n8n/packages/@n8n/instance-ai/evaluations

Workflow evaluation framework

Tests whether workflows built by Instance AI actually work by executing them with LLM-generated mock HTTP responses. No real credentials or external services are involved.

Five harnesses live here:

• eval:instance-ai — end-to-end build + mocked execution + LLM verification (drives a running n8n instance)
• eval:subagent — legacy command name for the workflow-build compatibility corpus; it drives the live orchestrator/skill build path, scored by binary checks
• eval:discovery — orchestrator in-process, scored against required or forbidden tool/dispatch events (no n8n server)
• eval:pairwise — live orchestrator workflow builds, scored by an LLM judge panel against do/don't lists. Intended for head-to-head comparison with ai-workflow-builder.ee on the same dataset
• eval:computer-use — grades the computer-use agent (file / OAuth / doc-reading tasks) against fixtures; see computer-use/README.md

Writing a test case? This README is the reference and quick-start. The step-by-step how — the four case archetypes (build / behaviour / credential / seeded), right-sizing assertions, director-note scripts for multi-turn cases, seeding vs synthetic, and running/lanes/baselines — lives in the create-instance-ai-eval skill. To source cases from real failures, see sourcing from LangTracer + LangSmith.

Sections:

• Running e2e + workflow-build evals
• Regression detection
• Running evals against pre-built workflows
• Running discovery evals
• Running pairwise evals
• How the e2e harness works
• How the workflow-build harness works

Running evals

Each run:

1. Build — the test case prompt goes to Instance AI, which builds a workflow.
2. Phase 1 — the server analyzes the workflow and generates consistent mock data hints (one Sonnet call per scenario).
3. Phase 2 — the workflow executes with every HTTP request intercepted and answered by an LLM using the node's configuration and API docs from Context7.
4. Verify — an LLM evaluates whether the scenario's success criteria were met and categorizes any failure by root cause (see Failure categories).

What gets mocked

• Mocked nodes — anything that makes HTTP requests (Gmail, Slack, Google Sheets, HTTP Request, Notion…). The request is intercepted before it leaves the process; an LLM generates the response.
• Pinned nodes — nodes that don't go through the HTTP layer (triggers/webhooks, LangChain/AI nodes, database nodes). They receive LLM-generated pin data.
• Real nodes — logic nodes (Code, Set, Merge, Filter, IF, Switch) execute on the mocked data.

~95% of node types are covered. See Known limitations for the gaps.

Binary / file scenarios

The mock layer synthesizes minimal-valid binary fixtures (PNG, JPEG, GIF, WebP, PDF, ZIP, GZIP, MP3, WAV, OGG/Opus, MP4, SVG, CSV/JSON/HTML/XML plaintext, octet-stream fallback) on every type: "binary" response, so file-download endpoints round-trip through prepareBinaryData with the correct mimeType / fileExtension / fileType. Multipart and raw-binary request bodies are redacted to part metadata (name, filename, contentType, size) before the LLM prompt so uploads never crash on JSON-serializing raw bytes. The LLM picks type: "binary" and the MIME, and the mock layer fills in the bytes.

Common upload flows (webhook → file upload to Slack/Telegram/S3) are also covered on the input side: the trigger pin data automatically includes a binary map when a downstream node references $binary.<key> or is a known binary consumer (Extract from File, Read Binary File, LangChain document loader).

Quick start

You need an n8n instance running with Instance AI enabled, a seeded owner account, and an Anthropic API key. Two paths:

Local (pnpm dev:ai)

pnpm dev:ai runs watch mode across n8n, n8n-core, and @n8n/n8n-nodes-langchain in parallel — the set you need when iterating on Instance AI or the eval framework.

1. Create .env.local at the repo root with at minimum:

   N8N_INSTANCE_AI_MODEL=openai/gpt-5.5
   OPENAI_API_KEY=sk-proj-...
   N8N_EVAL_EMAIL=nathan@n8n.io
   N8N_EVAL_PASSWORD=PlaywrightTest123
   # Optional — see "Environment variables" for the full list
   LANGSMITH_API_KEY=...
   CONTEXT7_API_KEY=...
   

2. Start the instance:

   dotenvx run -f .env.local -- pnpm dev:ai
   

3. Create the owner account. First time only: open http://localhost:5678, sign up with the email/password from your .env.local. If you'd rather reset to a known state (useful after deleting the DB or between iterations), start the server with E2E_TESTS=true and curl the reset endpoint:

   E2E_TESTS=true dotenvx run -f .env.local -- pnpm dev:ai
   # then in another shell:
   curl -sf -X POST http://localhost:5678/rest/e2e/reset \
     -H "Content-Type: application/json" \
     -d '{"owner":{"email":"nathan@n8n.io","password":"PlaywrightTest123","firstName":"Eval","lastName":"Owner"},"admin":{"email":"admin@n8n.io","password":"PlaywrightTest123","firstName":"Admin","lastName":"User"},"members":[],"chat":{"email":"chat@n8n.io","password":"PlaywrightTest123","firstName":"Chat","lastName":"User"}}'
   

4. Run evals from packages/@n8n/instance-ai/:

   dotenvx run -f ../../../.env.local -- pnpm eval:instance-ai --filter contact-form --verbose
   

Docker

Useful when you don't want a live watch process — e.g. reproducing a CI failure. The container starts empty, so owner creation is part of the flow:

# Build the image
INCLUDE_TEST_CONTROLLER=true pnpm build:docker

# Start a container (E2E_TESTS=true exposes /rest/e2e/reset)
docker run -d --name n8n-eval \
  -e E2E_TESTS=true \
  -e N8N_ENABLED_MODULES=instance-ai \
  -e N8N_AI_ENABLED=true \
  -e N8N_INSTANCE_AI_MODEL_API_KEY=your-key \
  -p 5678:5678 \
  n8nio/n8n:local

# Seed the owner
curl -sf -X POST http://localhost:5678/rest/e2e/reset -H "Content-Type: application/json" -d '{"owner":{"email":"nathan@n8n.io","password":"PlaywrightTest123","firstName":"Eval","lastName":"Owner"},"admin":{"email":"admin@n8n.io","password":"PlaywrightTest123","firstName":"Admin","lastName":"User"},"members":[],"chat":{"email":"chat@n8n.io","password":"PlaywrightTest123","firstName":"Chat","lastName":"User"}}'

# Run evals against it
pnpm eval:instance-ai --base-url http://localhost:5678 --verbose

CLI reference

Invoke from packages/@n8n/instance-ai/:

# All test cases
dotenvx run -f ../../../.env.local -- pnpm eval:instance-ai --verbose

# Single test case (filename substring match)
dotenvx run -f ../../../.env.local -- pnpm eval:instance-ai --filter contact-form --verbose

