Hand over your repo.
Take a seat.
+quc takes a public GitHub repo and one line of task, then does whatever it wants to your code while you watch from the corner. No approve buttons. No edits. You get a chair, a safeword, and a replay.
+ +
+
+The cageIt works on its own copy, fully unsupervised. Your repo is never touched.
+The chairYou watch every change land, live and read-only, while it talks down to you.
+The safewordOne button. Everything stops and its work is thrown away.
+The magic wordsSay the right thing and it lets you speak, veto a file, or take the wheel.
+Loading…
+ + +
+
+
+
+
+
-`;
-const headers = (type, extra = {}) => ({ "content-type": type, ...extra });
+async function api(req, env, url) {
+ const store = env.KV || fallback;
+ const path = url.pathname;
+ if (path === "/api/health") return json({ ok: true, rev: env.REV || "", live: !!env.VENICE_API_KEY });
+ if (req.method === "POST") {
+ const origin = req.headers.get("origin");
+ if (origin && origin !== url.origin) return json({ error: "cross-site request" }, 403);
+ }
+ let visitor = visitorOf(req);
+ const setCookie = {};
+ if (!visitor) {
+ visitor = crypto.randomUUID().replace(/-/g, "");
+ setCookie["set-cookie"] = `${COOKIE}=${visitor}; Path=/; Max-Age=31536000; HttpOnly; SameSite=Lax${url.protocol === "https:" ? "; Secure" : ""}`;
+ }
+ const body = req.method === "POST" ? await req.json().catch(() => ({})) : {};
+
+ if (path === "/api/runs" && req.method === "POST") {
+ try {
+ const repo = String(body.repo || "").trim(), task = String(body.task || "").trim();
+ const active = await store.get(`active:${visitor}`);
+ if (!active && !(await underCap(store, visitor, env))) return json({ error: "That's enough for today. The chair needs a rest; come back tomorrow." }, 429, setCookie);
+ const run = await createRun(store, { repo, task, visitor });
+ return json({ id: run.id }, 201, setCookie);
+ } catch (e) {
+ if (e.code === "active") return json({ error: e.message, id: e.id }, 409, setCookie);
+ if (e.code === "invalid") return json({ error: Object.values(e.errors)[0], errors: e.errors }, 400, setCookie);
+ throw e;
+ }
+ }
+
+ const m = path.match(/^\/api\/runs\/([a-z0-9]{6,16})(?:\/(step|safeword|say|patch))?$/);
+ if (!m) return json({ error: "not found" }, 404);
+ const [, id, action] = m;
+ const run = await getRun(store, id);
+ if (!run) return json({ error: "no such run" }, 404, setCookie);
+ const owner = run.visitor === visitor;
+
+ if (!action && req.method === "GET") {
+ const after = Number(url.searchParams.get("after")) || 0;
+ const events = (await getEvents(store, id)).filter((e) => e.seq > after);
+ return json({ run: publicRun(run), events, owner }, 200, setCookie);
+ }
+ if (action === "patch" && req.method === "GET") {
+ const text = await patch(store, id);
+ return new Response(text, { headers: { "content-type": "text/x-diff; charset=utf-8", "content-disposition": `attachment; filename="quc-${id}.patch"` } });
+ }
+ if (req.method !== "POST") return json({ error: "method not allowed" }, 405);
+ if (!owner) return json({ error: "Only the one in the chair can do that." }, 403, setCookie);
+ try {
+ if (action === "step") return json({ run: publicRun(await step(store, id, env)) });
+ if (action === "safeword") return json({ run: publicRun(await safeword(store, id)) });
+ if (action === "say") return json({ reply: await say(store, id, body.text) });
+ } catch (e) {
+ if (e.code) return json({ error: e.message }, 400);
+ throw e;
+ }
+ return json({ error: "not found" }, 404);
+}
export default {
async fetch(req, env = {}) {
- const { pathname } = new URL(req.url);
+ const url = new URL(req.url);
+ try {
+ if (url.pathname.startsWith("/api/")) return await api(req, env, url);
+ } catch (e) {
+ return json({ error: "Something broke in the corner: " + String(e.message || e).slice(0, 200) }, 500);
+ }
if (req.method !== "GET" && req.method !== "HEAD") return new Response("method not allowed", { status: 405 });
- if (pathname === "/api/health") return Response.json({ ok: true, rev: env.REV || "" }, { headers: { "cache-control": "no-store" } });
- if (pathname === "/chair.svg") return new Response(CHAIR, { headers: headers("image/svg+xml", { "cache-control": "public, max-age=3600" }) });
- if (pathname === "/" || pathname === "/index.html" || /^\/run\/[\w-]+$/.test(pathname)) return new Response(PAGE, { headers: headers("text/html; charset=utf-8") });
+ if (url.pathname === "/chair.svg") return new Response(CHAIR, { headers: { "content-type": "image/svg+xml", "cache-control": "public, max-age=3600" } });
+ if (url.pathname === "/" || url.pathname === "/index.html" || /^\/run\/[\w-]+$/.test(url.pathname))
+ return new Response(PAGE, { headers: { "content-type": "text/html; charset=utf-8", "x-frame-options": "DENY", "referrer-policy": "same-origin" } });
return new Response("not found", { status: 404 });
},
};