` (n8n only returns the raw key at creation time,
+     * so a partially-persisted state wedges the next boot unless we can delete
+     * and re-create). Returns the number of rows deleted.
+     */
+    private deleteApiKeysByLabel;
     /** 48 bytes of base64url entropy — ~64 chars, far above n8n's min length. */
     private generateRandomPassword;
     /** Stop the sidecar. Idempotent. */

package/packages/app-core/src/services/n8n-sidecar.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"n8n-sidecar.d.ts","sourceRoot":"","sources":["../../../../../src/services/n8n-sidecar.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EAAqB,KAAK,IAAI,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAY3E,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,UAAU,GAAG,OAAO,GAAG,OAAO,CAAC;AAE1E,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,gBAAgB,CAAC;IACzB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;OAOG;IACH,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,0EAA0E;IAC1E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;;;;;;;;;;OAeG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;;OASG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,wDAAwD;IACxD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sDAAsD;IACtD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iFAAiF;IACjF,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAC;IAClD,+DAA+D;IAC/D,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,GAAG,QAAQ,KAAK,IAAI,CAAC;CAC7D;AAED,MAAM,WAAW,cAAc;IAC7B,+EAA+E;IAC/E,KAAK,CAAC,EAAE,OAAO,SAAS,CAAC;IACzB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,sDAAsD;IACtD,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC;;;OAGG;IACH,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IAC1C;;;OAGG;IACH,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC7D;;;;OAIG;IACH,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC;IACxD;;;OAGG;IACH,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,6EAA6E;IAC7E,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC;IACnD,oDAAoD;IACpD,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;CACxC;AAED,KAAK,QAAQ,GAAG,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAC;AAsOjD,qBAAa,UAAU;IACrB,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,IAAI,CAA2B;IACvC,OAAO,CAAC,KAAK,CAQX;IAKF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAO;IAChD,sFAAsF;IACtF,OAAO,CAAC,YAAY,CAAgB;IACpC,OAAO,CAAC,KAAK,CAA6B;IAC1C,8EAA8E;IAC9E,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,SAAS,CAA4B;IAC7C,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,iBAAiB,CAAS;IAClC;;;;OAIG;IACH,OAAO,CAAC,eAAe,CAAiB;gBAE5B,MAAM,GAAE,gBAAqB,EAAE,IAAI,GAAE,cAAmB;IA2BpE,QAAQ,IAAI,eAAe;IAI3B;;;OAGG;IACH,SAAS,IAAI,MAAM,GAAG,IAAI;IAI1B;;;;;;;;;OASG;IACH,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI;IAiC1C;;;OAGG;IACH,OAAO,CAAC,cAAc;IAiBtB,SAAS,CAAC,EAAE,EAAE,QAAQ,GAAG,MAAM,IAAI;IAanC,OAAO,CAAC,IAAI;IAgBZ,OAAO,CAAC,QAAQ;IAKhB;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAsB5B;;;OAGG;YACW,aAAa;YA2Fb,UAAU;IAqFxB,qEAAqE;IACrE,OAAO,CAAC,YAAY;IAapB;;;;;OAKG;IACH,OAAO,CAAC,2BAA2B;IAgCnC,OAAO,CAAC,SAAS;IAwBjB;;;;;OAKG;YACW,cAAc;IAkC5B;;;;;;;;;;;OAWG;YACW,YAAY;IAc1B,OAAO,CAAC,UAAU;YAIJ,mBAAmB;YAOnB,aAAa;IAc3B;;;OAGG;YACW,cAAc;IAa5B;;;;;;;;;;;;;;;;;;;OAmBG;YACW,eAAe;IAkE7B;;;;OAIG;YACW,sBAAsB;IAuDpC;;;;OAIG;YACW,kBAAkB;IAsEhC,uEAAuE;YACzD,iBAAiB;IAkB/B,6EAA6E;IAC7E,OAAO,CAAC,sBAAsB;IAQ9B,oCAAoC;IAC9B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAgB3B,6EAA6E;IAC7E,SAAS,IAAI,OAAO;IAMpB,OAAO,CAAC,WAAW;YAIL,WAAW;YAOX,YAAY;YAYZ,aAAa;IAI3B;;;;;;;;;OASG;YACW,UAAU;IAmCxB,OAAO,CAAC,kBAAkB;IAa1B,OAAO,CAAC,qBAAqB;CAM9B;AAmBD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,aAAa,CAAC,MAAM,GAAE,gBAAqB,GAAG,UAAU,CAYvE;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,GAAE,gBAAqB,GAC5B,OAAO,CAAC,UAAU,CAAC,CAKrB;AAED;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,UAAU,GAAG,IAAI,CAElD;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CAgBvD"}
