Microsecond Inter-Worker Calls
Service Bindings: V8-to-V8, sub-ms, no public east-west path.
- <1ms internal
- No TLS hop
- No DNS
- No public endpoints
AI Risk Manager
The agent-worker executes on a fixed 5-minute cron. It maintains portfolio state, applies trailing-stop logic, enforces drawdown limits via the Global Kill Switch, and invokes a multi-provider LLM gateway (5 endpoints) with automatic failover and Vectorize-backed retrieval over historical trades.
- 5-minute cron execution
- 5-provider LLM gateway
- Autonomous risk controls
- Vectorize RAG (384-d)
Two-Phase DO Dedup
IdempotencyStore reserves the key as pending before dispatch, commits only on true success, and releases soft-fails so retries can proceed. Missing DO fails closed. Client Idempotency-Key preferred; auto fingerprints include a per-minute bucket.
- reserve / commit / release
- Fail-closed if missing
- Client keys preferred
- TTL + alarms
Async Delivery & Retry
Cloudflare® Queues provide guaranteed-delivery fallback when the fast-path Service Binding is unavailable. Failed messages retry with exponential backoff — 30 seconds to 15 minutes — ensuring no signal is lost during exchange downtime.
- Guaranteed delivery
- 30s → 15min backoff
- Exchange downtime safe
- Rate-limit resilient
Atomic Rate Limiter DO
RateLimiterStore Durable Object enforces 10 requests per 60s per session across isolates. When the DO is unbound, the gateway falls back to KV then in-memory — still protecting exchange APIs from misconfigured strategies.
- 10 req / 60s
- Atomic DO counter
- KV / memory fallback
- API ban prevention
Zero Trust Architecture
Internal workers have zero public HTTP routes — Service Bindings only. Timing-safe webhook keys, chatId allowlists, named D1 RPCs on hot paths, and fail-closed internal auth. Secrets live in Wrangler bindings, not logs.
- No public east-west
- ChatId allowlists
- Named D1 RPCs
- CSP + HSTS headers
Multi-Exchange Routing
Execute across Binance, Bybit, and MEXC through a unified ExchangeRouter abstraction. Routing is stored in CONFIG_KV — redirect any symbol to a different exchange instantly without code deployment or downtime.
- Binance · Bybit · MEXC
- KV-based live routing
- No redeploy required
- Typed IExchangeProvider
Zero Infrastructure Cost
Built entirely on Cloudflare® free tier: 100K Worker requests/day, 1GB D1 global SQLite, 1GB R2 object storage, 1M KV reads/day, 10 min/day Browser Rendering, and unlimited Analytics Engine writes. $0/month.
- $0/month possible
- 100K requests/day free
- 1GB D1 + 1GB R2 free
- Analytics Engine free
Telegram AI Copilot
The telegram-worker embeds a RAG-powered assistant backed by Cloudflare® Vectorize (384-dimensional embeddings). /search queries documentation semantically, /ask provides answers with citations, /latest retrieves market intelligence summaries.
- /search semantic docs
- /ask with citations
- /latest intel
- 384-d Vectorize
Web3 Wallet Agent
Manage an ethers.js v6 wallet for on-chain operations directly from the edge. Execute DEX swaps, call smart contracts, and interact with DApps via Cloudflare® Browser Rendering — all through the same Service Binding mesh as CEX trading.
- ethers.js v6 on-chain
- DEX swaps + contract calls
- Browser Rendering DApps
- Secrets Store keys
Real-Time Observability
Every API call, trade execution, and worker health event is tracked as a time-series event via Cloudflare® Analytics Engine — free on all plans. R2 offloads verbose logs to preserve D1 write limits for critical financial data.
- Analytics Engine free
- Latency + error tracking
- R2 log offloading
- Dashboard-powered
Developer Experience
Bun monorepo with 28 CLI command groups and 100+ subcommands covering onboard, dev, deploy, infra, config, secrets, check, repair, test, db, monitor, trace, perf, waf, and more. Interactive TUI hot-reloads all 10 workers simultaneously. 65 CLI test files, 2,600+ assertions (~1,260 tests).
- 28 CLI command groups
- 100+ subcommands
- 65 CLI test files
- 2,600+ assertions