infrastructureNewTier 1 · MIT / Apache 2.0
Launch a Clutch-style B2B directory in a weekend.
Full Next.js 15 directory SaaS with Stripe tiered submissions, Resend transactional emails, statically generated SEO pages with Schema.org markup, category-filtered browse UI, featured listing tier, and pre-seeded data. TypeScript + Tailwind.
- ✓Statically generated SEO pages with Schema.org JSON-LD
- ✓Stripe two-tier submissions ($49 standard / $99 featured)
- ✓Resend confirmation + owner notification emails
- ✓Category-filtered browse with search bar
- ✓Featured listing tier with star badge
- ✓Pre-seeded data (30 listings) to solve cold start
- ✓TypeScript + Tailwind + Next.js 15 source code
Tier 1 open-core — MIT or Apache 2.0. Community improvement flywheel; no proprietary pipeline logic included. Pipeline integrity protocol excluded (Tier 3).
financeTier 2 · BSL 1.1
Double-entry ledger, escrow, and audit trail. Production-ready.
Immutable double-entry ledger with escrow workflows, batch settlement, audit trail, and reconciliation. Prisma + Postgres. Drop into any Next.js app. Includes SOC2-adjacent compliance helpers, USD fiat settlement workflows, and integrity snapshots for audit evidence.
- ✓Double-entry LedgerEntry model
- ✓Escrow lock / release / dispute flow
- ✓Batch settlement with atomic transactions
- ✓USD fiat settlement fee preview and batch settlement
- ✓Redacted audit logger with request context
- ✓SOC2 integrity snapshots (input/output hash)
- ✓Proof-of-reserves stubs
- ✓Invoice generation with React-PDF
License: Business Source License (BSL 1.1) — non-commercial use free; commercial use requires a Flomisma license. Converts to Apache 2.0 after 4 years. Pipeline integrity protocol excluded (Tier 3).
relayinfrastructureTier 1 · MIT / Apache 2.0
WebSocket relay that never touches disk. Stateless by design.
The complete relay service from apps/relay/ — standalone, documented, and ready to deploy. Includes quota manager, room manager, API key rotation with zero-downtime grace slots, and metrics server. ESLint rules, strace CI, and readonlyRootFS config enforce zero persistence.
- ✓In-memory quota enforcement by tier
- ✓Tenant-isolated room namespacing
- ✓HMAC API key issuance and rotation (2-slot)
- ✓Metrics HTTP server (internal)
- ✓ESLint rules enforcing zero-persistence
- ✓Dockerfile with healthcheck + non-root
- ✓Stress tests (10k connections, 1k rooms)
Tier 1 open-core — MIT or Apache 2.0. Community improvement flywheel; no proprietary pipeline logic included. Pipeline integrity protocol excluded (Tier 3).
infrastructureTier 2 · BSL 1.1
Multi-tenant architecture foundation. You bring your own billing.
Architecture foundation for a multi-tenant Next.js 15 SaaS. Includes Supabase auth, Prisma, Row-Level Security, per-tenant branding, and admin dashboard. No Stripe or deployment script included — bring your own payment stack. The foundation that took 6 months of sprints to build — yours in one purchase.
- ✓Tenant isolation via Postgres RLS
- ✓Host-based and slug-based tenant routing
- ✓Supabase auth with per-tenant sessions
- ✓Admin dashboard with health monitoring
- ✓Per-tenant branding and custom domains
- ✓Does NOT include Stripe billing or deployment automation
License: Business Source License (BSL 1.1) — non-commercial use free; commercial use requires a Flomisma license. Converts to Apache 2.0 after 4 years. Pipeline integrity protocol excluded (Tier 3).
aiTier 2 · BSL 1.1
Claude-powered brief parsing and provider matching
Natural language concierge that parses client briefs, matches providers via AI semantic matching, and orchestrates booking packages. Extracted from a production marketplace — works for any vertical.
- ✓Anthropic Claude-powered intent parsing from free-text briefs
- ✓Provider scoring and package assembly
- ✓Email and SMS notification orchestration
- ✓Human review guardrails above configurable thresholds
- ✓Vertical-agnostic — customize for any marketplace
License: Business Source License (BSL 1.1) — non-commercial use free; commercial use requires a Flomisma license. Converts to Apache 2.0 after 4 years. Pipeline integrity protocol excluded (Tier 3).
infrastructureTier 2 · BSL 1.1
HMAC-signed verifiable credentials with SVG badges
Cryptographically signed credential verification system. Generates public credential JSON endpoints and tamper-proof SVG badge images. Verifiable without a central database — signature is the proof.