+{"version":3,"file":"n8n-sidecar.d.ts","sourceRoot":"","sources":["../../../../../src/services/n8n-sidecar.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EAAqB,KAAK,IAAI,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAY3E,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,UAAU,GAAG,OAAO,GAAG,OAAO,CAAC;AAE1E,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,gBAAgB,CAAC;IACzB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;OAOG;IACH,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,0EAA0E;IAC1E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kDAAkD;IAClD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;;;;;;;;;;OAeG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;;;;;OASG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,wDAAwD;IACxD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sDAAsD;IACtD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iFAAiF;IACjF,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAC;IAClD,+DAA+D;IAC/D,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,GAAG,QAAQ,KAAK,IAAI,CAAC;CAC7D;AAED,MAAM,WAAW,cAAc;IAC7B,+EAA+E;IAC/E,KAAK,CAAC,EAAE,OAAO,SAAS,CAAC;IACzB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,sDAAsD;IACtD,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC;;;OAGG;IACH,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IAC1C;;;OAGG;IACH,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC7D;;;;OAIG;IACH,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC;IACxD;;;OAGG;IACH,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,6EAA6E;IAC7E,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC;IACnD,oDAAoD;IACpD,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI,CAAC;CACxC;AAED,KAAK,QAAQ,GAAG,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAC;AAoOjD,qBAAa,UAAU;IACrB,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,IAAI,CAA2B;IACvC,OAAO,CAAC,KAAK,CAQX;IAKF,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAO;IAChD,sFAAsF;IACtF,OAAO,CAAC,YAAY,CAAgB;IACpC,OAAO,CAAC,KAAK,CAA6B;IAC1C,8EAA8E;IAC9E,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,SAAS,CAA4B;IAC7C,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,iBAAiB,CAAS;IAClC;;;;OAIG;IACH,OAAO,CAAC,eAAe,CAAiB;gBAE5B,MAAM,GAAE,gBAAqB,EAAE,IAAI,GAAE,cAAmB;IA2BpE,QAAQ,IAAI,eAAe;IAI3B;;;OAGG;IACH,SAAS,IAAI,MAAM,GAAG,IAAI;IAI1B;;;;;;;;;OASG;IACH,YAAY,CAAC,IAAI,EAAE,gBAAgB,GAAG,IAAI;IAiC1C;;;OAGG;IACH,OAAO,CAAC,cAAc;IAiBtB,SAAS,CAAC,EAAE,EAAE,QAAQ,GAAG,MAAM,IAAI;IAanC,OAAO,CAAC,IAAI;IAgBZ,OAAO,CAAC,QAAQ;IAKhB;;;OAGG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA0C5B;;;OAGG;YACW,aAAa;YA2Fb,UAAU;IAmHxB,qEAAqE;IACrE,OAAO,CAAC,YAAY;IAapB;;;;;;;OAOG;IACH,OAAO,CAAC,2BAA2B;IAoBnC,OAAO,CAAC,SAAS;IAwBjB;;;;;OAKG;YACW,cAAc;IAsC5B;;;;;;;;;;;OAWG;YACW,YAAY;IAc1B,OAAO,CAAC,UAAU;YAIJ,mBAAmB;YAOnB,aAAa;IAc3B;;;;;;;;;;OAUG;YACW,cAAc;IAa5B;;;;;;;;;;;;;;;;;;;OAmBG;YACW,eAAe;IAkF7B;;;;OAIG;YACW,sBAAsB;IAuDpC;;;;OAIG;YACW,kBAAkB;IAsEhC,uEAAuE;YACzD,iBAAiB;IAkB/B;;;;;;OAMG;YACW,oBAAoB;IAuClC,6EAA6E;IAC7E,OAAO,CAAC,sBAAsB;IAQ9B,oCAAoC;IAC9B,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAgB3B,6EAA6E;IAC7E,SAAS,IAAI,OAAO;IAMpB,OAAO,CAAC,WAAW;YAIL,WAAW;YAOX,YAAY;YAYZ,aAAa;IAI3B;;;;;;;;;OASG;YACW,UAAU;IAmCxB,OAAO,CAAC,kBAAkB;IAa1B,OAAO,CAAC,qBAAqB;CAM9B;AAmBD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,aAAa,CAAC,MAAM,GAAE,gBAAqB,GAAG,UAAU,CAYvE;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,MAAM,GAAE,gBAAqB,GAC5B,OAAO,CAAC,UAAU,CAAC,CAKrB;AAED;;;;GAIG;AACH,wBAAgB,cAAc,IAAI,UAAU,GAAG,IAAI,CAElD;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC,CAgBvD"}

