flock-core 0.4.515__py3-none-any.whl → 0.4.517__py3-none-any.whl

flock/webapp/app/main.py

@@ -3,7 +3,6 @@ import asyncio
 import json
 import os  # Added import
 import shutil
-import urllib.parse
 
 # Added for share link creation
 import uuid
@@ -59,6 +58,7 @@ from flock.webapp.app.dependencies import (
 )
 
 # Import service functions (which now expect app_state)
+from flock.webapp.app.middleware import ProxyHeadersMiddleware
 from flock.webapp.app.services.flock_service import (
     clear_current_flock_service,
     create_new_flock_service,
@@ -293,7 +293,13 @@ async def lifespan(app: FastAPI):
 
 app = FastAPI(title="Flock Web UI & API", lifespan=lifespan, docs_url="/docs",
     openapi_url="/openapi.json", root_path=os.getenv("FLOCK_ROOT_PATH", ""))
-logger.info("FastAPI booting complete.")
+
+# Add middleware for handling proxy headers (HTTPS detection)
+# You can force HTTPS by setting FLOCK_FORCE_HTTPS=true
+force_https = os.getenv("FLOCK_FORCE_HTTPS", "false").lower() == "true"
+app.add_middleware(ProxyHeadersMiddleware, force_https=force_https)
+logger.info(f"FastAPI booting complete with proxy headers middleware (force_https={force_https}).")
+
 BASE_DIR = Path(__file__).resolve().parent.parent
 app.mount("/static", StaticFiles(directory=str(BASE_DIR / "static")), name="static")
 templates = Jinja2Templates(directory=str(BASE_DIR / "templates"))
@@ -706,7 +712,9 @@ async def page_dashboard(
     # Handle initial redirect if flagged during app startup
     if getattr(request.app.state, "initial_redirect_to_chat", False):
         logger.info("Initial redirect to CHAT page triggered from dashboard (FLOCK_START_MODE='chat').")
-        return RedirectResponse(url="/chat", status_code=307)
+        # Use url_for to respect the root_path setting
+        chat_url = str(request.url_for("page_chat"))
+        return RedirectResponse(url=chat_url, status_code=307)
 
     effective_ui_mode = ui_mode
     flock_is_preloaded = hasattr(request.app.state, "flock_instance") and request.app.state.flock_instance is not None
@@ -714,7 +722,11 @@ async def page_dashboard(
     if effective_ui_mode is None:
         effective_ui_mode = "scoped" if flock_is_preloaded else "standalone"
         if effective_ui_mode == "scoped":
-             return RedirectResponse(url=f"/?ui_mode=scoped&initial_load=true", status_code=307)
+            # Manually construct URL with root_path to ensure it works with proxy setups
+            root_path = request.scope.get("root_path", "")
+            redirect_url = f"{root_path}/?ui_mode=scoped&initial_load=true"
+            logger.info(f"Dashboard redirect: {redirect_url} (root_path: '{root_path}')")
+            return RedirectResponse(url=redirect_url, status_code=307)
 
     if effective_ui_mode == "standalone" and flock_is_preloaded:
         clear_current_flock_service(request.app.state) # Pass app.state
@@ -724,9 +736,9 @@ async def page_dashboard(
     flock_in_state = hasattr(request.app.state, "flock_instance") and request.app.state.flock_instance is not None
 
     if effective_ui_mode == "scoped":
-        context["initial_content_url"] = "/ui/htmx/execution-view-container" if flock_in_state else "/ui/htmx/scoped-no-flock-view"
+        context["initial_content_url"] = str(request.url_for("htmx_get_execution_view_container")) if flock_in_state else str(request.url_for("htmx_scoped_no_flock_view"))
     else:
-        context["initial_content_url"] = "/ui/htmx/load-flock-view"
+        context["initial_content_url"] = str(request.url_for("htmx_get_load_flock_view"))
     return templates.TemplateResponse("base.html", context)
 
 @app.get("/ui/editor/{section:path}", response_class=HTMLResponse, tags=["UI Pages"])
@@ -736,31 +748,36 @@ async def page_editor_section(
     flock_instance_from_state: Flock | None = getattr(request.app.state, "flock_instance", None)
     if not flock_instance_from_state:
         err_msg = "No flock loaded. Please load or create a flock first."
-        redirect_url = f"/?error={urllib.parse.quote(err_msg)}"
-        if ui_mode == "scoped": redirect_url += "&ui_mode=scoped"
+        # Use url_for to respect the root_path setting
+        redirect_url = str(request.url_for("page_dashboard").include_query_params(error=err_msg))
+        if ui_mode == "scoped":
+            redirect_url = str(request.url_for("page_dashboard").include_query_params(error=err_msg, ui_mode="scoped"))
         return RedirectResponse(url=redirect_url, status_code=303)
 
