flujo-ai 3.9.0

package/public/globe.svg

@@ -0,0 +1 @@
+<svg fill="none" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16"><g clip-path="url(#a)"><path fill-rule="evenodd" clip-rule="evenodd" d="M10.27 14.1a6.5 6.5 0 0 0 3.67-3.45q-1.24.21-2.7.34-.31 1.83-.97 3.1M8 16A8 8 0 1 0 8 0a8 8 0 0 0 0 16m.48-1.52a7 7 0 0 1-.96 0H7.5a4 4 0 0 1-.84-1.32q-.38-.89-.63-2.08a40 40 0 0 0 3.92 0q-.25 1.2-.63 2.08a4 4 0 0 1-.84 1.31zm2.94-4.76q1.66-.15 2.95-.43a7 7 0 0 0 0-2.58q-1.3-.27-2.95-.43a18 18 0 0 1 0 3.44m-1.27-3.54a17 17 0 0 1 0 3.64 39 39 0 0 1-4.3 0 17 17 0 0 1 0-3.64 39 39 0 0 1 4.3 0m1.1-1.17q1.45.13 2.69.34a6.5 6.5 0 0 0-3.67-3.44q.65 1.26.98 3.1M8.48 1.5l.01.02q.41.37.84 1.31.38.89.63 2.08a40 40 0 0 0-3.92 0q.25-1.2.63-2.08a4 4 0 0 1 .85-1.32 7 7 0 0 1 .96 0m-2.75.4a6.5 6.5 0 0 0-3.67 3.44 29 29 0 0 1 2.7-.34q.31-1.83.97-3.1M4.58 6.28q-1.66.16-2.95.43a7 7 0 0 0 0 2.58q1.3.27 2.95.43a18 18 0 0 1 0-3.44m.17 4.71q-1.45-.12-2.69-.34a6.5 6.5 0 0 0 3.67 3.44q-.65-1.27-.98-3.1" fill="#666"/></g><defs><clipPath id="a"><path fill="#fff" d="M0 0h16v16H0z"/></clipPath></defs></svg>

package/public/next.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 394 80"><path fill="#000" d="M262 0h68.5v12.7h-27.2v66.6h-13.6V12.7H262V0ZM149 0v12.7H94v20.4h44.3v12.6H94v21h55v12.6H80.5V0h68.7zm34.3 0h-17.8l63.8 79.4h17.9l-32-39.7 32-39.6h-17.9l-23 28.6-23-28.6zm18.3 56.7-9-11-27.1 33.7h17.8l18.3-22.7z"/><path fill="#000" d="M81 79.3 17 0H0v79.3h13.6V17l50.2 62.3H81Zm252.6-.4c-1 0-1.8-.4-2.5-1s-1.1-1.6-1.1-2.6.3-1.8 1-2.5 1.6-1 2.6-1 1.8.3 2.5 1a3.4 3.4 0 0 1 .6 4.3 3.7 3.7 0 0 1-3 1.8zm23.2-33.5h6v23.3c0 2.1-.4 4-1.3 5.5a9.1 9.1 0 0 1-3.8 3.5c-1.6.8-3.5 1.3-5.7 1.3-2 0-3.7-.4-5.3-1s-2.8-1.8-3.7-3.2c-.9-1.3-1.4-3-1.4-5h6c.1.8.3 1.6.7 2.2s1 1.2 1.6 1.5c.7.4 1.5.5 2.4.5 1 0 1.8-.2 2.4-.6a4 4 0 0 0 1.6-1.8c.3-.8.5-1.8.5-3V45.5zm30.9 9.1a4.4 4.4 0 0 0-2-3.3 7.5 7.5 0 0 0-4.3-1.1c-1.3 0-2.4.2-3.3.5-.9.4-1.6 1-2 1.6a3.5 3.5 0 0 0-.3 4c.3.5.7.9 1.3 1.2l1.8 1 2 .5 3.2.8c1.3.3 2.5.7 3.7 1.2a13 13 0 0 1 3.2 1.8 8.1 8.1 0 0 1 3 6.5c0 2-.5 3.7-1.5 5.1a10 10 0 0 1-4.4 3.5c-1.8.8-4.1 1.2-6.8 1.2-2.6 0-4.9-.4-6.8-1.2-2-.8-3.4-2-4.5-3.5a10 10 0 0 1-1.7-5.6h6a5 5 0 0 0 3.5 4.6c1 .4 2.2.6 3.4.6 1.3 0 2.5-.2 3.5-.6 1-.4 1.8-1 2.4-1.7a4 4 0 0 0 .8-2.4c0-.9-.2-1.6-.7-2.2a11 11 0 0 0-2.1-1.4l-3.2-1-3.8-1c-2.8-.7-5-1.7-6.6-3.2a7.2 7.2 0 0 1-2.4-5.7 8 8 0 0 1 1.7-5 10 10 0 0 1 4.3-3.5c2-.8 4-1.2 6.4-1.2 2.3 0 4.4.4 6.2 1.2 1.8.8 3.2 2 4.3 3.4 1 1.4 1.5 3 1.5 5h-5.8z"/></svg>

package/public/vercel.svg

@@ -0,0 +1 @@
+<svg fill="none" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1155 1000"><path d="m577.3 0 577.4 1000H0z" fill="#fff"/></svg>

package/public/window.svg

@@ -0,0 +1 @@
+<svg fill="none" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16"><path fill-rule="evenodd" clip-rule="evenodd" d="M1.5 2.5h13v10a1 1 0 0 1-1 1h-11a1 1 0 0 1-1-1zM0 1h16v11.5a2.5 2.5 0 0 1-2.5 2.5h-11A2.5 2.5 0 0 1 0 12.5zm3.75 4.5a.75.75 0 1 0 0-1.5.75.75 0 0 0 0 1.5M7 4.75a.75.75 0 1 1-1.5 0 .75.75 0 0 1 1.5 0m1.75.75a.75.75 0 1 0 0-1.5.75.75 0 0 0 0 1.5" fill="#666"/></svg>