package/packages/app-core/src/services/n8n-sidecar.js

@@ -75,8 +75,6 @@ const DEFAULT_MAX_RETRIES = 3;
 const DEFAULT_BACKOFF_BASE_MS = 2_000;
 /** Uptime after which a ready sidecar is considered healthy and retries reset. */
 const RETRY_RESET_AFTER_MS = 5 * 60 * 1_000;
-/** Hard cap on how long we wait for a child to exit during supervision. */
-const CHILD_EXIT_WAIT_TIMEOUT_MS = 2 * 60 * 1_000;
 /** Grace period between SIGTERM and SIGKILL when reaping an orphan. */
 const ORPHAN_SIGTERM_GRACE_MS = 5_000;
 /** Terminal statuses that mean "not running right now". */
@@ -431,7 +429,27 @@ export class N8nSidecar {
             errorMessage: null,
             retries: 0,
         });
-        await this.runSupervisor();
+        // Resolve when the supervisor first transitions to a terminal steady
+        // state ("ready" or "error") — not when the supervisor loop itself
+        // exits. The loop keeps running for the full lifetime of the child,
+        // so awaiting it here would block callers forever on a healthy sidecar.
+        // The supervisor continues to run in the background after this resolves;
+        // stop() is the canonical way to terminate it.
+        const supervisorPromise = this.runSupervisor();
+        await new Promise((resolve) => {
+            if (this.state.status === "ready" || this.state.status === "error") {
+                resolve();
+                return;
+            }
+            const unsubscribe = this.subscribe((state) => {
+                if (state.status === "ready" || state.status === "error") {
+                    unsubscribe();
+                    resolve();
+                }
+            });
+        });
+        // Don't leave an unhandled rejection if the supervisor later errors.
+        supervisorPromise.catch(() => undefined);
     }
     /**
      * Supervisor loop: spawn → probe readiness → (on crash) exponential
@@ -522,6 +540,18 @@ export class N8nSidecar {
         // tsyringe decorator handling for 1.100+ — see `binary?` docs above).
         const env = {
             ...process.env,
+            // Force NODE_ENV=production for the child.
+            //
+            // Reason: when the parent process has NODE_ENV=test (vitest sets this
+            // by default, and CI pipelines set it for similar reasons), `npx`
+            // spawned under Bun silently exits with code 1 before producing any
+            // stdout/stderr. Setting NODE_ENV=test also causes `npm install` to
+            // skip devDependencies, which can leave n8n's dep graph incomplete
+            // when npx runs it through the npm cache. Overriding to `production`
+            // gives the child the environment n8n was actually tested against
+            // and unblocks the sidecar inside vitest's live-e2e suite. The parent
+            // process's NODE_ENV is untouched — this only shapes the child env.
+            NODE_ENV: "production",
             N8N_PORT: String(port),
             N8N_HOST: this.config.host,
             N8N_PROTOCOL: "http",
@@ -533,6 +563,14 @@ export class N8nSidecar {
             N8N_USER_FOLDER: this.config.stateDir,
             DB_TYPE: "sqlite",
             DB_SQLITE_DATABASE: path.join(this.config.stateDir, "database.sqlite"),
+            // Opt out of the Enterprise-Edition modules. n8n's module-registry
+            // tries to `require()` an `.ee` variant of each enabled module at
+            // boot; both `insights.ee` and `external-secrets.ee` only ship with
+            // the EE build and are missing from the public npm/bunx install, so
+            // the child crashes with "Failed to load module 'insights'" before
+            // the HTTP server even binds. Disabling both here means the sidecar
+            // boots cleanly on the OSS build.