     context = get_base_context_web(request, error, success, ui_mode)
+    root_path = request.scope.get("root_path", "")
     content_map = {
-        "properties": "/ui/api/flock/htmx/flock-properties-form",
-        "agents": "/ui/htmx/agent-manager-view",
-        "execute": "/ui/htmx/execution-view-container"
+        "properties": f"{root_path}/ui/api/flock/htmx/flock-properties-form",
+        "agents": f"{root_path}/ui/htmx/agent-manager-view",
+        "execute": f"{root_path}/ui/htmx/execution-view-container"
     }
-    context["initial_content_url"] = content_map.get(section, "/ui/htmx/load-flock-view")
+    context["initial_content_url"] = content_map.get(section, f"{root_path}/ui/htmx/load-flock-view")
     if section not in content_map: context["error_message"] = "Invalid editor section."
     return templates.TemplateResponse("base.html", context)
 
 @app.get("/ui/registry", response_class=HTMLResponse, tags=["UI Pages"])
 async def page_registry(request: Request, error: str = None, success: str = None, ui_mode: str = Query("standalone")):
     context = get_base_context_web(request, error, success, ui_mode)
-    context["initial_content_url"] = "/ui/htmx/registry-viewer"
+    root_path = request.scope.get("root_path", "")
+    context["initial_content_url"] = f"{root_path}/ui/htmx/registry-viewer"
     return templates.TemplateResponse("base.html", context)
 
 @app.get("/ui/create", response_class=HTMLResponse, tags=["UI Pages"])
 async def page_create(request: Request, error: str = None, success: str = None, ui_mode: str = Query("standalone")):
     clear_current_flock_service(request.app.state) # Pass app.state
     context = get_base_context_web(request, error, success, "standalone")
-    context["initial_content_url"] = "/ui/htmx/create-flock-form"
+    root_path = request.scope.get("root_path", "")
+    context["initial_content_url"] = f"{root_path}/ui/htmx/create-flock-form"
     return templates.TemplateResponse("base.html", context)
 
 @app.get("/ui/htmx/sidebar", response_class=HTMLResponse, tags=["UI HTMX Partials"])
@@ -885,7 +902,8 @@ async def ui_create_flock_action(request: Request, flock_name: str = Form(...),
 @app.get("/ui/settings", response_class=HTMLResponse, tags=["UI Pages"])
 async def page_settings(request: Request, error: str = None, success: str = None, ui_mode: str = Query("standalone")):
     context = get_base_context_web(request, error, success, ui_mode)
-    context["initial_content_url"] = "/ui/htmx/settings-view"
+    root_path = request.scope.get("root_path", "")
+    context["initial_content_url"] = f"{root_path}/ui/htmx/settings-view"
     return templates.TemplateResponse("base.html", context)
 
 def _prepare_env_vars_for_template_web():