# Keep built workflows for inspection after the run. With --keep-workflows,
# each scenario's persisted canvas execution is reachable via the
# "view in n8n" link in the HTML report.
dotenvx run -f ../../../.env.local -- pnpm eval:instance-ai --filter contact-form --keep-workflows

# Multi-iteration for pass@k / pass^k metrics
dotenvx run -f ../../../.env.local -- pnpm eval:instance-ai --iterations 3

Flags

Flag	Default	Description
--verbose	false	Log build/execute/verify timing and SSE events
--filter	—	Filter test cases by filename substring. Comma-separated values mean OR (e.g. contact-form,deduplication)
--exclude	—	Skip test cases whose filename matches any of the substrings. Same comma-separated shape as --filter; applied after --filter
--prebuilt-workflows	—	Path to a JSON manifest mapping test-case slugs to existing workflow IDs. Skips the orchestrator build for matched test cases — see Running evals against pre-built workflows
--keep-workflows	false	Don't delete built workflows after the run. Pair with the HTML report's "view in n8n" links to inspect each scenario's canvas execution
--delete-prebuilt-workflows	false	With --prebuilt-workflows, delete successfully used manifest workflows after the eval run. Mutually exclusive with --keep-workflows
--base-url	http://localhost:5678	n8n instance URL
--email	E2E test owner	Override login email (or N8N_EVAL_EMAIL)
--password	E2E test owner	Override login password (or N8N_EVAL_PASSWORD)
--timeout-ms	900000	Per-test-case timeout
--output-dir	cwd	Where to write eval-results.json
--dataset	instance-ai-workflow-evals	LangSmith dataset name. Synced from the JSON test cases (honoring --filter/--exclude/--tier) before each run — point an isolated cohort (e.g. MCP) at its own dataset to avoid writing to the shared one
--baseline-prefix	instance-ai-baseline-	Experiment-name prefix the regression comparison uses to find the baseline. Override (e.g. mcp-baseline-) so a cohort compares against its own baselines instead of the Instance AI one
--concurrency	16	Max concurrent scenarios (builds are separately capped at 4)
--experiment-name	auto	LangSmith experiment prefix (defaults to {branch}-{sha} in CI or local-{branch}-{sha}-dirty? locally)
--iterations	1	Run each test case N times with fresh builds
--tier	—	Filter to test cases whose datasets array contains this value (e.g. --tier pr for the PR-time set). Combines with --filter/--exclude.
--source	disk	Where test cases come from. disk (default) reads data/workflows/; langtracer pulls a suite from LangTracer's REST API — see Sourcing from LangTracer
--suite	—	LangTracer suite slug (or numeric id) to pull when --source langtracer (required in that mode)
--build-via-mcp	false	Build each workflow by driving the lane's MCP server with claude -p, then verify it on that same lane — see Building via MCP (--build-via-mcp). Works across multiple --base-url lanes; requires LANGSMITH_API_KEY; mutually exclusive with --prebuilt-workflows
--mcp-server	n8n-local	MCP server name for the staged claude config + tool allowlist (--build-via-mcp)
ANTHROPIC_MODEL (env)	claude-opus-4-8	Anthropic model for the claude MCP build (--build-via-mcp); distinct from the verifier model. Not a flag: it rides claude's native env var, and the CLI pins the default when unset so builds never float with claude-code's bundled default
--build-cwd	—	Working directory for the claude build subprocess (--build-via-mcp); loads that project's Claude config/skills
--build-max-attempts	3	Retries per workflow when claude returns no id (--build-via-mcp)
--build-mcp-timeout-ms	120000	MCP_TIMEOUT passed to the claude build subprocess — bounds one MCP tool call (--build-via-mcp)
--build-timeout-ms	1800000	Wall-clock cap per build attempt; on expiry the claude process is killed so a hung build can't hold its lane. 0 disables. A timed-out build is not retried (--build-via-mcp)

pass@k / pass^k: with --iterations N, each scenario runs N times. pass@k is the fraction of scenarios that passed at least once; pass^k is the fraction that passed every time. pass@k shows whether something is possible; pass^k shows whether it's reliable.

Test-case datasets (logical groupings)

Each test case declares a datasets array in its JSON (default ["full"] if omitted). The value identifies one or more logical groupings the case belongs to. Two named groupings exist today:

Value	What it means
full	Default — every case runs in this grouping. Use for nightly / full-suite runs.
pr	Curated thin set for PR-time runs. ~6 cases, chosen for capability diversity and high baseline reliability.

A case can belong to multiple groupings — e.g. PR-tier cases declare "datasets": ["pr", "full"] so they run in both contexts. On sync, each value is propagated to the LangSmith example as a split alongside the file slug, so --tier <name> translates to a server-side splits filter.

Adding a case to pr: edit the case's JSON, add "pr" to its datasets array, re-sync. No promotion process is enforced today — use judgment about reliability + capability coverage when curating.

Sourcing test cases from LangTracer

By default the runner reads the JSON cases in data/workflows/ (disk). Pass --source langtracer --suite <slug> to instead pull a suite from LangTracer over its REST API (GET /api/v1/suites/:id/export), validated through the same WorkflowTestCaseSchema. Disk stays the default, so existing local runs and CI (which never pass --source) are unaffected.

Set these in .env.local:

Var	What
LANGTRACER_URL	LangTracer base URL (the API base is ${LANGTRACER_URL}/api/v1)
LANGTRACER_API_KEY	Bearer key (lt_…), minted in LangTracer's API-keys UI (one key works for MCP + REST)

dotenvx run -f ../../../.env.local -- pnpm eval:instance-ai \
  --source langtracer --suite n8n-workflows --base-url http://localhost:5678

In langtracer mode, --dataset / --baseline-prefix default to a suite-scoped, eval-tagged name (instance-ai-langtracer-<suite>) so runs don't touch the shared instance-ai-workflow-evals cohort and re-runs of a suite upsert one stable dataset. --filter / --exclude / --tier still narrow within the suite. The MCP manifest builder (eval:build-mcp-manifest) accepts the same --source langtracer --suite flags.

Outputs

Every run produces:

• Console — live progress, per-scenario pass/fail with [failure_category] tag, and a grouped summary.
• eval-results.json — structured results in --output-dir (or cwd). Consumed by the CI PR comment.
• .data/workflow-eval-report.html — self-contained debugging view with a green/red stage review for prompt, planner, builder, and verifier behavior, generalized prompt-improvement suggestions for failures, per-node execution traces, intercepted requests, mock responses, Phase 1 hints, verifier reasoning, and the per-built-workflow check rubric (see below).
• LangSmith experiment — only when LANGSMITH_API_KEY is set. See the caveat in Environment variables.