package/scripts/launch-next.mjs

@@ -0,0 +1,98 @@
+#!/usr/bin/env node
+/**
+ * Launches Next.js with TLS settings that let FLUJO connect to MCP servers whose
+ * certificates are signed by a custom/private (enterprise) CA.
+ *
+ * Node.js does NOT trust the operating system's certificate store by default, which is
+ * why a streamable-HTTP MCP server over HTTPS with a corporate CA fails with
+ * "unable to verify the first certificate" even though `curl` works. This launcher:
+ *
+ *   1. Adds `--use-system-ca` to NODE_OPTIONS (on Node versions that support it) so Node
+ *      trusts the OS certificate store — the same store `curl` uses.
+ *   2. Maps the friendlier FLUJO_EXTRA_CA_CERTS env var to NODE_EXTRA_CA_CERTS so a
+ *      specific PEM CA bundle can be trusted without touching the OS store.
+ *
+ * Both settings propagate to every Node child process Next spawns (including the server),
+ * because NODE_OPTIONS / NODE_EXTRA_CA_CERTS are read at process startup.
+ *
+ * The TLS/CA logic is exported as `buildLaunchEnv()` so the npm-package bin wrapper
+ * (bin/flujo.mjs, issue #59) reuses it verbatim instead of duplicating it.
+ */
+import { spawn } from 'node:child_process';
+import process from 'node:process';
+import { pathToFileURL } from 'node:url';
+
+/**
+ * Return a copy of `baseEnv` with FLUJO's TLS/CA settings applied:
+ *  - NODE_OPTIONS gains `--use-system-ca` on Node versions that support it.
+ *  - FLUJO_EXTRA_CA_CERTS is mirrored to NODE_EXTRA_CA_CERTS.
+ * Pure apart from a one-time informational log on older Node builds.
+ */
+export function buildLaunchEnv(baseEnv = process.env) {
+  const env = { ...baseEnv };
+
+  // Detect support empirically instead of sniffing the version number. This Set is the
+  // authoritative list of flags THIS Node binary accepts inside NODE_OPTIONS, so it is
+  // correct across versions, platforms, and nightly/RC builds — and it guarantees we never
+  // inject a flag that Node would then reject at startup with a scary error.
+  const supportsSystemCa = process.allowedNodeEnvironmentFlags.has('--use-system-ca');
+
+  if (supportsSystemCa && !/--use-system-ca/.test(env.NODE_OPTIONS || '')) {
+    env.NODE_OPTIONS = `${env.NODE_OPTIONS ? `${env.NODE_OPTIONS} ` : ''}--use-system-ca`;
+  } else if (!supportsSystemCa && !env.NODE_EXTRA_CA_CERTS && !env.FLUJO_EXTRA_CA_CERTS) {
+    // Not an error — older Node simply lacks the flag and falls back to Node's bundled CAs.
+    // Only surface this (as info, not a warning) when no CA bundle is already configured,
+    // so it never looks alarming on the happy path.
+    console.log(
+      `[FLUJO] Node ${process.versions.node} has no --use-system-ca flag; using Node's bundled CAs. ` +
+      `If an MCP server uses a private/corporate CA, set FLUJO_EXTRA_CA_CERTS (or NODE_EXTRA_CA_CERTS) ` +
+      `to your CA file before starting FLUJO.`
+    );
+  }
+
+  // Convenience alias so users don't have to remember the exact Node env var name.
+  if (env.FLUJO_EXTRA_CA_CERTS && !env.NODE_EXTRA_CA_CERTS) {
+    env.NODE_EXTRA_CA_CERTS = env.FLUJO_EXTRA_CA_CERTS;
+  }
+
+  return env;
+}
+
+/** Spawn `next <passthroughArgs>` with the TLS-configured env and forward its exit. */
+function launchNext(passthroughArgs) {
+  const env = buildLaunchEnv();
+
+  const tlsSummary = [
+    env.NODE_OPTIONS ? `NODE_OPTIONS="${env.NODE_OPTIONS}"` : null,
+    env.NODE_EXTRA_CA_CERTS ? `NODE_EXTRA_CA_CERTS="${env.NODE_EXTRA_CA_CERTS}"` : null,
+  ].filter(Boolean).join(', ');
+  console.log(`[FLUJO] Starting next ${passthroughArgs.join(' ')}${tlsSummary ? ` (${tlsSummary})` : ''}`);
+
+  // On Windows the resolved binary is next.cmd, which requires a shell to execute.
+  const child = spawn('next', passthroughArgs, {
+    stdio: 'inherit',
+    env,
+    shell: process.platform === 'win32',
+  });
+
+  child.on('error', error => {
+    console.error('[FLUJO] Failed to launch next:', error);
+    process.exit(1);
+  });
+
+  child.on('exit', (code, signal) => {
+    if (signal) {
+      process.kill(process.pid, signal);
+    } else {
+      process.exit(code ?? 0);
+    }
+  });
+}
+
+// Only launch when run directly (`node scripts/launch-next.mjs start -p 4200`), not when
+// imported for buildLaunchEnv (bin/flujo.mjs). Everything after the script name is the
+// Next.js command, e.g. ["start", "-p", "4200"].
+const isMain = import.meta.url === pathToFileURL(process.argv[1] ?? '').href;
+if (isMain) {
+  launchNext(process.argv.slice(2));
+}