flock/webapp/app/middleware.py

@@ -0,0 +1,113 @@
+
+# Custom middleware for handling proxy headers
+from starlette.middleware.base import BaseHTTPMiddleware
+from starlette.requests import Request as StarletteRequest
+
+#from uvicorn.middleware.proxy_headers import ProxyHeadersMiddleware
+
+class ProxyHeadersMiddleware(BaseHTTPMiddleware):
+    """Middleware to handle proxy headers for HTTPS detection.
+    This ensures url_for() generates HTTPS URLs when behind an HTTPS proxy.
+    """
+    def __init__(self, app, force_https: bool = False):
+        super().__init__(app)
+        self.force_https = force_https
+
+    async def dispatch(self, request: StarletteRequest, call_next):
+        import json
+        import logging
+        logger = logging.getLogger(__name__)
+
+        # Log original scheme and relevant headers for debugging
+        original_scheme = request.scope.get("scheme", "unknown")
+        original_host = request.headers.get("host")
+        logger.info(f"ProxyHeadersMiddleware - Original scheme: {original_scheme}, Host: {original_host}, URL: {request.url}")
+
+        # If force_https is enabled, always use HTTPS
+        if self.force_https:
+            request.scope["scheme"] = "https"
+            logger.info("ProxyHeadersMiddleware - Force HTTPS enabled, setting scheme to https")
+        else:
+            # Check for common proxy headers that indicate HTTPS
+            forwarded_proto = request.headers.get("x-forwarded-proto")
+            forwarded_scheme = request.headers.get("x-forwarded-scheme")
+            forwarded_host = request.headers.get("x-forwarded-host")
+            cloudflare_proto = request.headers.get("cf-visitor")
+            forwarded_ssl = request.headers.get("x-forwarded-ssl")
+            front_end_https = request.headers.get("front-end-https")
+
+            # Log proxy headers for debugging
+            proxy_headers = {
+                "x-forwarded-proto": forwarded_proto,
+                "x-forwarded-scheme": forwarded_scheme,
+                "x-forwarded-host": forwarded_host,
+                "cf-visitor": cloudflare_proto,
+                "x-forwarded-ssl": forwarded_ssl,
+                "front-end-https": front_end_https,
+                "x-forwarded-for": request.headers.get("x-forwarded-for"),
+                "host": request.headers.get("host")
+            }
+            logger.info(f"ProxyHeadersMiddleware - Proxy headers: {proxy_headers}")
+
+            scheme_updated = False
+
+            # Handle X-Forwarded-Proto header (most common)
+            if forwarded_proto:
+                request.scope["scheme"] = forwarded_proto.lower()
+                scheme_updated = True
+                logger.info(f"ProxyHeadersMiddleware - Updated scheme from X-Forwarded-Proto: {forwarded_proto}")
+
+            # Handle X-Forwarded-Scheme header
+            elif forwarded_scheme:
+                request.scope["scheme"] = forwarded_scheme.lower()
+                scheme_updated = True
+                logger.info(f"ProxyHeadersMiddleware - Updated scheme from X-Forwarded-Scheme: {forwarded_scheme}")
+
+            # Handle X-Forwarded-SSL header (on/off)
+            elif forwarded_ssl and forwarded_ssl.lower() == "on":
+                request.scope["scheme"] = "https"
+                scheme_updated = True
+                logger.info(f"ProxyHeadersMiddleware - Updated scheme from X-Forwarded-SSL: on -> https")
+
+            # Handle Front-End-Https header (on/off)
+            elif front_end_https and front_end_https.lower() == "on":
+                request.scope["scheme"] = "https"
+                scheme_updated = True
+                logger.info(f"ProxyHeadersMiddleware - Updated scheme from Front-End-Https: on -> https")
+
+            # Handle Cloudflare's CF-Visitor header (JSON format)
+            elif cloudflare_proto:
+                try:
+                    visitor_info = json.loads(cloudflare_proto)
+                    if visitor_info.get("scheme"):
+                        request.scope["scheme"] = visitor_info["scheme"].lower()
+                        scheme_updated = True
+                        logger.info(f"ProxyHeadersMiddleware - Updated scheme from CF-Visitor: {visitor_info['scheme']}")
+                except (json.JSONDecodeError, KeyError) as e:
+                    logger.warning(f"ProxyHeadersMiddleware - Failed to parse CF-Visitor header: {e}")
+
+            if not scheme_updated:
+                logger.info("ProxyHeadersMiddleware - No proxy headers found, keeping original scheme")
+
+        # Handle X-Forwarded-Host for proper host handling
+        forwarded_host = request.headers.get("x-forwarded-host")
+        if forwarded_host:
+            # Update the server scope to reflect the original host
+            request.scope["server"] = (forwarded_host, 443 if request.scope.get("scheme") == "https" else 80)
+            logger.info(f"ProxyHeadersMiddleware - Updated host from X-Forwarded-Host: {forwarded_host}")
+
+        # Handle X-Forwarded-For for client IP (optional but good practice)
+        forwarded_for = request.headers.get("x-forwarded-for")
+        if forwarded_for:
+            # Take the first IP in the chain (the original client)
+            client_ip = forwarded_for.split(",")[0].strip()
+            request.scope["client"] = (client_ip, request.scope.get("client", ["", 0])[1])
+
+        # Log final scheme and reconstructed URL
+        final_scheme = request.scope.get("scheme")
+        final_server = request.scope.get("server", ("unknown", 0))
+        logger.info(f"ProxyHeadersMiddleware - Final scheme: {final_scheme}, server: {final_server}")
+        logger.info(f"ProxyHeadersMiddleware - Reconstructed URL would be: {final_scheme}://{final_server[0]}{request.url.path}")
+
+        response = await call_next(request)
+        return response

