neuron-explorer
Steering-first neuron explorer for Qwen3.5-4B: push every MLP neuron, keep every rollout, browse the results
翻译准备中
尚未检测到更新。GitHub 发布版本后会显示在这里。
个人 GitHub 账号下公开仓库的所有者可以登录并验证所有权,自行管理介绍,无需管理员批准。
登录并生成验证文件,在 30 分钟内将其提交到此仓库的默认分支。其他分支或分叉仓库中的文件无效。然后在下方检查文件,即可无需管理员批准直接管理项目。请保留文件以维持管理权限。
如需登录,将前往登录页面。登录后请回到此处,再次点击所选的验证按钮。
在项目文件夹中运行 /nomorevibe verify,即可验证所有权并自行管理介绍。
一分钟完成验证正在加载完整 README。 以下为已保存的摘录。
Governed workflow orchestration runtime for durable, replayable, observable automations across connectors, approvals, and operational workflows.
Valtaris Glue is a workflow orchestration platform designed for teams that need to execute operational automations with durable state, governance, auditability, replay, and runtime visibility.
The system combines a React operator console, Supabase-backed runtime services, PostgreSQL persistence, queue-driven workers, approval gates, connector adapters, and telemetry pipelines.
The platform is designed around a simple principle:查看完整 README ↗Governed workflow orchestration runtime for durable, replayable, observable automations across connectors, approvals, and operational workflows.
Valtaris Glue is a workflow orchestration platform designed for teams that need to execute operational automations with durable state, governance, auditability, replay, and runtime visibility.
The system combines a React operator console, Supabase-backed runtime services, PostgreSQL persistence, queue-driven workers, approval gates, connector adapters, and telemetry pipelines.
The platform is designed around a simple principle:
Workflow execution should remain observable, recoverable, and explainable even when individual steps fail or workflows evolve.
Valtaris Glue is an independent engineering project and research implementation. It is not represented as a commercially deployed enterprise platform, independently certified compliance system, or production-scale service.
DualPay is the flagship product of the Valtaris portfolio; Glue is supporting-cast work in the same portfolio — a standalone demonstration of durable, governed workflow-orchestration engineering (queues, DAGs, approvals, replay, compensation) rather than a component DualPay's own automation currently runs on. Glue shares a Postgres project and identity layer with DualPay and nucleus (see Database Design below), but its workflow runtime is independent of DualPay's own durable-jobs system. decision-weaver-ai is a fourth repo in the same portfolio — a standalone decision-intelligence product in the same design lineage as the execution-gating concept Glue's confidence gate was modeled after, though the two are separate codebases.
Operational teams frequently automate cross-system processes using scripts, manual handoffs, scheduled jobs, and disconnected SaaS integrations.
These approaches can become difficult to:
Reliable orchestration requires more than simply calling APIs.
A workflow runtime must account for:
A workflow update also needs to avoid unexpectedly changing the behavior of executions that are already in progress.
Valtaris Glue addresses these problems through:
Valtaris Glue currently includes the following system areas:
| Capability | Current Position |
|---|---|
| Durable workflow execution | Implemented |
| Queue-backed workers | Implemented |
| Workflow version pinning | Implemented |
| DAG execution | Implemented |
| Parallel workflow branches | Implemented |
| Approval workflows | Implemented |
| Retry handling | Implemented |
| Dead-letter handling | Implemented |
| Compensation / rollback | Implemented |
| Runtime telemetry | Implemented |
| Operator console | Implemented |
| Workflow replay | Implemented |
| Connector adapters | Implemented |
| Scheduled execution | Implemented |
| Webhook ingress | Implemented |
| Tenant-aware authorization | Implemented |
| PostgreSQL RLS | Implemented |
| AI connector support | Implemented |
| Formal production-scale benchmarks | Not yet established |
| Multi-region execution | Roadmap |
| Long-lived worker hosting | Roadmap |
| Independent security/compliance certification | Not claimed |
Workflow execution is represented as persisted runtime state rather than depending entirely on an active browser session.
Jobs can be:
Workers use leases to reduce the risk of abandoned work remaining indefinitely in an active state.
