Started as a way to stop gluing AI agents together with one-off scripts. Workflows are React Flow graphs where agents, human reviewers, API calls, and safety gates all vote on what happens next — with a hard loop cap of 5 so nothing runs away. Each tenant gets its own subdomain, theming, RBAC, and audit mode tuned for SOC2 or GDPR. The engine tracks per-instance field state and vote outcomes end-to-end.
// features
- Visual workflow builder with React Flow node graph
- Per-tenant subdomains, theming, RBAC, and rate limits
- Workflow engine with vote-based human and agent reviews
- Scheduled runs, webhook subscriptions, and audit events
- Prompt Library with locking and AI-assisted drafting
- Billing module with usage records, price lists, and invoices
- OAuth / OIDC provider config plus local auth with password policy
// interesting details
- Workflow engine classifies nodes into auto-close vs user-task sets with conditional types (safety, information, routing) and caps loop iterations at 5.
- Swagger docs are gated in production by verifying a superuser JWT before the docs middleware runs.
- Per-tenant security knobs (max upload MB, RPM rate limit, body size, encryption salt) live on the Tenant row and are enforced by a global TenantLimitsInterceptor.
- Tenant-scoped audit compliance modes (Standard, SOC2, GDPR) tune what the AuditInterceptor records.
// tech stack
TypeScript
NestJS 11
Next.js 16 (React 19)
Prisma 7 + PostgreSQL
Passport (JWT, local, custom)
@xyflow/react
Zustand
Tailwind 4
Helmet, class-validator
PM2 + Nginx
Want to collaborate on qubicflow?
The repo is private — drop a note and tell us what brought you here.