Comicke — AI Comic & Book Maker

Status: live and browsable at comicke.com; last commit 2026-07-04, no changes since; selling not enabled. The application is real and substantial — a full creation app with auth, payments, storage, and four image providers. The apex now serves the Cloudflare Worker build directly (the earlier 500 came from a stale, broken Pages deployment holding the domain). Checkout is wired via Polar but live selling is intentionally not enabled yet. Source is private.

An AI comic and book maker. Describe a scene, choose an image provider, and the app generates comic-book panels; you then assemble them into projects and edit them. Built to make sequential-art creation as fast as writing a prompt.

What’s Built

• Creation flow — scene description → provider selection → generated comic panel → stored to object storage → assembled into editable projects.
• Four image providers — Gemini, Fal, Replicate, and Hugging Face, selectable per generation.
• Real app infrastructure — custom auth (PBKDF2, with email verification enforced at sign-in), Polar payments, Resend transactional email, and R2 object storage, all behind a typed app surface.
• Adversarial simulation suite — sim/harden.ts exercises the security- and correctness-critical pure logic against hostile inputs: the SSRF guard (cloud-metadata address, localhost, RFC1918 ranges, IPv6 loopback, .internal, non-HTTP schemes are each asserted blocked), fractal crop clamping, prompt building, and secret encryption. It runs as a required CI step (npm run sim) in the build job.
• Account internals — an admin dashboard (users, gallery, settings), per-user provider API keys stored encrypted rather than in plaintext, and Photon WASM watermarking applied to generated images on the free and trial tiers.
• Recent direction — “Fractal Comics” infinite-zoom storytelling (recursive outpainting) landed 2026-06-03, pointing the product toward open-ended, explorable narratives; the last commit (2026-07-04) hardened the Cloudflare Workers deploy path, replacing a broken Pages build.

What’s Not Yet Built

• PDF export. jspdf is a dependency and a canExportPdf tier flag exists and is displayed in settings, but nothing imports the library and nothing reads the flag to trigger an export — there is no export code path of any kind. The repo’s own README reconciliation lists it under future developments. The live landing page still advertises it, which is a copy fix owed on the app side.
• Push-to-deploy. CI (vite build + tsc --noEmit, then the simulation suite) runs on every push and the latest main run, 2026-07-04, is green. The deploy job is wired but inert: its Cloudflare step is guarded on CLOUDFLARE_API_TOKEN, the repo has no secrets set, and both main runs that have reached that step skipped it — so deploys are currently manual (npm run deploy).

Technical Stack

• Framework: TanStack Start + React 19 + Vite, deployed on Cloudflare Workers
• Data: PostgreSQL via Drizzle ORM
• Auth: custom PBKDF2
• Storage: Cloudflare R2 (generated panels & project assets)
• Payments / email: Polar · Resend
• Image generation: Gemini · Fal · Replicate · Hugging Face

What’s Needed For This Entry To Tighten

• The public demo at comicke.com is now live (apex served by the Cloudflare Worker).
• Remaining gap: the source is private, so a public, inspectable artifact would let the implementation be evaluated without private access. Everything under “What’s Built” is currently taken on trust.
• Setting the CLOUDFLARE_API_TOKEN and CLOUDFLARE_ACCOUNT_ID repo secrets would make the push-to-deploy claim true instead of pending.