Published workflows are versioned before execution.
A workflow run references a specific workflow version so that changes to a later published version do not unexpectedly modify the definition being executed by an existing run.
Conceptually:
Workflow
│
├── Version 1
├── Version 2
└── Version 3
│
▼
Workflow Run
│
▼
Pinned Version
This provides a stable execution boundary for individual workflow runs.
Workflows are represented as directed acyclic graphs.
The runtime can evaluate:
Example:
┌── Step B ──┐
Step A ──────┤ ├──── Step D
└── Step C ──┘
Step D does not become eligible until its required dependencies are satisfied.
Certain workflow steps can require human approval before execution continues.
The runtime can route execution into an approval state based on configured workflow conditions.
This allows a workflow to combine:
Automation
↓
Decision
↓
Policy Check
↓
┌───────────────┐
│ │
▼ ▼
Approved Rejected
│ │
▼ ▼
Continue Rollback /
Failure
Approval actions are persisted for later operational review.
Valtaris Glue maintains execution history and checkpoints that can be used to reconstruct workflow activity.
Replay is designed as an observational and diagnostic capability rather than an unrestricted mechanism for blindly re-running side effects.
This distinction is important when workflows interact with external systems.
The runtime uses connector adapters to isolate external service integrations from orchestration logic.
Current connector work includes integrations such as:
Mock-capable adapters also support additional development scenarios such as:
Connector execution is represented as part of workflow runtime state and telemetry.
Workflow execution produces operational events and telemetry used by the operator console.
Telemetry can be used to inspect:
The goal is to make workflow behavior observable rather than treating execution as a black box.
┌─────────────────────────────────────────────────────────────┐
│ React Operator Console │
│ │
│ Command Center · Workflow Studio · Runtime Inspector │
│ Approvals · Incidents · Platform Controls · Telemetry │
└──────────────────────────┬──────────────────────────────────┘
│
│ Supabase Client / Auth
▼
┌─────────────────────────────────────────────────────────────┐
│ Supabase Platform │
│ │
│ ┌────────────────┐ ┌──────────────────┐ ┌──────────────┐ │
│ │ PostgreSQL │ │ Edge Functions │ │ Storage │ │
│ │ │ │ │ │ │ │
│ │ Workflow State │ │ Workflow Engine │ │ Runtime Data │ │
│ │ Jobs │ │ Workers │ │ Templates │ │
│ │ Events │ │ Replay │ │ Metadata │ │
│ │ RLS │ │ Rollback │ │ │ │
│ │ Audit Data │ │ Scheduling │ │ │ │
│ └────────────────┘ └──────────────────┘ └──────────────┘ │
│ │
│ Supabase Auth │
└──────────────────────────┬──────────────────────────────────┘
│
▼
┌─────────────────────────────────────────────────────────────┐
│ Connector Layer │
│ │
│ Stripe · OpenAI · SendGrid · Mock Adapters │
└─────────────────────────────────────────────────────────────┘
React and TypeScript operator console providing interfaces for:
Supabase Edge Functions implement workflow execution, worker control, approvals, replay, rollback, scheduling, ingress, and runtime operations.
PostgreSQL stores:
Supabase Auth provides authenticated identity and JWT-based access.
Database authorization uses authenticated identity and organization context rather than relying solely on browser-provided tenant identifiers.
Queue workers claim jobs using transactional database operations, execute eligible workflow steps, renew leases where applicable, persist results, emit telemetry, and route failures through retry or recovery paths.
Connector adapters isolate external service calls from the core orchestration model.
A workflow can begin through an operator action, scheduler, or external webhook.
The general execution path is:
Trigger
↓
Published Workflow
↓
Pinned Workflow Version
↓
Workflow Run
↓
DAG Expansion
↓
Durable Jobs
↓
Worker Claim
↓
Connector / Workflow Step
↓
Step Result
↓
Telemetry + Event
↓
Unlock Dependencies
↓
Continue / Retry / Approve / Rollback
↓
Workflow Completion
The operator console consumes persisted runtime information and realtime updates for monitoring and intervention.