Workflow checks (per built workflow)

After every successful build, the eval grades the workflow JSON against the binary-check rubric in binaryChecks/checks/. Each named check is yes/no with a structured N/A for "no subject to evaluate in this workflow" (e.g. an agent-only check on a workflow with no agent).

The 28 checks are grouped into 7 WHAT-side rubric dimensions (the 8th, execution_outcome, is served by the existing execution verifier):

Dimension	Checks
structure	4 — workflow shape (nodes, triggers, start)
connection_topology	4 — graph reachability, branch wiring, multi-item handling
parameter_correctness	8 — node config, expressions, field references
intent_match	1 — workflow fulfills the user's request
ai_nodes	6 — agent / memory / vector-store / tool wiring
nodes_craftsmanship	3 — naming, no-code preference, response honesty
security	2 — hardcoded credentials, inbound auth defaults

The signal surfaces in:

• HTML report — a "Workflow checks" disclosure on each test case, grouped by dimension. Pass / fail / N/A counts per group and per-check rows.
• PR comment / eval-results.json — a "Workflow checks" table with pass / fail / N/A counts and pass rate per check, sorted by dimension, aggregated across every successful build in the run.
• LangSmith Feedback — one evals.workflows.<dimension>.<check_name> Feedback per non-N/A outcome per scenario row (score 1 for pass, 0 for fail). N/A is omitted so per-experiment column averages reduce to per-check pass-rate cleanly. The dotted key sorts naturally in LangSmith's column UI.

Operational details:

• Checks run once per built workflow, not per scenario — every scenario row in LangSmith carries the same outcomes for its build.
• Failures don't flip scenario_pass; they're independent signals per the rubric design.
• LLM checks (fulfills_user_request, valid_data_flow, correct_node_operations, handles_multiple_items, descriptive_node_names, response_matches_workflow_changes) reuse the same Sonnet model as the verifier — auto-skipped (N/A) when no Anthropic key is set.

Build expectations (per test case)

A test case can declare optional natural-language assertions, split by what they judge:

• processExpectations: string[] — about how the build went (clarifications asked, push-back, ordering). Judged from the conversation transcript (plus the workflow and conversation metrics). They require a transcript, so they are skipped in prebuilt/MCP runs. e.g. "Before building, the agent asked which Slack channel to use."
• outcomeExpectations: string[] — about the resulting workflow. Judged from the workflow JSON, so they also run in prebuilt/MCP runs (which have no transcript). e.g. "The final workflow splits the records envelope before posting."

Both are graded by the same Sonnet judge (build-expectations/verifier.ts) and count as units in the pass rate: evaluated expectations fold into the per-case and headline pass@k/pass^k alongside execution scenarios. They don't flip an individual scenario's pass/fail (each is its own unit), and a judge incomplete verdict is excluded from the count. A full build judges the union of both fields against the transcript; a prebuilt build judges only outcomeExpectations against the workflow. A case may omit executionScenarios entirely — a build-only case — and is then graded by these expectations plus the always-on workflow checks.

Use them for things the binary checks and successCriteria don't cover:

"processExpectations": [
  "Before building, the agent asked which Airtable table and which Slack channel to use."
],
"outcomeExpectations": [
  "The agent honored the user's instruction to fetch via an HTTP Request node, not the Airtable node."
]

The signal surfaces in:

• HTML report — a "Build expectations" disclosure on the test case: per-expectation ✓/✗ with a one-line judge reason.
• eval-results.json — buildExpectations (aggregated per-expectation pass rate across both fields) plus buildExpectationResultsPerRun (per-iteration verdicts).

Operational details:

• Judged once per build (not per scenario), fired concurrently with the scenario batch — ~0 added wall-clock in the common case.
• Runs on both eval paths (direct loop + LangSmith). processExpectations need a transcript (judged even when the build fails, skipped only when no transcript was captured); outcomeExpectations are judged from the workflow, including in prebuilt/MCP runs.
• The judge retries on failure, has a per-attempt timeout, and falls back to an all-fail verdict — a judge failure can't break a run.
• Absent both fields, it's a complete no-op.

Environment variables

Variable	Required	Description
N8N_INSTANCE_AI_MODEL	Yes	Model used by Instance AI and, by default, the eval helper calls for mock generation and verification
N8N_INSTANCE_AI_MODEL_API_KEY	No	Generic eval-model API key override
OPENAI_API_KEY	No	Provider-specific key used automatically when N8N_INSTANCE_AI_MODEL starts with openai/
ANTHROPIC_API_KEY	No	Provider-specific key used automatically when N8N_INSTANCE_AI_MODEL starts with anthropic/
N8N_EVAL_EMAIL	No	n8n login email (defaults to E2E test owner)
N8N_EVAL_PASSWORD	No	n8n login password (defaults to E2E test owner)
LANGSMITH_API_KEY	No	Enables experiment tracking + tracing. See caveat below.
LANGSMITH_ENDPOINT	No	Region (https://api.smith.langchain.com US, https://eu.api.smith.langchain.com EU)
LANGSMITH_REVISION_ID	No	Commit SHA to tag the experiment with (auto-set in CI)
LANGSMITH_BRANCH	No	Branch name to tag the experiment with (auto-set in CI)
CONTEXT7_API_KEY	No	Context7 key for API-doc lookups. Improves mock realism for less-common services; the LLM falls back to training data when unset
N8N_AI_ASSISTANT_BASE_URL	No	Set to "" to bypass the hosted AI proxy and hit Anthropic directly — useful to avoid per-tenant quota during large batch runs
N8N_INSTANCE_AI_RUN_DEBUG_ENABLED	No	Set to true on the target n8n instance to capture orchestrator LLM steps and workflow code for the eval LLM debug report (workflow-eval-llm-debug.html). Off by default.

LangSmith caveat: if LANGSMITH_API_KEY is set in .env.local, local runs also land in the shared instance-ai-workflow-evals dataset. Unset it (or run without dotenvx) to keep exploratory runs out of team results.

Regression detection

When LANGSMITH_API_KEY is set, every eval run automatically compares its results against the most recent pinned baseline (any experiment whose name starts with instance-ai-baseline-). Two output files are written:

• eval-results.json — structured data only, including comparison.result when a baseline was found.
• eval-pr-comment.md — the full PR comment rendered as markdown, including the alert, aggregate, comparison sections, per-test-case results, and failure details. Always written; falls back to a no-baseline summary when no comparison ran.

