Added
- n8n Assistant sandbox - New optional
n8n-sandboxprofile that adds n8n's own code-execution sandbox (sandbox-certs,sandbox-api,sandbox-runner-1from n8n-sandbox-service) so the built-in AI Assistant works on self-hosted n8n (and the Agents preview, except its knowledge base, which needs Daytona); until now the Instance AI settings page showedCode sandbox: Not set. The installer wiresN8N_INSTANCE_AI_SANDBOX_ENABLED, the sandbox URL and key into n8n, generates the three shared secrets, and pointsN8N_INSTANCE_AI_SEARXNG_URLat the bundled SearXNG while that profile is active; the model API key is added in the n8n UI (Settings → Instance AI). The Docker-in-Docker runner is isolated with Sysbox:scripts/setup_sysbox.shinstallssysbox-cenon-interactively without restarting Docker (it pre-seedsbip/default-address-poolsindaemon.jsonwith Docker's current values) and the runner getsruntime: sysbox-runc. When Sysbox cannot be installed the installer asks before falling back to a privileged runner, records the choice inN8N_SANDBOX_RUNNER_RUNTIME/N8N_SANDBOX_RUNNER_PRIVILEGED, andmake doctorwarns while the runner is privileged.N8N_ENABLED_MODULESis exposed (empty by default) for the Agents preview. (#114)
Upgrade with make update.