AI functionality is treated as a connector/workflow capability rather than the core orchestration engine.
project/
│
├── src/
│ ├── components/
│ ├── pages/
│ ├── store/
│ └── runtime/
│
├── docs/
│ ├── runtime/
│ ├── platform/
│ └── STATUS.md
│
├── public/
│
├── supabase/
│ ├── functions/
│ └── migrations/
│
├── .env.example
├── CHANGELOG.md
├── README.md
├── bun.lock
├── package.json
├── playwright.config.ts
├── tailwind.config.ts
├── vite.config.ts
└── vitest.config.ts
Execute published workflows across dependent steps while retaining durable runtime state.
execute-workflow identifies the published workflow version, creates a workflow run, expands the DAG into durable jobs, and workers claim eligible jobs.
Workflow execution continues through persisted runtime state rather than depending exclusively on the operator's browser session.
Require human intervention for workflow steps that should not execute automatically.
The runtime evaluates workflow conditions and can route execution into an approval state.
An operator can approve or reject the pending action.
The workflow either continues through the approved path or enters its configured rejection/failure/recovery path.
Handle workflow failures without losing runtime state.
Step Failure
↓
Classify Failure
↓
Retryable?
/ \
Yes No
↓ ↓
Retry Failure
↓ ↓
Execute Incident /
Again Compensation
↓
Recovery /
Dead Letter
Retry behavior includes persisted job state and backoff handling.
Inspect the execution history of a workflow run.
The runtime uses stored workflow events, checkpoints, and step history to reconstruct execution state.
Operators can inspect the sequence of workflow activity without depending solely on transient UI state.
Workflows can be initiated through supported external triggers such as:
Ingress is converted into a workflow execution request and processed through the same durable runtime model.
The platform uses Supabase Auth and JWT-based identity for authenticated operator and API access.
Tenant-aware authorization is implemented through:
The system does not treat a client-supplied organization identifier as sufficient authorization.
PostgreSQL RLS provides a database-level authorization boundary for organization-scoped records.
The intent is to ensure that authorization remains enforced even when application-level UI restrictions are bypassed.
Client-side environment variables are limited to public configuration required by the browser.
Sensitive integration credentials are intended to remain server-side.
Service-role credentials must never be exposed through client-side VITE_ variables.
Operational events can capture information such as:
Audit and runtime event structures are used to support operational review and troubleshooting.
Validation is performed at important workflow boundaries, including:
The objective is to reject invalid workflow operations before they enter durable execution.
Failures are classified according to runtime behavior.
Depending on the failure, the system can:
Valtaris Glue includes architectural patterns relevant to systems that require:
However, the project does not claim:
Organizations deploying the system in regulated environments would need to perform their own security, privacy, compliance, legal, and operational assessments.
PostgreSQL functions as the durable system of record for workflow definitions, execution state, jobs, checkpoints, approvals, incidents, and runtime events.
Valtaris Glue's tables live in a dedicated glue Postgres schema inside valtaris-nucleus-2, a Supabase project shared with valtaris-nucleus and DualPay. Each app's data stays isolated in its own schema (glue, dualpay, and nucleus's own public), while all three share one auth.users table, making a single Supabase Auth identity the common identity layer across the whole ecosystem — this replaces what used to be a standalone, Glue-only Supabase project. RLS policies (mostly deny-by-default: RLS enabled with zero policies, so only the service role can read/write), RPC functions, and triggers were carried over unchanged during the move; the Supabase client is configured with db.schema: 'glue' so unqualified table references keep resolving inside Glue's own schema, and Realtime postgres_changes subscriptions are explicitly scoped to schema: "glue" as well, since Realtime scoping is independent of the client's db.schema config.
Representative runtime domains include:
workflow_runsworkflow_jobsworkflow_step_runsworkflow_checkpointsworkflow_eventsworkflow_approvalsworkflow_incidentsAdditional tables support:
A workflow run references a specific workflow version.
The workflow run can own multiple jobs, step executions, checkpoints, events, approvals, and incidents.