+            N8N_DISABLED_MODULES: "insights,external-secrets",
         };
         const versioned = `n8n@${this.config.version}`;
         // Arg style depends on the launcher:
@@ -545,6 +583,7 @@ export class N8nSidecar {
             : binaryBase === "bunx"
                 ? ["--", versioned, "start"]
                 : [versioned, "start"];
+        this.recordOutput(`[spawn] ${this.config.binary} ${launcherArgs.join(" ")} (port ${port}, stateDir ${this.config.stateDir}, NODE_ENV=${env.NODE_ENV ?? "(unset)"}, PATH len=${(env.PATH ?? "").length})`);
         const child = this.deps.spawn(this.config.binary, launcherArgs, {
             env,
             stdio: ["ignore", "pipe", "pipe"],
@@ -582,7 +621,14 @@ export class N8nSidecar {
         // can linger as <defunct> because Node only waitpid()'s when something
         // is listening. This handler is unconditional — waitForChildExit attaches
         // its own once('exit') for supervisor-level signalling.
-        child.on("exit", (code, signal) => {
+        //
+        // Use `close` instead of `exit` so the final chunks from stdout/stderr
+        // are flushed into recentOutput before we log the exit summary. Node
+        // emits `exit` as soon as the process terminates but `close` only fires
+        // after all stdio streams have drained — which is the ordering we want
+        // so the supervisor / UI see the *reason* for the exit, not just the
+        // bare exit code line.
+        child.on("close", (code, signal) => {
             const summary = code !== null
                 ? `exit code ${code}`
                 : signal !== null
@@ -606,10 +652,12 @@ export class N8nSidecar {
         // is snapshotted on every setState() call and served by getState().
     }
     /**
-     * Wait for the current child to exit. Returns early if the child is null.
-     * Capped at CHILD_EXIT_WAIT_TIMEOUT_MS — beyond that we assume the child
-     * is hung, send SIGKILL, and treat it as exited so the supervisor can
-     * make forward progress instead of blocking forever.
+     * Block until the current child exits. Returns early if the child is null
+     * or if `stop()` has flipped `stopping`. No timeout — n8n is a long-running
+     * service, so timing out here would SIGKILL a healthy child and bounce the
+     * supervisor into a "child exited unexpectedly" → retry loop that ends in
+     * the `max retries exceeded` error state. Shutdown-side timeouts live in
+     * `killChild()` (SIGTERM with a 5s SIGKILL fallback).
      */
     waitForChildExitWithTimeout() {
         return new Promise((resolve) => {
@@ -618,29 +666,16 @@ export class N8nSidecar {
                 resolve();
                 return;
             }
-            let settled = false;
+            if (this.stopping) {
+                resolve();
+                return;
+            }
             const settle = () => {
-                if (settled)
-                    return;
-                settled = true;
                 child.removeListener("exit", onExit);
-                this.deps.clearTimer(timer);
                 resolve();
             };
             const onExit = () => settle();
             child.once("exit", onExit);
-            const timer = this.deps.setTimer(() => {
-                if (settled)
-                    return;
-                logger.warn(`[n8n-sidecar] child did not exit within ${CHILD_EXIT_WAIT_TIMEOUT_MS}ms; forcing kill`);
-                try {
-                    child.kill("SIGKILL");
-                }
-                catch {
-                    /* no-op */
-                }
-                settle();
-            }, CHILD_EXIT_WAIT_TIMEOUT_MS);
         });
     }
     killChild() {
@@ -679,13 +714,15 @@ export class N8nSidecar {
         while (Date.now() < deadline) {
             if (this.stopping)
                 return false;
-            // If the child died mid-probe, keep polling is pointless — the port
-            // will never open. Fail fast so the supervisor surfaces the error and
-            // kicks off the next retry (with captured stderr in recentOutput).
-            // Uses `typeof === "number"` rather than `!== null` so this tolerates
-            // test fakes whose exitCode is undefined while still running.
+            // If the child died mid-probe AND left no zombie descendants, keep
+            // polling is pointless. We only fail fast on a NON-ZERO exit code —
+            // npx itself cleanly handoffs to n8n and its own exit code is 0 in
+            // some spawn topologies (bun's child_process.spawn in particular),
+            // so a 0 here is not a real failure.
             const child = this.child;
-            if (child && typeof child.exitCode === "number") {
+            if (child &&
+                typeof child.exitCode === "number" &&
+                child.exitCode !== 0) {
                 throw new Error(`n8n child exited with code ${child.exitCode} before readiness probe succeeded`);
             }
             try {
@@ -754,12 +791,19 @@ export class N8nSidecar {
         }
     }
     /**
-     * Validate a cached API key by listing keys through n8n's public API.
-     * A 2xx means the key is still live; 401/403 means it was revoked.
