展示 HN:具有只读权限范围的开源 AI 工作流
Show HN: Open-source AI workflows with read-only auth scopes

原始链接: https://github.com/seer-engg/seer

## Seer:强大的工作流构建器 Seer 是一款用于构建和执行自动化工作流的工具,注重视觉易用性和强大的控制力。它具有拖放式工作流编辑器、AI辅助设计和调试功能,以及与Google Workspace、GitHub和网络搜索工具等常用服务的无缝集成。 一个关键的设计原则在API层面将工作流(确定性、基于节点)与代理(动态、基于对话)区分开来,从而提高清晰度和独立演进能力。 **入门:** Seer 可以使用Docker快速本地部署(`git clone & repo & cd seer & docker compose up`)或通过Railway一键部署(预计每月$15-30)。 **核心功能:** 实时工作流验证、流式执行、通过PostgreSQL进行持久状态管理,以及OAuth和基于角色的访问控制等企业级安全功能。需要OpenAI或Anthropic API密钥才能运行。配置通过`.env`文件管理API密钥和集成细节。

## Seer:具有细粒度权限的开源AI工作流 Akshay326发布了Seer,一个全新的开源AI工作流构建器,解决了现有平台(如n8n和Langflow)的一个关键安全问题。这些平台即使对于只读任务(如总结邮件或阅读文档)也常常需要过于宽泛的权限(例如完全的Google访问权限)。 Seer默认使用**只读OAuth范围**进行常见操作,从而最大限度地减少工作流被攻破造成的潜在损害。它支持自托管,将数据保存在您的基础设施内。该项目旨在倡导AI自动化中的“最小权限原则”,这一功能目前仅在闭源的Make.com中提供。 开发者正在向Hacker News社区征求关于当前OAuth处理实践、对工作流范围验证器的兴趣以及对具有细粒度权限的所需集成的反馈。 **项目GitHub地址:**[https://github.com/seer-engg/seer](https://github.com/seer-engg/seer) **演示视频:**[https://youtu.be/cmQvmla8sl0](https://youtu.be/cmQvmla8sl0)
相关文章

原文

Seer is a workflow builder with fine-grained control for creating and executing automated workflows with integrated tools and services. Build complex automation workflows with visual editing, AI-assisted development, and seamless integrations (Google Workspace, GitHub, and more).

Core Architecture Principle

If workflows and agents are fundamentally different at the UI layer, they should be different at the API layer.

This principle guides our API design: workflows (deterministic, node-based execution) and agents (dynamic, message-based conversations) have distinct mental models, data structures, and user needs. Rather than forcing unification through pattern matching or transformation layers, we maintain separate APIs and components that align with their fundamental differences. This reduces complexity, improves maintainability, and ensures each system can evolve independently.

git clone <repo> && cd seer
docker compose up

That's it! Starts Docker services (Postgres, Redis, backend, worker), streams logs, and waits for readiness.

Deploy Seer to Railway with one click:

Deploy on Railway

What gets deployed: FastAPI backend, background worker, PostgreSQL, and Redis

Setup: Click button, enter OPENAI_API_KEY, wait 5-7 minutes. Estimated cost: $15-30/month.

For detailed deployment instructions, see Railway Deployment Guide.

Using the Workflow Editor

After running docker compose up, the workflow editor is available at:

Create a .env file:

# Required
OPENAI_API_KEY=sk-...

# Optional integrations (add as needed)
GOOGLE_CLIENT_ID=...
GOOGLE_CLIENT_SECRET=...
TAVILY_API_KEY=...

Docker automatically configures DATABASE_URL and REDIS_URL.

For complete configuration options, see Configuration Reference.

Start development environment:

View logs:

Stop services:

Steps:

  1. Run: docker compose up
  2. Code changes hot-reload via volume mounts (uvicorn --reload)
  3. Access workflow builder at: http://localhost:5173/workflows?backend=http://localhost:8000
  4. View logs in the terminal or run: docker compose logs -f
  5. Stop: docker compose down

Services started:

  • Backend API (port 8000): FastAPI server with workflow execution engine
  • Postgres (port 5432): Workflow and user data persistence
  • Redis (port 6379): Taskiq message broker
  • Taskiq Worker: run uv run taskiq worker worker.broker:broker (or use Docker) to process triggers/polling/workflow runs

Core Requirements:

  • OPENAI_API_KEY or ANTHROPIC_API_KEY - Required for workflow execution and AI assistance

Optional Integrations:

  • Google Workspace - GOOGLE_CLIENT_ID, GOOGLE_CLIENT_SECRET (Gmail, Drive, Sheets)
  • GitHub - GITHUB_CLIENT_ID, GITHUB_CLIENT_SECRET (Repos, Issues, PRs)
  • Supabase - SUPABASE_CLIENT_ID, SUPABASE_CLIENT_SECRET (Setup Guide)
  • Web Search - TAVILY_API_KEY

For complete configuration options, see Configuration Reference.

🛠️ Visual Workflow Builder

  • Drag-and-drop interface for creating automation workflows
  • Node-based editor with custom blocks and integrations
  • Real-time workflow validation and execution

🤖 AI-Assisted Development

  • Chat interface for workflow design and debugging
  • AI suggestions for workflow improvements
  • Intelligent error handling and recovery

🔗 Rich Integrations

  • Google Workspace: Gmail, Drive, Sheets with OAuth
  • GitHub: Repository management, issues, PRs
  • Web Tools: Search, content fetching, APIs
  • Databases: PostgreSQL with approval-based write controls

⚡ Advanced Execution Engine

  • Streaming execution with real-time updates
  • Interrupt handling for human-in-the-loop workflows
  • Persistent state management with PostgreSQL

🔒 Enterprise-Ready

  • Self-hosted or cloud deployment options
  • OAuth-based authentication (Clerk integration)
  • Role-based access control
  • Audit trails and execution history
联系我们 contact @ memedata.com