Conceptually:
Workflow
↓
Workflow Version
↓
Workflow Run
├── Jobs
├── Step Runs
├── Checkpoints
├── Events
├── Approvals
└── Incidents
Workers claim eligible jobs using transactional database operations.
The queue model incorporates:
FOR UPDATE SKIP LOCKED is used where appropriate to allow multiple workers to claim independent jobs without unnecessarily blocking one another.
Authenticated access is required for protected operator and runtime actions.
Representative runtime functions include:
| Function | Purpose |
|---|---|
execute-workflow | Creates and starts a workflow run |
run-worker | Claims and executes queued jobs |
approval-decision | Processes approval or rejection |
rollback-executor | Executes compensation/rollback work |
replay-workflow | Reconstructs workflow execution history |
webhook-ingress | Starts workflows from external webhooks |
scheduler-tick | Triggers scheduled workflows |
scale-monitor | Reports queue pressure and runtime signals |
Exact function behavior and contracts are defined by the implementation in supabase/functions/.
git clone <repository-url>
cd <repository-directory>
bun install
Create a .env file using .env.example as the configuration reference.
bun run dev
Client-side configuration is documented in .env.example.
Representative variables include:
VITE_SUPABASE_URL
VITE_SUPABASE_PUBLISHABLE_KEY
VITE_SUPABASE_PROJECT_ID
These now point at the shared valtaris-nucleus-2 project; the Supabase client additionally pins db.schema to glue so all queries resolve against Glue's own schema rather than the project's public schema (used by nucleus) or dualpay (used by DualPay).
Backend integrations such as:
should be configured through server-side secrets where required.
Mock-capable adapters may be used during development when live connector credentials are unavailable.
Sensitive credentials must not be committed to the repository.
Vitest provides unit-level coverage for application and runtime behavior.
Run:
bun run test
Run:
bun run lint
Clean (0 errors). @typescript-eslint/no-explicit-any is downgraded to warn (~130 pre-existing violations, mostly in supabase/functions/ handling untyped webhook/worker JSON payloads) — same call already made in the dualpay repo's eslint config, same rationale.
.github/workflows/ci.yml runs lint/test/build via bun on every push and PR — this repo had no CI at all before it was added. Passing on main.
Run:
bun run build
Playwright configuration is included for browser-level validation where applicable.
Runtime behavior can be validated through:
The repository includes a load-harness runtime component for synthetic workload generation and queue behavior analysis.
Formal production-scale throughput and latency baselines have not been established and should not be inferred from the presence of the harness.
Run the Vite development server against a configured Supabase environment.
A staging environment can be used to validate:
The architecture supports deployment to a hosted Supabase-backed environment.
However, this repository does not claim that the current project represents a commercially deployed production service.
Production deployment would require environment-specific:
The runtime includes several mechanisms intended to support efficient execution:
FOR UPDATE SKIP LOCKED;The architecture can support additional workers processing independent jobs concurrently.
Queue pressure and worker health can be monitored through runtime telemetry and operational controls.
Formal performance benchmarks have not yet established specific:
Accordingly, no production-scale performance number is claimed.
Valtaris Glue intentionally separates implemented capabilities from capabilities that still require broader verification or development.
| Area | Status |
|---|---|
| Durable queue execution | Implemented |
| Workflow version pinning | Implemented |
| DAG execution | Implemented |
| Parallel branches | Implemented |
| Approval workflows | Implemented |
| Retry handling | Implemented |
| Dead-letter handling | Implemented |
| Compensation / rollback | Implemented |
| Runtime telemetry | Implemented |
| Operator console | Implemented |
| Replay functionality | Implemented |
| Scheduled workflows | Implemented |
| Webhook ingress | Implemented |
| Connector adapter model | Implemented |
| Stripe connector | Implemented |
| OpenAI connector | Implemented |
| SendGrid connector | Implemented |
| Mock connectors | Implemented |
| Tenant-aware authorization | Implemented |
| PostgreSQL RLS | Implemented |
Shared Supabase project (glue schema in valtaris-nucleus-2, identity shared with nucleus + DualPay) | Implemented |
| CI (lint/test/build on every push and PR) | Implemented — repo had none before |
| Formal load benchmarks | Pending |
| Long-lived worker hosting | Planned |
| Multi-region execution | Planned |
| Expanded connector ecosystem | Planned |
| Independent security audit | Not completed |
| HIPAA certification | Not claimed |
| SOC 2 certification | Not claimed |
| Commercial production deployment | Not claimed |
These are planned capabilities, not claims about the current release.