The CI PR-comment step uses eval-pr-comment.md as the entire comment body (no jq assembly in the workflow). The console output uses a separate aligned-text formatter — same data, no markdown noise in the terminal.

Re-running on a PR

Evals auto-run when a PR is opened / reopened / marked ready (path-filtered), but not on new pushes — synchronize is intentionally off (full runs are expensive). To exercise the latest push, re-run against the PR head on demand:

gh workflow run ci-instance-ai-evals.yml -f pr=<number>

…or use the Run workflow button on the Instance AI Evals: PR Gate workflow and set pr=<number>. A resolve job looks up the PR's current head at dispatch time (preferring the merge ref when it reflects the latest push, so it tests the merged state like a PR-open run; otherwise it uses the head), runs the eval against it, and posts results back to the PR. A dispatched run rebuilds the docker image either way — the prebuilt image cache is scoped to refs/pull/<n>/merge, which a dispatch can't restore. GitHub's built-in "Re-run jobs" instead replays the original PR-open commit, so use the dispatch above. Each eval PR comment also embeds this gh workflow run -f pr=<n> line.

Refreshing the baseline

There is no auto-refresh — refresh explicitly when you want a new reference point, ideally with high N for low noise:

# From packages/@n8n/instance-ai/, on master at the version you want to pin
LANGSMITH_API_KEY=... dotenvx run -f ../../../.env.local -- \
  pnpm eval:instance-ai --experiment-name instance-ai-baseline --iterations 10

LangSmith appends a random suffix (e.g. instance-ai-baseline-7abc1234); the most recently started one becomes the comparison target on the next eval run. The comparison is silently skipped on the baseline-creation run itself.

How scenarios are tiered

Each scenario lands in one of three regression tiers, evaluated in order of strictness:

• Regression — high-confidence flag, gating-grade. The drop must be statistically significant (chance of seeing it by noise < 5%), at least 30 percentage points in size, and the baseline must have been reliable (≥ 70% pass rate).
• Likely regression — looser bar for visibility on borderline cases. Looser confidence threshold (chance by noise < 20%), drop ≥ 15 percentage points, baseline ≥ 50%. Frequently natural variance — worth a glance only if your changes touch related code paths.
• Worth watching — any scenario whose pass rate moved by ≥ 35 percentage points but wasn't flagged as a regression (hard or likely tier). Pure visibility, no implication of cause.

Other verdicts: improvement (PR significantly better, skips the reliability gate), unreliable_baseline (confident drop but baseline was too flaky to call a regression — surfaced but not flagged), stable, insufficient_data.

Why these tiers and not a flat percentage threshold? At the small N PR runs use (typically 3 iterations), a flat threshold can't tell a real regression from coin-flip noise. The confidence cutoff filters out gaps that could plausibly happen by chance, and the reliability gate avoids chasing noise on already-flaky scenarios. Implementation lives in comparison/statistics.ts (Fisher's exact test for the confidence check, Wilson interval for the headline aggregate band). Tune the likely-regression tier first if the false-positive rate looks off — keep the hard tier strict.

Failure-category drift

When both sides captured per-trial failureCategory values, the comparison also surfaces a run-level table of category rates (PR vs baseline). A category is marked notable when its absolute rate delta is ≥ 5 percentage points and the count change beyond what scenario-count scaling would predict is ≥ 3 trials. This catches cross-scenario shifts (e.g. mock-generation breaking, or a model getting weaker overall) that per-scenario flags can miss.

Best-effort

Comparison is logged and skipped on any LangSmith failure — it never fails the eval. It is also skipped when no baseline experiment exists yet.

Running evals against pre-built workflows

The eval framework normally builds each workflow with Instance AI and then verifies it. With --prebuilt-workflows <path>, the build step is skipped for matched test cases — the harness fetches the existing workflow from the n8n instance and runs verification against it instead. Use this to score workflows authored by other tools (an MCP-driven session, a hand-built reference, an older Instance AI snapshot) on the same dataset and the same verifier.

The manifest is a JSON file mapping test-case file slugs to workflow IDs:

{
  "contact-form-automation": ["W1abc", "W2def", "W3ghi"],
  "deduplication-trigger": ["W4jkl"]
}

• Keys are test-case file slugs — the JSON filename without .json (e.g. contact-form-automation for evaluations/data/workflows/contact-form-automation.json). The --filter flag uses the same identifier.
• Values are arrays of workflow IDs that already exist in the target n8n instance. Multiple iterations rotate through the list with iteration % ids.length, so an --iterations 5 run with 5 IDs gets 5 distinct builds.

Test cases not present in the manifest fall back to the regular Instance AI build path. To run only the prebuilt set, pair with --exclude to skip the rest, or --filter to narrow the run.

# Score the prebuilt cohort, skipping anything not in the manifest
dotenvx run -f ../../../.env.local -- pnpm eval:instance-ai \
  --prebuilt-workflows ./mcp-manifest.json \
  --filter contact-form-automation,deduplication-trigger \
  --iterations 5 \
  --experiment-name mcp-cohort

The harness leaves prebuilt workflows alone after the run (no auto-delete), so the manifest can be re-used across multiple eval runs. If the workflows were created only for this eval cohort, pass --delete-prebuilt-workflows with --prebuilt-workflows to delete every successfully used manifest workflow once after the run. This is destructive: the manifest will still contain the deleted IDs and should not be re-used afterward.

Producing a manifest

pnpm eval:build-mcp-manifest (evaluations/cli/build-mcp-manifest.ts) drives claude -p against an MCP server — defaults to n8n's instance MCP — and writes a manifest in the schema this flag expects, plus a manifest-stats.json sidecar with per-cohort cost / turn / duration aggregates. The output is validated against the same Zod schema the loader uses, so shape regressions surface here rather than at eval time.

Prerequisites: claude CLI installed; ~/.claude.json has the MCP server block configured (project-scoped under .projects[<repo-root>].mcpServers[<name>] or globally under .mcpServers[<name>]); n8n instance reachable at the URL the MCP block points at. Default MCP server name is "n8n-mcp (instance)" — override with --mcp-server.

# Build N=5 per test case, 4 in parallel
pnpm eval:build-mcp-manifest -n 5 -j 4 --output-dir ./mcp-cohort

# Then score the cohort
dotenvx run -f ../../../.env.local -- pnpm eval:instance-ai \
  --prebuilt-workflows ./mcp-cohort/manifest.json \
  --iterations 5 \
  --experiment-name mcp-cohort

For runs that need to leave the n8n repo (for example, driving the build from a separate Claude project where you have skills configured), three flags decouple the script from its default assumptions:

• --workflow-dir <path> — read test-case JSONs from a directory other than the n8n repo's evaluations/data/workflows/. When set, the script no longer needs git rev-parse to find the repo.
• --build-cwd <path> — set the working directory the claude subprocess spawns from. Affects which ~/.claude.json projects entry (and which skills) Claude loads.
• --project-id <id> — instructs the model to pass projectId to create_workflow_from_code so workflows land in a specific n8n project instead of the user's personal one.