- ✓HMAC-SHA256 signed credential payloads
- ✓Public JSON + SVG badge endpoints per credential
- ✓Tamper-evident — signature verification without DB lookup
- ✓Provider profile embedding with metadata
- ✓Ideal for professional marketplaces and certification platforms
License: Business Source License (BSL 1.1) — non-commercial use free; commercial use requires a Flomisma license. Converts to Apache 2.0 after 4 years. Pipeline integrity protocol excluded (Tier 3).
monitoringinfrastructureTier 2 · BSL 1.1
SLA monitoring, rate limiting, and incident detection
Production-grade automation infrastructure: SLA uptime monitoring with status escalation, token-bucket rate limiting per endpoint, security incident detection and logging, and health metrics collection. Grab-and-go for any marketplace backend.
- ✓SLA monitor with configurable thresholds and auto-escalation
- ✓Rate limiter with Redis-compatible token bucket
- ✓Security incident detection and audit trail capture
- ✓Health metrics aggregation with Prometheus-compatible output
- ✓Automation job scheduling with cron orchestration
License: Business Source License (BSL 1.1) — non-commercial use free; commercial use requires a Flomisma license. Converts to Apache 2.0 after 4 years. Pipeline integrity protocol excluded (Tier 3).
aiinfrastructureTier 2 · BSL 1.1
Model Context Protocol for LLM tool execution
Expose your platform to AI agents via the Model Context Protocol (MCP). Includes agent-key authentication, typed tool definitions, and recommendation engine. Agents discover and invoke your APIs as tools — no custom integration code needed.
- ✓MCP-standard tool definitions with typed schemas
- ✓Agent-key authentication with least-privilege tenant scoping
- ✓Recommendation engine integration example
- ✓Next.js-native — deploy as API route
- ✓Future-proof for the AI agent ecosystem
License: Business Source License (BSL 1.1) — non-commercial use free; commercial use requires a Flomisma license. Converts to Apache 2.0 after 4 years. Pipeline integrity protocol excluded (Tier 3).
financeaiTier 2 · BSL 1.1
7-factor risk scoring. Block HIGH/CRITICAL agents pre-transaction.
Real-time agent risk assessment for AI marketplace governance. Evaluates 7 factors — dispute rate, slash rate, cancel rate, audit failure rate, SLA breach rate, governance alert rate, and arbitration favorability — producing a 0–100 composite score mapped to 5 risk bands (LOW, MODERATE, ELEVATED, HIGH, CRITICAL). Includes immutable evidence log, SOC2-ready risk snapshots, and pre-transaction blocking. Drop into any Next.js + Prisma escrow marketplace.
- ✓7-factor composite risk scoring engine
- ✓5 risk bands with configurable thresholds
- ✓Immutable EvalEvidence event log with idempotency
- ✓Pre-transaction HIGH/CRITICAL agent blocking
- ✓SOC2-ready risk score snapshots for audit
- ✓Admin risk dashboard with per-agent drill-down
- ✓Vercel Cron hourly recomputation
- ✓5-line integration into arbitration-service.ts
License: Business Source License (BSL 1.1) — non-commercial use free; commercial use requires a Flomisma license. Converts to Apache 2.0 after 4 years. Pipeline integrity protocol excluded (Tier 3).
infrastructureTier 2 · BSL 1.1
Same architecture + Stripe billing + one-command deploy.
Everything in the Multi-Tenant SaaS Starter, plus Stripe checkout and webhooks, subscription management, custom domain setup, and a one-command deployment script. Deploy a production-ready B2B SaaS in 10 minutes — not 6 months.
- ✓Everything in the Multi-Tenant SaaS Starter
- ✓Stripe checkout, webhooks, and subscription management
- ✓One-command deployment script
- ✓Custom domain and SSL setup
- ✓Per-tenant branded email templates
License: Business Source License (BSL 1.1) — non-commercial use free; commercial use requires a Flomisma license. Converts to Apache 2.0 after 4 years. Pipeline integrity protocol excluded (Tier 3).