Future work may include:
AI remains one capability within the broader orchestration runtime rather than the definition of the platform itself.
| Document | Description |
|---|---|
| Runtime Documentation | Workflow execution, workers, replay, telemetry, and runtime behavior |
| Platform Documentation | Templates, deployment, onboarding, and platform workflows |
STATUS.md | Current, partial, and planned capabilities |
CHANGELOG.md | Delivery history and project evolution |
Screenshots and architecture diagrams can be added here as the visual demonstration package is finalized.
Recommended evidence includes:
Valtaris Glue is developed using an iterative engineering process:
Design
↓
Implement
↓
Test
↓
Inspect Runtime Behavior
↓
Identify Gaps
↓
Remediate
↓
Retest
↓
Document
The project emphasizes:
Enabling CI for the first time surfaced and closed several real issues that had been running silently:
platform-control's install_template action computed install_count: X + 1 ?? 1 — operator precedence meant the + 1 always ran first, so a missing install_count produced NaN instead of falling back to 1 as intended (?? never triggers on a numeric NaN). Fixed and redeployed to the live Edge Function.@import in src/index.css sat after the @tailwind directives, which is invalid CSS — browsers silently drop it, so the custom fonts never actually loaded. Reordered.supabase/functions/_shared/retry.ts was a Markdown document (a heading plus a fenced code block) saved with a .ts extension, never imported anywhere, and failed to parse as TypeScript. Renamed to .md.init-workflow → execute-workflow created root jobs in state='pending' via ensure_downstream_job and stopped — no cron job, Edge Function, or frontend code anywhere ever called trigger-job to move a job to running. Added glue.dispatch_pending_jobs(), a pg_net-based sweep of pending jobs into trigger-job, scheduled every minute via pg_cron.enqueueFromTrigger resolved graphs via dag_id → glue.workflow_dags (dependsOn edges, workflow_jobs.dag_node_id) — a table with zero FK relationship to the real Gen-3 engine (workflow_version_id → glue.workflow_versions, next/on_failure/on_approval/on_compensation edges, workflow_jobs.step_id) that execute-workflow/schedule-next-job/run-worker/trigger-job actually use. Both tables were confirmed at 0 rows in production — a design gap, not a live outage — but the fix was real: migrated enqueueFromTrigger onto the Gen-3 model and added workflow_version_id to webhook_endpoints/workflow_schedules/runtime_triggers (and, in a follow-up pass, connector_schedules — a 5th caller missed the first time round). A creation UI (endpoint/schedule/event-trigger dialogs with a workflow-version picker) now exists in the Activation Surface, proxied through since these tables carry zero RLS policies.Follow the existing repository conventions for:
Before submitting changes where applicable, run:
bun run lint
bun run test
bun run build
Keep changes scoped and reviewable.
Changes involving workflow execution should preserve:
Do not weaken authorization or persistence guarantees simply to make a test pass.
No explicit license file is currently present in the repository.
Define a project license before external distribution.
valtaris-nucleus-2 Supabase projectGeorge Rios
Independent Software Engineer
Valtaris Technologies
Built with React, Vite, Tailwind CSS, Supabase, PostgreSQL, Supabase Edge Functions, Vitest, Playwright, and the open-source ecosystem supporting the project's runtime and development tooling.
control-planejob-lifecycle's "retry"/"delay" actions were defined but never invoked by any real caller — worker-finalize and worker-timeout always called action:"fail" on any failure, so retry_count/max_retries (default 3) existed but did nothing. Wired up a real exponential-backoff retry mechanism (30s/60s/120s/... capped at 5min), including a next_attempt_at column so a retried job isn't immediately re-dispatched before its backoff elapses.