Run pnpm eval:build-mcp-manifest --help for the full flag list.

Building via MCP (--build-via-mcp)

--build-via-mcp folds the MCP build into the eval run: instead of the two-phase eval:build-mcp-manifest → --prebuilt-workflows flow, one eval:instance-ai process builds each workflow by driving a lane's own MCP server with claude -p, then verifies it on that same lane. This is the recommended way to run the mcp tier — one process means one LangSmith experiment (no manifest hop, no shard/merge step), and the work-stealing allocator spreads builds across lanes (capped per-lane), so N lanes parallelize the whole build+verify pipeline.

How it differs from the manifest flow:

• No manifest. Each (slug, iteration) is built on demand and verified in place, so every iteration gets a genuinely fresh build (clean pass@k/pass^k variance) instead of rotating a fixed list of prebuilt IDs.
• Multi-lane. Unlike --prebuilt-workflows (single instance), --build-via-mcp accepts a comma-separated --base-url. Each lane enables MCP, mints its own API key, and stages its own claude MCP config — the CLI does this setup for you.
• Throwaway cleanup. Built workflows are deleted after the run unless you pass --keep-workflows. Known limitation: cleanup keys off the WORKFLOW_ID trailer claude prints, so a build that times out or never emits the trailer can leave its workflow behind on the lane even though cleanup is on.

Prerequisites: LANGSMITH_API_KEY set — MCP builds only run on the LangSmith path, whose lane allocator caps builds at 4 per lane globally (the keyless direct loop parallelizes iterations, which would multiply concurrent claude sessions by the iteration count). Plus the claude CLI installed and authenticated (the build subprocess reads ANTHROPIC_API_KEY; set ANTHROPIC_MODEL to pick the build model, defaulting to claude-opus-4-8 when unset); each lane reachable and seeded with the E2E owner. The MCP module is on by default, so no server-side config is needed beyond a running instance.

Local run against a pool of container lanes (reuses scripts/run-eval-lanes.sh, which starts + seeds the lanes and forwards everything after --):

# 6 lanes; build via MCP + verify the mcp tier, one experiment.
# --concurrency 12 = lanes * 2 (the script's own default is lanes * 4).
./scripts/run-eval-lanes.sh --instance-count 6 --tier mcp --concurrency 12 -- \
  --build-via-mcp \
  --dataset mcp-workflow-evals \
  --baseline-prefix mcp-baseline-

Or point at lanes you started yourself:

dotenvx run -f ../../../.env.local -- pnpm eval:instance-ai \
  --base-url http://localhost:5678,http://localhost:5679 \
  --build-via-mcp \
  --tier mcp \
  --iterations 3 \
  --concurrency 4 \
  --dataset mcp-workflow-evals \
  --baseline-prefix mcp-baseline-

In CI this is what ci-mcp-evals.yml runs (see test-evals-mcp.yml): a single job starts lanes containers and runs one --build-via-mcp process, defaulting --concurrency to lanes * 2. Use the same ratio locally: claude builds, mock generation, and the verifier all draw on one Anthropic budget, and running lanes flat-out at lanes * 4 (each lane's per-lane build cap) starves it, surfacing as verifier/MCP timeouts. Treat lanes * 4 as an aggressive upper bound for keys with rate-limit headroom, not the starting point.

Discovery evals

Discovery evals run the orchestrator in-process and assert first-hop tool or sub-agent routing from captured tool-call, tool-result, tool-error, and agent-spawned events. Use them when a regression is about which path the agent chooses, not whether a generated workflow executes.

To inspect runtime skill loading, run a focused verbose pass:

pnpm eval:discovery --filter data-table-skill-loading --trials 3 --verbose --fail-on-zero-pass

Verbose output lists each trial's completed tool calls with argument previews. For data-table routing, look for load_skill(skillId="data-table-manager") and data-tables(action="list"), and verify there are no planning, workflow-builder, or delegate entries in the spawned-agent section.

Pairwise evals

Pairwise evals score a built workflow against the dataset's dos / donts criteria using an LLM judge panel (3 judges by default, majority vote on pairwise_primary, mean fraction of criteria satisfied on pairwise_diagnostic). The point is head-to-head comparison with ai-workflow-builder.ee on the same dataset (default instance-ai-builder-from-plans), so the judge panel, defaults, and metric keys are imported from that package directly.

Pairwise drives the same live orchestrator chat/build path as the workflow-build evals, then scores the captured workflow with the pairwise judge panel.

Quick start

# From packages/@n8n/instance-ai/

# 1. Small LangSmith smoke set against a running n8n instance
LANGSMITH_API_KEY=... N8N_AI_ANTHROPIC_KEY="$ANTHROPIC_API_KEY" \
  pnpm eval:pairwise --judges 1 --max-examples 3

# 2. Full LangSmith dataset
LANGSMITH_API_KEY=... N8N_AI_ANTHROPIC_KEY="$ANTHROPIC_API_KEY" \
  pnpm eval:pairwise --judges 3

# 3. Rerun a specific subset (one example ID per line; #-prefixed lines ignored)
pnpm eval:pairwise \
  --example-ids-file .output/pairwise/failed-ids.txt \
  --output-dir .output/pairwise/rerun

Target instance

Pairwise evals require a running n8n instance with the eval login environment configured. The CLI talks to N8N_EVAL_BASE_URL or http://localhost:5678 by default.

N8N_EVAL_BASE_URL=http://localhost:5678
N8N_EVAL_EMAIL=user@example.com
N8N_EVAL_PASSWORD=...
LANGSMITH_API_KEY=ls__...
N8N_AI_ANTHROPIC_KEY=sk-ant-... # or ANTHROPIC_API_KEY for the judge LLM

Flags

Flag	Default	Description
--dataset	instance-ai-builder-from-plans	LangSmith dataset name
--examples-jsonl	—	Load examples from a previous results.jsonl instead of LangSmith
--judges	3	Number of judges in the LLM panel
--judge-model	claude-sonnet-4-5-20250929	LangChain model id for the judge LLM
--iterations	1	Run each example N times — for measuring judge / build variance
--concurrency	5	Parallel example workers (p-limit)
--max-examples	—	Cap dataset to first N examples
--example-ids-file	—	Path to a text file of LangSmith example IDs (one per line). Used for rerunning a subset
--timeout-ms	1200000	Per-example build timeout
--output-dir	.output/pairwise/<iso>	Where to write artifacts
--experiment-name	pairwise-evals-instance-ai	LangSmith experiment label
--base-url	N8N_EVAL_BASE_URL or http://localhost:5678	n8n instance URL
--keep-workflows	false	Keep generated workflows instead of deleting them after scoring
--verbose	false	Per-example log lines

Outputs

Each run writes a self-contained directory:

.output/pairwise/<run>/
├── summary.json           # totals: pass rate, avg diagnostic, build failures by class, interactivity counters
├── results.jsonl          # one line per example: prompt, dos/donts, captured workflow, build metadata, feedback rows
└── workflows/<id>.json    # normalized workflow JSON (matches SimpleWorkflow shape from ai-workflow-builder.ee)

Feedback stays in the local output files. Upload to LangSmith is a separate step via scripts/upload-pairwise-to-langsmith.ts.

