Inline submit — no page navigation, everything in background #5
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,93 @@ | ||
| /** | ||
| * Cloudflare Worker — repo request proxy | ||
| * | ||
| * Receives a repo URL from the homepage, creates a GitHub issue | ||
| * (which triggers the auto-add-repo workflow), and returns immediately. | ||
| * | ||
| * Environment secrets (set via wrangler secret put): | ||
| * GITHUB_TOKEN — fine-grained PAT with issues:write on supermodeltools.github.io | ||
| * | ||
| * Deploy: | ||
| * cd worker && npx wrangler deploy | ||
| * | ||
| * Route (add in Cloudflare dashboard or wrangler.toml): | ||
| * repos.supermodeltools.com/api/* → this worker | ||
| */ | ||
|
|
||
| const CORS_HEADERS = { | ||
| 'Access-Control-Allow-Origin': 'https://repos.supermodeltools.com', | ||
| 'Access-Control-Allow-Methods': 'POST, OPTIONS', | ||
| 'Access-Control-Allow-Headers': 'Content-Type', | ||
| }; | ||
|
|
||
| const REPO_RE = /github\.com\/([a-zA-Z0-9._-]+\/[a-zA-Z0-9._-]+)/; | ||
|
|
||
| export default { | ||
| async fetch(request, env) { | ||
| if (request.method === 'OPTIONS') { | ||
| return new Response(null, { status: 204, headers: CORS_HEADERS }); | ||
| } | ||
|
|
||
| if (request.method !== 'POST') { | ||
| return jsonResponse({ error: 'Method not allowed' }, 405); | ||
| } | ||
|
|
||
| let body; | ||
| try { | ||
| body = await request.json(); | ||
| } catch { | ||
| return jsonResponse({ error: 'Invalid JSON' }, 400); | ||
| } | ||
|
|
||
| const url = (body.url || '').trim().replace(/\/+$/, '').replace(/\.git$/, ''); | ||
| const match = url.match(REPO_RE); | ||
| if (!match) { | ||
| return jsonResponse({ error: 'Invalid GitHub repository URL' }, 400); | ||
| } | ||
|
|
||
| const upstream = match[1]; | ||
| const name = upstream.split('/')[1]; | ||
|
||
|
|
||
| // Create the GitHub issue — this triggers auto-add-repo.yml | ||
| const ghResponse = await fetch( | ||
| 'https://api.github.com/repos/supermodeltools/supermodeltools.github.io/issues', | ||
| { | ||
| method: 'POST', | ||
| headers: { | ||
| Authorization: `Bearer ${env.GITHUB_TOKEN}`, | ||
| Accept: 'application/vnd.github+json', | ||
| 'User-Agent': 'supermodel-request-bot', | ||
| 'Content-Type': 'application/json', | ||
| }, | ||
| body: JSON.stringify({ | ||
| title: `[Repo Request] ${name}`, | ||
| body: `### Repository URL\n\nhttps://github.com/${upstream}`, | ||
| labels: ['repo-request'], | ||
| }), | ||
| } | ||
| ); | ||
|
|
||
| if (!ghResponse.ok) { | ||
| const err = await ghResponse.text(); | ||
| console.error('GitHub API error:', ghResponse.status, err); | ||
| return jsonResponse({ error: 'Failed to submit request. Please try again.' }, 502); | ||
| } | ||
|
|
||
| const issue = await ghResponse.json(); | ||
|
|
||
| return jsonResponse({ | ||
| success: true, | ||
| name, | ||
| upstream, | ||
| docs_url: `https://repos.supermodeltools.com/${name}/`, | ||
| issue_url: issue.html_url, | ||
| }); | ||
| }, | ||
| }; | ||
|
|
||
| function jsonResponse(data, status = 200) { | ||
| return new Response(JSON.stringify(data), { | ||
| status, | ||
| headers: { 'Content-Type': 'application/json', ...CORS_HEADERS }, | ||
| }); | ||
| } | ||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,7 @@ | ||
| name = "repo-request" | ||
| main = "index.js" | ||
| compatibility_date = "2024-01-01" | ||
|
|
||
| # Route: intercept /api/* on the custom domain | ||
| # Requires the domain to be proxied through Cloudflare | ||
| # routes = [{ pattern = "repos.supermodeltools.com/api/*", zone_name = "supermodeltools.com" }] |
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Avoid
innerHTMLfor feedback messages.Line [554]usesinnerHTMLfor text/status content. If backend error strings ever contain HTML, this becomes an XSS sink. Use plain text rendering here.Suggested fix
function showFeedback(msg, type) { feedback.className = 'submit-feedback visible ' + type; - feedback.innerHTML = msg; + feedback.textContent = msg; }📝 Committable suggestion
🤖 Prompt for AI Agents