Upload 2 files

README.md

@@ -43,7 +43,7 @@ Type freely to converse with two characters whose names, backstories, and person
 
 ### AI Pipeline
 
-All AI calls route through Hugging Face Spaces. Players sign in with their Hugging Face account on the start page, and dialogue and character generation run on their own Inference Providers credits — the Spaces hold no API keys.
+All AI calls route through Hugging Face Spaces. Visitors can play free up to a per-visitor token allowance; after that, or from the start if they prefer, they sign in with their Hugging Face account and dialogue and character generation run on their own Inference Providers credits. No API keys are exposed to the client.
 
 #### Dialogue Model
 **Endpoint:** `jejunepixels-noexit-proxy.hf.space/chat`

index.html

@@ -360,12 +360,13 @@
                     <button type="button" class="signin-btn" id="signin-btn">
                         <img src="https://huggingface.co/datasets/huggingface/badges/resolve/main/sign-in-with-huggingface-xl-dark.svg" alt="Sign in with Hugging Face">
                     </button>
-                    <p class="auth-note">The characters run on your own Hugging Face inference credits. Sign in to play — no API key needed.</p>
-                    <p class="auth-note" id="auth-newtab-note" hidden>Sign-in opens the game in a new tab.</p>
+                    <p class="auth-note" id="auth-free-note">Play free for a while, or sign in with Hugging Face to use your own inference credits — no API key needed.</p>
+                    <p class="auth-note" id="auth-newtab-note" hidden>The game and sign-in open in a new tab.</p>
                 </div>
                 <div id="auth-signed-in" hidden>
                     <p class="auth-user">Signed in as <strong id="auth-username"></strong> · <a href="#" id="signout-link">Sign out</a></p>
                     <p class="auth-note">Dialogue is billed to your Hugging Face inference credits.</p>
+                    <p class="auth-note" id="auth-return-note" hidden>You're signed in — go back to the game tab to continue.</p>
                 </div>
                 <p class="auth-error" id="auth-error" hidden></p>
             </div>
@@ -400,18 +401,29 @@
                 (state === 'ready' ? ' ready' : state === 'error' ? ' error' : '');
         }
 
-        // Set by the sign-in script below once a valid Hugging Face token is stored.
+        // Set by the sign-in script below: a visitor can play when they are signed in
+        // with Hugging Face, or while they still have free play left on the proxy.
         var signedIn = false;
+        var freePlay = false;
 
         function checkAllReady(enterBtn, titleEl) {
             var systemsReady = SPACES.every(s => s.ready);
             if (systemsReady) titleEl.textContent = 'Systems Ready';
-            enterBtn.classList.toggle('disabled', !(systemsReady && signedIn));
+            enterBtn.classList.toggle('disabled', !(systemsReady && (signedIn || freePlay)));
+        }
+
+        function refreshEnter() {
+            checkAllReady(document.getElementById('enter-btn'), document.querySelector('.status-panel-title'));
         }
 
         window.setSignedIn = function(value) {
             signedIn = value;
-            checkAllReady(document.getElementById('enter-btn'), document.querySelector('.status-panel-title'));
+            refreshEnter();
+        };
+
+        window.setFreePlay = function(value) {
+            freePlay = value;
+            refreshEnter();
         };
 
         async function pollSpace(space, enterBtn, titleEl) {
@@ -483,9 +495,16 @@
         // inference is billed to the signed-in player.
         const STORAGE_KEY = 'noexit_hf_oauth';
         const HUB_URL = 'https://cdn.jsdelivr.net/npm/@huggingface/hub@2.17.5/+esm';
+        const FREE_STATUS_URL = 'https://jejunepixels-noexit-proxy.hf.space/free/status';
+        // Set when this page was opened by the game's own sign-in prompt, and kept
+        // across the trip to the Hugging Face login page.
+        const FROM_GAME_KEY = 'noexit_signin_from_game';
 
         // The Hugging Face login page cannot load inside the Space's frame on
         // huggingface.co, so when framed the flow moves to a new tab on this URL.
+        // The game opens in a new tab too: a framed page gets separate browser
+        // storage, and the game must share storage with the sign-in page to pick
+        // up a sign-in made while playing.
         const framed = window.self !== window.top;
         const pageUrl = window.location.origin + window.location.pathname;
         const params = new URLSearchParams(window.location.search);
@@ -518,6 +537,31 @@
             window.setSignedIn(!!auth);
         }
 
+        // Ask the proxy whether this visitor still has free play. The proxy may be
+        // waking up, so keep trying for a while; until it answers, Enter needs sign-in.
+        async function checkFreePlay() {
+            const noteEl = document.getElementById('auth-free-note');
+            for (let attempt = 0; attempt < 24; attempt++) {
+                try {
+                    const res = await fetch(FREE_STATUS_URL);
+                    if (res.ok) {
+                        const status = await res.json();
+                        const available = !!status.enabled && status.remaining > 0;
+                        window.setFreePlay(available);
+                        if (!available) {
+                            noteEl.textContent = status.enabled
+                                ? 'Your free play is used up — sign in with Hugging Face to continue on your own inference credits.'
+                                : 'Sign in with Hugging Face to play on your own inference credits — no API key needed.';
+                        }
+                        return;
+                    }
+                    if (res.status === 404) break;   // proxy without free play
+                } catch (e) {}
+                await new Promise(function(r) { setTimeout(r, 5000); });
+            }
+            noteEl.textContent = 'Sign in with Hugging Face to play on your own inference credits — no API key needed.';
+        }
+
         let hub = null;
         async function loadHub() {
             if (!hub) hub = await import(HUB_URL);
@@ -530,6 +574,9 @@
                 window.open(pageUrl + '?signin=1', '_blank', 'noopener');
                 return;
             }
+            if (params.get('from') === 'game') {
+                try { sessionStorage.setItem(FROM_GAME_KEY, '1'); } catch (e) {}
+            }
             const vars = window.huggingface && window.huggingface.variables;
             if (!vars || !vars.OAUTH_CLIENT_ID) {
                 showError('Sign-in is not set up for this Space yet.');
@@ -569,6 +616,22 @@
         }
 
         document.getElementById('auth-newtab-note').hidden = !framed;
+
+        if (framed) {
+            // Whether the visitor may play is settled in the game's own tab.
+            document.getElementById('enter-btn').target = '_blank';
+            window.setFreePlay(true);
+        } else {
+            checkFreePlay();
+        }
+
+        // Sign-in started from the game's prompt: point the player back to that tab.
+        try {
+            if (auth && (params.get('from') === 'game' || sessionStorage.getItem(FROM_GAME_KEY))) {
+                document.getElementById('auth-return-note').hidden = false;
+                sessionStorage.removeItem(FROM_GAME_KEY);
+            }
+        } catch (e) {}
         document.getElementById('signin-btn').addEventListener('click', startSignIn);
         document.getElementById('signout-link').addEventListener('click', function(event) {
             event.preventDefault();