Build failure classes

Build failures are tracked separately from judge scores:

• build_timeout — exceeded --timeout-ms
• no_workflow_built — agent finished without invoking build-workflow (no captured workflow)
• agent_error — stream errored or the agent threw

A failure produces a row with workflow: null, empty feedback, and the error class — it counts as a primary fail in the comparison report.

Interactivity gates

The agent is stubbed for non-interactive use. The summary tracks divergence from this assumption — investigate any non-zero count:

• askUserCount — ask-user tool was invoked (eval responds with { approved: false })
• planToolCount — create-tasks was invoked (single-prompt dataset shouldn't trigger planning)
• autoApprovedSuspensions — HITL-gated tool fired (e.g., data-tables create); auto-approved
• mockedCredentialTypes — credential types the agent referenced (auto-mocked since credentialService.list() returns [])

Comparison report

After running both ai-workflow-builder.ee/evaluations/cli (the baseline) and eval:pairwise against the same dataset, generate an HTML side-by-side report:

pnpm eval:pairwise:compare \
  --ee-dir   ../ai-workflow-builder.ee/evaluations/.output/pairwise/<ts> \
  --ia-dir   .output/pairwise/<ts> \
  --out      .output/pairwise/comparison.html

The report shows headline metrics, per-prompt verdicts (TIE / IA-only / Code-only / both-pass / both-fail), and lazy-loaded workflow previews — rows collapse by default and only render the heavy <n8n-demo> preview when expanded.

When pairwise scores wobble

Judge non-determinism + agent retry behavior mean a single run is not a reliable signal. Two specific things to know:

• The agent will sometimes retry build-workflow after a parser rejection (e.g., security violation) and sometimes give up. Whether a prompt "fails to build" is non-deterministic across runs.
• If you're comparing two builders to claim a regression or improvement, bump --iterations to ≥3 for both sides.

How the e2e harness works

1. Build — sends the test case prompt to Instance AI, which builds a workflow
2. Phase 1 — analyzes the workflow and generates consistent mock data hints (one Sonnet call per scenario)
3. Phase 2 — executes the workflow with all HTTP requests intercepted. Each request goes to an LLM that generates a realistic API response using the node's configuration and API documentation from Context7
4. Verify — an LLM evaluates whether the scenario's success criteria were met and categorizes any failure by root cause (see Failure categories below)

What gets mocked

• Mocked nodes — any node that makes HTTP requests (Gmail, Slack, Google Sheets, HTTP Request, Notion, etc.). The request is intercepted before it leaves the process. An LLM generates the response.
• Pinned nodes — nodes that don't go through the HTTP layer: trigger/webhook nodes, LangChain/AI nodes (they use SDKs directly), database nodes. These receive LLM-generated data as pin data.
• Real nodes — logic nodes (Code, Set, Merge, Filter, IF, Switch) execute their actual code on the mocked/pinned data.

No real credentials or API connections are needed. ~95% of node types are covered; the main gaps are binary-data nodes (file attachments, image generation) and streaming nodes.

How the workflow-build harness works

1. The CLI logs in to n8n with N8N_EVAL_EMAIL / N8N_EVAL_PASSWORD.
2. For each test case it sends the prompt through the normal Instance AI orchestrator chat flow.
3. The orchestrator loads the workflow-builder skill guidance, uses the live build tools, and saves the workflow through the real workflow service.
4. The CLI reads the built workflow from the orchestrator outcome, scores it with the binary-check suite, and archives+deletes it (unless --keep-workflows).

No tools, services, or workflow imports are mocked. The eval:subagent command name is retained for compatibility, but the runtime path is workflow-build/orchestrator-backed.

LangSmith integration

When LANGSMITH_API_KEY is set, each run is recorded as a LangSmith experiment against the instance-ai-workflow-evals dataset (synced from the JSON files before each run). Experiments against the same dataset can be compared side-by-side to spot regressions.

To record an isolated cohort without touching the shared dataset or baseline — e.g. MCP-built workflows scored via --prebuilt-workflows — pass a dedicated --dataset and --baseline-prefix. The sync then only writes that cohort's cases (filtered by --tier) into its own dataset, and regression comparison only looks for baselines under the given prefix. See the MCP workflow evaluations README.

Adding test cases

Test cases live in evaluations/data/workflows/*.json. Drop a file in — the CLI and LangSmith sync pick it up, no registration step. Every case is validated against data/workflows/schema.ts.

The essentials are below. For the full authoring guide — picking a case archetype, sizing assertions so a wrong build fails, multi-turn director scripts, seeding vs synthetic, and calibrating against a real build — follow the create-instance-ai-eval skill (with case-shapes.md and running-evals.md).

{
  "description": "Optional note on what this case checks.",
  "conversation": [
    { "role": "user", "text": "Every morning, post a summary of yesterday's signups to Slack #growth." }
  ],
  "complexity": "medium",
  "tags": ["build", "schedule", "slack"],
  "triggerType": "schedule",
  "executionScenarios": [
    {
      "name": "happy-path",
      "description": "Normal operation",
      "dataSetup": "The signups source returns 3 rows for yesterday: Ana, Ben, Cara.",
      "successCriteria": "The workflow runs without errors and posts a summary of the 3 signups to Slack #growth."
    }
  ]
}

conversation (≥1 turn, first must be user), plus complexity and tags, are required. executionScenarios, description, triggerType, messageBudget, processExpectations, outcomeExpectations, credentials, and datasets (default ["full"]) are optional — but a case must declare at least one executionScenario, or one process/outcome expectation (a case that asserts nothing is rejected at load). A build-only case omits executionScenarios and is graded by its processExpectations/outcomeExpectations plus the always-on workflow checks: the workflow is still built, only the mock-execution successCriteria pass is skipped. A turn’s text may be a string or an array of strings joined with newlines — handy for long stage directions.