flock/webapp/templates/partials/_agent_list.html

@@ -5,7 +5,7 @@
     {% endif %}
     {% if flock.agents %}
     <ul class="item-list">
-        {% for agent_name, agent in flock.agents.items() %}        <li hx-get="{{ url_for('htmx_get_agent_details_form', agent_name=agent.name) }}" hx-target="#agent-detail-panel" hx-swap="innerHTML" hx-indicator="#agent-detail-loading" onclick="this.closest('ul').querySelectorAll('li').forEach(li => li.classList.remove('selected-item')); this.classList.add('selected-item');">
+        {% for agent_name, agent in flock.agents.items() %}        <li hx-get="{{ url_for('htmx_get_agent_details_form', agent_name=agent.name) }}" hx-target="#agent-detail-panel" hx-swap="innerHTML" hx-indicator="#agent-detail-loading-indicator" onclick="this.closest('ul').querySelectorAll('li').forEach(li => li.classList.remove('selected-item')); this.classList.add('selected-item');">
             <strong>{{ agent.name }}</strong><br>
             <small>{{ agent.resolved_description|truncate(80) if agent.resolved_description else 'No description' }}</small>
         </li>

flock/webapp/templates/partials/_execution_form.html

@@ -38,9 +38,7 @@ window.agentInputFormUrlTemplate = '{{ url_for("htmx_get_agent_input_form", agen
             <progress indeterminate></progress> Loading input form...
         </div>
 
-        <button type="submit" {% if not flock.agents %}disabled{% endif %}>Run Flock</button>
-
-        <div id="share-agent-link-container" style="margin-top: 0.5rem;">            <a href="#" 
+        <button type="submit" {% if not flock.agents %}disabled{% endif %}>Run Flock</button>        <div id="share-agent-link-container" style="margin-top: 0.5rem;">            <a href="#" 
                id="shareAgentHtmxLink"
                hx-post="{{ url_for('htmx_generate_share_link') }}" 
                hx-target="#shareLinkDisplayArea" 
@@ -50,6 +48,9 @@ window.agentInputFormUrlTemplate = '{{ url_for("htmx_get_agent_input_form", agen
                style="text-decoration: underline; cursor: pointer; color: var(--pico-primary);">
                 Create shareable link...
             </a>
+            <span id="share-loading-indicator" class="htmx-indicator">
+                <progress indeterminate></progress> Generating link...
+            </span>
         </div>
 
         <span id="run-loading-indicator" class="htmx-indicator">

{flock_core-0.4.515.dist-info → flock_core-0.4.517.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: flock-core
-Version: 0.4.515
+Version: 0.4.517
 Summary: Declarative LLM Orchestration at Scale
 Author-email: Andre Ratzenberger <andre.ratzenberger@whiteduck.de>
 License-File: LICENSE