+     * Validate a cached API key by calling the public REST API that accepts
+     * the X-N8N-API-KEY header. A 2xx means the key is still live; 401/403
+     * means it was revoked.
+     *
+     * Important: /rest/api-keys is the internal endpoint that requires the
+     * JWT cookie and will always 401 for an X-N8N-API-KEY regardless of
+     * whether the key itself is valid. Using /api/v1/workflows instead —
+     * the same endpoint the proxy hits, so "valid for probe" = "valid for
+     * real traffic".
      */
     async validateApiKey(host, key) {
         try {
-            const res = await this.deps.fetch(`${host}/rest/api-keys`, {
+            const res = await this.deps.fetch(`${host}/api/v1/workflows?limit=1`, {
                 method: "GET",
                 headers: { "X-N8N-API-KEY": key },
                 signal: AbortSignal.timeout(5_000),
@@ -811,23 +855,33 @@ export class N8nSidecar {
                 log("/rest/api-keys/scopes returned no scopes");
                 return null;
             }
-            const res = await this.deps.fetch(`${host}/rest/api-keys`, {
+            const label = "milady-sidecar";
+            const createKey = async () => this.deps.fetch(`${host}/rest/api-keys`, {
                 method: "POST",
-                headers: {
-                    "content-type": "application/json",
-                    cookie,
-                },
-                body: JSON.stringify({
-                    label: "milady-sidecar",
-                    scopes,
-                    expiresAt: null,
-                }),
+                headers: { "content-type": "application/json", cookie },
+                body: JSON.stringify({ label, scopes, expiresAt: null }),
                 signal: AbortSignal.timeout(5_000),
             });
+            let res = await createKey();
             if (!res.ok) {
+                // 500 "There is already an entry with this name" means a prior
+                // provisioning run created the label but we lost the rawApiKey
+                // (n8n only returns it at creation time). Drop the stale row and
+                // re-create so the caller gets a usable key instead of null.
                 const bodyText = await res.text().catch(() => "");
-                log(`api-key create failed: ${res.status} ${res.statusText}${bodyText ? ` — ${bodyText.slice(0, 200)}` : ""}`);
-                return null;
+                if (res.status === 500 &&
+                    /already\s+an?\s+entry\s+with\s+this\s+name/i.test(bodyText)) {
+                    log("api-key label already exists in n8n — deleting and re-creating");
+                    const deleted = await this.deleteApiKeysByLabel(host, cookie, label);
+                    if (deleted > 0) {
+                        res = await createKey();
+                    }
+                }
+                if (!res.ok) {
+                    const finalBody = bodyText || (await res.text().catch(() => ""));
+                    log(`api-key create failed: ${res.status} ${res.statusText}${finalBody ? ` — ${finalBody.slice(0, 200)}` : ""}`);
+                    return null;
+                }
             }
             const body = (await res.json());
             const key = body.data?.rawApiKey ??
@@ -967,6 +1021,42 @@ export class N8nSidecar {
             return null;
         }
     }
+    /**
+     * Delete every api-key row with a matching label. Used to recover from the
+     * "already exists" case when a previous provisioning run created the label
+     * but lost the `rawApiKey` (n8n only returns the raw key at creation time,
+     * so a partially-persisted state wedges the next boot unless we can delete
+     * and re-create). Returns the number of rows deleted.
+     */
+    async deleteApiKeysByLabel(host, cookie, label) {
+        try {
+            const listRes = await this.deps.fetch(`${host}/rest/api-keys`, {
+                method: "GET",
+                headers: { cookie },
+                signal: AbortSignal.timeout(5_000),
+            });
+            if (!listRes.ok)
+                return 0;
+            const body = (await listRes.json());
+            const matches = (body.data ?? []).filter((row) => typeof row.id === "string" &&
+                typeof row.label === "string" &&
+                row.label === label);
+            let deleted = 0;
+            for (const row of matches) {
+                const delRes = await this.deps.fetch(`${host}/rest/api-keys/${encodeURIComponent(row.id)}`, {
+                    method: "DELETE",
+                    headers: { cookie },
+                    signal: AbortSignal.timeout(5_000),
+                });
+                if (delRes.ok)
+                    deleted += 1;
+            }
+            return deleted;
+        }
+        catch {
+            return 0;
+        }
+    }
     /** 48 bytes of base64url entropy — ~64 chars, far above n8n's min length. */
     generateRandomPassword() {
         // crypto is Node 20+ global; fallback to Math.random if unavailable is