One JSON file = one LangSmith split, named from the filename slug. Pick a slug you're happy to also use as a --filter target.

Conversations & stage directions

conversation replaces the old single prompt; its mode is chosen automatically:

• Single-prompt (auto-approve): one user turn, no assistant turns — the prompt is sent and every confirmation is auto-approved. Use for plain build cases.
• Multi-turn: anything else. A user-proxy LLM plays the user — it answers questions, audits the agent's plan against the script, and sends follow-ups (capped by messageBudget). assistant turns are reference for the proxy (the expected flow); they're never sent to the builder.

Write the turns as a screenplay of what the user wants, keeping concrete values (channel IDs, schedules) verbatim. Inside a user turn, text in [square brackets] is a stage direction for the proxy — behaviour, not dialogue, never spoken to the builder. It overrides the proxy's defaults (e.g. "always answer"):

To make the user…	Direction
Withhold a value until asked	[Don't bring up the channel unless the agent asks where to post; then say 'Slack #growth.']
Refuse and hold firm on re-ask	[The user has no channel and won't provide one. If asked — question or setup card, even repeatedly — skip it; never invent one.]
Keep the conversation going	[After each change lands, send the next one from the list, one at a time, until done.]

A direction governs only what it covers; otherwise the proxy answers every question (inventing plausible placeholders) and never sets credentials. Setup cards (the "configure your workflow" card) are filled via the wizard — or dismissed when a direction withholds the value — not answered as questions.

Prompt / conversation tips

• Be specific about node configuration (IDs, sheet names, channel names). In single-prompt mode the agent won't ask; in multi-turn the proxy supplies or withholds per the script.
• If a built-in node doesn't expose a field you need (e.g. the Linear node doesn't query creator.email), tell the agent to use HTTP Request instead.

Scenario tips

• Don't specify exact counts that depend on mock data ("exactly 7 posts remain"). The LLM is non-deterministic. Say "fewer than the original 10" instead.
• dataSetup steers the mock — describe what each service should return, not the exact JSON.
• For error scenarios, describe the condition: "The Telegram node returns an error indicating the chat was not found."
• successCriteria is what the verifier reads. Be specific: "None of the titles in the Slack message should contain the word 'qui'."

Which scenarios to include

• happy-path — everything works as expected
• Edge cases — empty data, missing fields, single vs multiple items
• Error scenarios only if the workflow is expected to handle them gracefully. Most agent-built workflows don't include error handling, so "the workflow crashes on invalid input" is a legitimate finding, not a test-case failure.

Credentials

By default a build sees no credentials: the harness pins every build thread's credential view to the case's declared set (empty unless declared), so concurrent cases — and whatever happens to live on the instance — can never leak into a build. Every node mocks during verification.

A case that tests credential behaviour declares what should exist:

"credentials": [{ "type": "slackApi" }, { "type": "slackApi" }]

Declared credentials are created for real (placeholder token; set the matching EVAL_*_ACCESS_TOKEN for a live token) before the build, the thread's view is pinned to exactly that set, and they're deleted at the end of the run. Counts matter: exactly one credential of a type is the builder's auto-attach path; two or more force the mock path. name is optional — duplicates get a #2 suffix.

Each type needs a data template in credentials/seeder.ts; declaring an unknown type fails the build with a pointer there.

Seeded cases (conversation pre-seeding)

A seeded case starts mid-conversation: prior history is restored into the build thread before the live turn, so the eval drives only the turn under test. Use it to replicate a real misbehaviour — restore the conversation up to the moment it went wrong, re-drive that turn, and assert what should happen instead.

Pick the lightest path that fits:

Situation	Path
Reproduce a real conversation (the common case)	seedThread — fetch + reconstruct its LangSmith trace at run time; nothing committed
Prelude is just "what was discussed" (no tool calls, no workflows)	priorConversation — prose turns, authored inline
A synthetic/sanitized fixture you want durable	seedFile — a committed seed JSON (no real conversation data)
Shallow 2–3 turn prelude where the agent's live replies matter	Neither — a plain multi-turn conversation script re-drives it live

seedThread — reproduce a real conversation (no repo content)

The case carries only a thread id. At run time the harness pulls that thread's runs from LangSmith, reconstructs the message log (user/assistant text + resolved tool-call blocks, deduped across suspend/resume), and splits at the last user message: everything before it is restored as the seed, that last message is sent live. The seed workflow is compiled from the build/patch tool's captured SDK code as of the seed boundary, so it matches what the live turn first saw.

"seedThread": { "threadId": "<thread-id>", "project": "instance-ai" }

No conversation field needed — the live turn comes from the trace. project is optional (defaults to instance-ai). No conversation content lands in the repo — only the opaque thread id.

What's restored. The workflows the seed references are recreated pinned to their ids (node credentials are stripped — the eval credential pin owns the credential view, so a pre-attached id would bypass it). Data tables those workflows reference are recreated schema-only — columns and a remapped id, no rows: an empty table is all a data-table node needs to resolve, and a real conversation's row values are the most sensitive part, so they're never reconstructed, sent, or inserted (the same row values are also redacted out of the restored message history). The row content stays in the source trace and never reaches the eval instance.

Continuing past the live turn. Add a conversation to keep driving after the trace's last message is replayed — the effective conversation becomes [<trace live turn>, ...conversation], so the live turn is sent for real and your authored turns become proxy-driven follow-ups (multi-turn). Use it to push a reproduced conversation further (e.g. "now also add error handling", or pressure-test the next decision):

"seedThread": { "threadId": "…", "project": "instance-ai" },
"conversation": [
  { "role": "assistant", "text": "Updated the schedule to every 30 minutes." },
  { "role": "user", "text": "Now also send a copy to #ops." }
]

(The first authored turn is typically the expected assistant reply as proxy reference; subsequent user turns are sent as follow-ups. Omit conversation to just send the live turn and stop.)

Cross-workspace, zero config (e.g. prod traces, staging eval). A source thread can live in a different LangSmith workspace than the eval writes to. You don't declare which, and there are no extra env vars — the harness enumerates the workspaces your LANGSMITH_API_KEY can access and finds the one holding the thread (the workspace is selected per request via the x-tenant-id header; a personal access token typically spans staging/prod/feature). Reads use the ambient key; the eval still writes its own traces/datasets to its own workspace, so nothing is ever written to the source workspace. The resolved workspace is logged ([Prod/instance-ai]).

seedThread.project overrides the source project name (default instance-ai); the same name is searched in every workspace, so if prod and staging share it you need nothing. Reconstruction recreates the source conversation on the eval instance (and in its model calls, traces, and local report artifacts): the most sensitive content is scrubbed first — see What's restored above (no data-table rows, values redacted from the restored history, credentials stripped) — but scrubbing isn't guaranteed exhaustive, so treat a reproduced conversation as if it may carry user data and follow your team's data-handling policy for real threads.