{flock_core-0.4.515.dist-info → flock_core-0.4.517.dist-info}/RECORD

@@ -495,7 +495,8 @@ flock/webapp/app/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,
 flock/webapp/app/chat.py,sha256=d5a_mr3H2nuWNFSpSlI_HyqX-J_4krndd4A-8S25EKM,28679
 flock/webapp/app/config.py,sha256=lqmneujnNZk-EFJV5cWpvxkqisxH3T3zT_YOI0JYThE,4809
 flock/webapp/app/dependencies.py,sha256=JUcwY1N6SZplU141lMN2wk9dOC9er5HCedrKTJN9wJk,5533
-flock/webapp/app/main.py,sha256=54DHCA4jaOBrW3Lly0t-r_gSOEBj96G4Izt5pkbFZSw,57142
+flock/webapp/app/main.py,sha256=J3NiwW4fFTrp_YKa-HFXs3gLtLC6qu9LjIb_i-jJHMk,58426
+flock/webapp/app/middleware.py,sha256=5gkM-gqD7C6-JrsoTB1_UWpf05JI1N8KIWajn60QZk0,5721
 flock/webapp/app/models_ui.py,sha256=vrEBLbhEp6FziAgBSFOLT1M7ckwadsTdT7qus5_NduE,329
 flock/webapp/app/theme_mapper.py,sha256=QzWwLWpED78oYp3FjZ9zxv1KxCyj43m8MZ0fhfzz37w,34302
 flock/webapp/app/utils.py,sha256=RF8DMKKAj1XPmm4txUdo2OdswI1ATQ7cqUm6G9JFDzA,2942
@@ -523,7 +524,7 @@ flock/webapp/templates/index.html,sha256=1SDfAfaGBNJhI26bc6z7qBo9mrOK7HKQIS9aRGv
 flock/webapp/templates/registry_viewer.html,sha256=Rq0Ao3r6mqwgF6bWM73d-KmnslwQoz79a2PGbL5M4Fo,3349
 flock/webapp/templates/shared_run_page.html,sha256=RX1J3hgEuIJXaGYlquY7m54yxPTIrJJAZH2HB6v33WY,8109
 flock/webapp/templates/partials/_agent_detail_form.html,sha256=jpcbj2-zN_eWH6vlhWGBAviObmK2IZvezU_b2_UW-Tc,6067
-flock/webapp/templates/partials/_agent_list.html,sha256=2Gvm84BPX5Wm3IwmuqTNX-I5c46P18obC-k0quEQ8VQ,1048
+flock/webapp/templates/partials/_agent_list.html,sha256=0TcutldXJncQP6jMsXh8cnbjdzaVuEF-VTddQ6DZli0,1058
 flock/webapp/templates/partials/_agent_manager_view.html,sha256=8oJlxjtgeOkCQcfhaAmE4s_tklk25Jw0XScXpS_MVr0,2571
 flock/webapp/templates/partials/_agent_tools_checklist.html,sha256=T60fb7OrJYHUw0hJLC_otskgvbH9dZXbv5klgWBkSWk,686
 flock/webapp/templates/partials/_chat_container.html,sha256=MHj9yRHy_wVZD6f_Csc0bZBhtxJMfr2V5bRRAaXiqtU,843
@@ -536,7 +537,7 @@ flock/webapp/templates/partials/_dashboard_flock_properties_preview.html,sha256=
 flock/webapp/templates/partials/_dashboard_upload_flock_form.html,sha256=UWU_WpIsq6iw5FwK989ANmhzcCOcDKVjdakZ4kxY8lU,961
 flock/webapp/templates/partials/_dynamic_input_form_content.html,sha256=WYr2M7Mb5vKITFhIVXXEHppRx9IjGew91yLo1_I9kkI,1230
 flock/webapp/templates/partials/_env_vars_table.html,sha256=st8bRQpIJ3TJ_znEdyOwDT43ZhO2QTLne2IZNxQdQNM,1106
-flock/webapp/templates/partials/_execution_form.html,sha256=0Tgqk-JWW8tzSJPKZ4CFT4ZvNCB02Zesib2QN6bEiUk,3526
+flock/webapp/templates/partials/_execution_form.html,sha256=yQbYgFYlfva4hgRAs791MR2IFgZnQBLbo4vvlPrDGeU,3686
 flock/webapp/templates/partials/_execution_view_container.html,sha256=w4QEr-yPs0k1vF2oxMhhPoOr-ki0YJzzUltGmZgfRfY,1672
 flock/webapp/templates/partials/_flock_file_list.html,sha256=3F1RE1EaeRSQeyIWeA2ALHU2j4oGwureDtY6k1aZVjQ,1261
 flock/webapp/templates/partials/_flock_properties_form.html,sha256=kUHoxB6_C_R9nMDD_ClLRDL_9zQ6E8gFCrlkEkqcUYo,2904
@@ -561,8 +562,8 @@ flock/workflow/agent_execution_activity.py,sha256=Gy6FtuVAjf0NiUXmC3syS2eJpNQF4R
 flock/workflow/flock_workflow.py,sha256=iSUF_soFvWar0ffpkzE4irkDZRx0p4HnwmEBi_Ne2sY,9666
 flock/workflow/temporal_config.py,sha256=3_8O7SDEjMsSMXsWJBfnb6XTp0TFaz39uyzSlMTSF_I,3988
 flock/workflow/temporal_setup.py,sha256=YIHnSBntzOchHfMSh8hoLeNXrz3B1UbR14YrR6soM7A,1606
-flock_core-0.4.515.dist-info/METADATA,sha256=7nfOA03KGxxfxZ5-sm_GuTHXqhhD1NRxo_hvp6d8zBI,22786
-flock_core-0.4.515.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
-flock_core-0.4.515.dist-info/entry_points.txt,sha256=rWaS5KSpkTmWySURGFZk6PhbJ87TmvcFQDi2uzjlagQ,37
-flock_core-0.4.515.dist-info/licenses/LICENSE,sha256=iYEqWy0wjULzM9GAERaybP4LBiPeu7Z1NEliLUdJKSc,1072
-flock_core-0.4.515.dist-info/RECORD,,
+flock_core-0.4.517.dist-info/METADATA,sha256=ofFT82sCre9PCN_3qdS4c9jz8mwCAAEUb4SYX01jQBY,22786
+flock_core-0.4.517.dist-info/WHEEL,sha256=qtCwoSJWgHk21S1Kb4ihdzI2rlJ1ZKaIurTj_ngOhyQ,87
+flock_core-0.4.517.dist-info/entry_points.txt,sha256=rWaS5KSpkTmWySURGFZk6PhbJ87TmvcFQDi2uzjlagQ,37
+flock_core-0.4.517.dist-info/licenses/LICENSE,sha256=iYEqWy0wjULzM9GAERaybP4LBiPeu7Z1NEliLUdJKSc,1072
+flock_core-0.4.517.dist-info/RECORD,,