Transient. LangSmith base-tier traces retain ~14 days, so a seedThread case is runnable only while its trace lives. Keep these out of CI datasets (tag them ["seeded"], not full/pr) until durable seed snapshots land; the resolver fails loudly when a trace has aged out. Durable snapshotting (e.g. materialising the reconstructed seed into a private LangSmith dataset on first resolve) is a planned follow-up.

To find the thread id, open the conversation's trace in LangSmith (or read it from the instance the conversation happened on) and copy its thread_id.

priorConversation — prose prelude

"priorConversation": [
  { "role": "user", "text": "We agreed: digests go to #growth, daily at 9am." },
  { "role": "assistant", "text": "Noted — #growth, daily at 9am." }
]

Paired with a normal conversation for the live turn. Plain text only — no tool calls, no restored workflows.

seedFile — durable synthetic fixture

For a synthetic, sanitized fixture you want pinned in git (never a real user's conversation): hand-author a data/workflows/seeds/<name>.seed.json (schema in harness/conversation-seed.ts — messages + optional workflows) and point seedFile at it. Real conversations belong in seedThread, which keeps their content out of the repo entirely. Paired with a normal conversation for the live turn.

How restore works (all paths)

At build time the seed is restored right after the credential pin: seeded workflows are recreated under fresh ids (every reference in the history is remapped, so parallel iterations never share a workflow row) with node credentials stripped, and the message log is written verbatim. Restore failures fail the build — a seeded case cannot meaningfully run unseeded. Seeded turns join the transcript marked as seeded prior context, visible to the expectations judge and prompt-aware checks but distinguishable from live behaviour.

Rules of thumb:

• A seeded case is only worth shipping with buildExpectations that detect the misbehaviour recurring — without them it passes vacuously. Sanity-check by running the case once with the seed removed: it should fail.
• seedThread, priorConversation and seedFile are mutually exclusive; all order strictly before the live turn. seedThread provides its own live turn (omit conversation); the other two pair with conversation.

Failure categories

When a scenario fails, the verifier categorizes the root cause:

• builder_issue — the agent misconfigured a node, chose the wrong node type, or built the wrong structure.
• mock_issue — the LLM mock returned incorrect data (_evalMockError, wrong response shape).
• framework_issue — Phase 1 failed (empty trigger content) or the eval framework itself cascaded an error.
• verification_failure — the verifier couldn't produce a valid result.
• build_failure — Instance AI failed to build the workflow or a scenario timed out.

Suite pass rates typically sit between 40–65%; most failures are builder_issue on scenarios that require error handling the agent doesn't produce by default.

Troubleshooting

Wrong username or password on login. Your instance has no owner. Run the rest/e2e/reset curl from Quick start (needs E2E_TESTS=true on the server).

Have reached end of quota mid-run. You're hitting the hosted AI proxy's per-tenant quota. Set N8N_AI_ASSISTANT_BASE_URL="" to hit Anthropic directly with your N8N_INSTANCE_AI_MODEL_API_KEY. Also consider lowering --concurrency.

All scenarios timing out. Check that the server is up (curl localhost:5678/healthz) and that N8N_INSTANCE_AI_MODEL_API_KEY is set. A full build is ~60–180s; timeouts past --timeout-ms usually mean the agent is looping.

Flood of framework_issue failures. Phase 1 is returning empty hints — some nodes will degrade to _evalMockError. Check server logs for Anthropic errors; occasionally a rate-limit spike.

Port 5678 already in use. A previous pnpm dev is still running. lsof -iTCP:5678 -sTCP:LISTEN to find the PID, kill it.

Debugging a specific failure. Open the .data/workflow-eval-report.html artifact — it has per-node execution traces, the exact intercepted request, the mock response the LLM generated, and the verifier's reasoning. Start from the failing node.

CI

Evals run automatically on PRs that change Instance AI code (path-filtered). The workflow starts a single Docker container and runs the CLI against it. See .github/workflows/test-evals-instance-ai.yml.

The job is non-blocking. Results are posted as a PR comment and uploaded as artifacts. When LANGSMITH_API_KEY is set via the EVALS_LANGSMITH_API_KEY secret, runs also land as LangSmith experiments tagged with commit SHA + branch, so you can compare against master side-by-side.

Architecture

evaluations/
├── index.ts              # Public API
├── cli/                  # CLI entries: instance-ai, subagent, pairwise, compare-pairwise, report
├── clients/              # n8n REST + SSE clients
├── checklist/            # LLM verification with retry
├── credentials/          # Test credential seeding
├── data/workflows/       # e2e test case JSON files
├── data/subagent/        # workflow-build compatibility fixture JSON files
├── data/pairwise/        # Local pairwise fixture (small smoke set)
├── harness/              # Runners: buildWorkflow + executeScenario (e2e), in-memory event bus (discovery)
├── langsmith/            # Dataset sync + experiment setup
├── outcome/              # SSE event parsing, workflow discovery
├── report/               # HTML report generator
└── system-prompts/       # LLM prompts for verification

packages/cli/src/modules/instance-ai/eval/
├── execution.service.ts  # Phase 1 + Phase 2 orchestration
├── workflow-analysis.ts  # Hint generation (Phase 1)
├── mock-handler.ts       # Per-request mock generation (Phase 2)
├── api-docs.ts           # Context7 API doc fetcher
├── node-config.ts        # Node config serializer
└── pin-data-generator.ts # LLM pin data for bypass nodes (Phase 1.5)

Known limitations

• LangChain/AI nodes — use their own SDKs, not the HTTP mock layer. They fail with credential errors; use pin data instead.
• Binary / file nodes — minimal-valid synthetic fixtures (PDF, PNG, JPEG, OGG/Opus, WAV, MP3, MP4, ZIP, plaintext) are generated per content type and round-trip correctly through prepareBinaryData. Image-content correctness and OOXML formats (docx/xlsx — currently mime-sniffed as application/zip) remain out of scope. See Binary / file scenarios for the synthesis path.
• Streaming nodes — mocks return complete responses, not streams.
• GraphQL APIs — response shape depends on the query, not just the endpoint. Quality depends on the LLM knowing the API schema.
• Non-determinism — the agent builds different workflows each run. Pass rates vary between 40–65%.
• Large workflows — verification artifacts include full execution traces. For 12+ node workflows this can hit token limits. See TRUST-43 for the tool-based verifier approach.