Name: HOOX
Author: HOOX

CLOUDFLARE EDGE

SYS: ONLINE/PEERS 330+/UPTIME 99.99%

ULL22ms

Edge-native Algorithmic Trading Framework

A production-grade stack built on Cloudflare Workers. Signals are validated and executed in V8 isolates colocated with exchange APIs, delivering median signal-to-ack latencies of 22 ms from 330+ global points of presence.

[330+]

Edge Locations

[<50ms]

Global Latency

[12x]

Edge Components

[$0]

Monthly Cost

Get Started View on GitHub Deploy to Cloudflare Explore

Ultra Low Latency

100% Open Source

Zero Infrastructure Cost

TypeScript Native

[ SCROLL ▼ ]

01 / The Edge Advantage13 production modules

[THE EDGE ADVANTAGE]

An edge-native trading architecture that collapses the traditional signal-to-execution path. All inter-component communication occurs via Cloudflare Service Bindings with sub-millisecond overhead: no public internet traversal, no TLS handshakes, and no DNS resolution between microservices. The modules below describe what that topology yields in production.

EXECUTION

Edge-Native Trading

Ten V8 isolates on 330+ PoPs. Smart Placement sits next to the exchange — 30–60% less geo RTT.

~22 ms median
330+ PoPs
10 isolates
Smart Placement

EXECUTION

Microsecond Inter-Worker Calls

Service Bindings: V8-to-V8, sub-ms, no public east-west path.

<1ms internal
No TLS hop
No DNS
No public endpoints

INTELLIGENCE

AI Risk Manager

The agent-worker executes on a fixed 5-minute cron. It maintains portfolio state, applies trailing-stop logic, enforces drawdown limits via the Global Kill Switch, and invokes a multi-provider LLM gateway (5 endpoints) with automatic failover and Vectorize-backed retrieval over historical trades.

5-minute cron execution
5-provider LLM gateway
Autonomous risk controls
Vectorize RAG (384-d)

EXECUTION

Durable Object Dedup

Every trade signal is assigned a unique trace ID. The IdempotencyStore Durable Object — backed by SQLite with TTL-based cleanup — checks if that ID was already processed. Duplicate webhooks are silently dropped even across cold starts.

SQLite-backed DO
TTL auto-cleanup
Trace IDs end-to-end
Cold-start safe

EXECUTION

Async Delivery & Retry

Cloudflare Queues provide guaranteed-delivery fallback when the fast-path Service Binding is unavailable. Failed messages retry with exponential backoff — 30 seconds to 15 minutes — ensuring no signal is lost during exchange downtime.

Guaranteed delivery
30s → 15min backoff
Exchange downtime safe
Rate-limit resilient

SECURITY

KV-Backed Rate Limiter

A 10-trades-per-minute rate limiter persisted in CONFIG_KV, surviving worker cold starts. When KV is unreachable the limiter falls back to in-memory state without dropping requests. Prevents API bans from misconfigured strategies.

10 trades/min limit
KV-persisted across restarts
In-memory fallback
API ban prevention

SECURITY

Zero Trust Architecture

trade-worker and d1-worker have zero public HTTP endpoints — accessible only via Service Bindings from the hoox gateway. API keys are injected directly into the V8 isolate at runtime, never stored in plaintext or logs.

No public endpoints
V8 isolate secrets
WAF IP allowlist
CSP + HSTS headers

EXECUTION

Multi-Exchange Routing

Execute across Binance, Bybit, and MEXC through a unified ExchangeRouter abstraction. Routing is stored in CONFIG_KV — redirect any symbol to a different exchange instantly without code deployment or downtime.

Binance · Bybit · MEXC
KV-based live routing
No redeploy required
Typed IExchangeProvider

DATA

Zero Infrastructure Cost

Built entirely on Cloudflare's free tier: 100K Worker requests/day, 1GB D1 global SQLite, 1GB R2 object storage, 1M KV reads/day, 10 min/day Browser Rendering, and unlimited Analytics Engine writes. $0/month.

$0/month possible
100K requests/day free
1GB D1 + 1GB R2 free
Analytics Engine free

INTELLIGENCE

Telegram AI Copilot

The telegram-worker embeds a RAG-powered assistant backed by Cloudflare Vectorize (384-dimensional embeddings). /search queries documentation semantically, /ask provides answers with citations, /latest retrieves market intelligence summaries.

/search semantic docs
/ask with citations
/latest intel
384-d Vectorize

DEFI

Web3 Wallet Agent

Manage an ethers.js v6 wallet for on-chain operations directly from the edge. Execute DEX swaps, call smart contracts, and interact with DApps via Cloudflare Browser Rendering — all through the same Service Binding mesh as CEX trading.

ethers.js v6 on-chain
DEX swaps + contract calls
Browser Rendering DApps
Secrets Store keys

DATA

Real-Time Observability

Every API call, trade execution, and worker health event is tracked as a time-series event via Cloudflare Analytics Engine — free on all plans. R2 offloads verbose logs to preserve D1 write limits for critical financial data.

Analytics Engine free
Latency + error tracking
R2 log offloading
Dashboard-powered

TOOLING

Developer Experience

Bun monorepo with 28 CLI command groups and 100+ subcommands covering onboard, dev, deploy, infra, config, secrets, check, repair, test, db, monitor, trace, perf, waf, and more. Interactive TUI hot-reloads all 10 workers simultaneously. 58 CLI test files, 1,000+ assertions.

28 CLI command groups
100+ subcommands
58 CLI test files
1,000+ assertions

13 modules in viewHOOX::EDGE_STACK / v1

02 / Core Principles

[WHY HOOX]

Six constraints that kill VPS bot stacks — and how HOOX is built around them.

Ultra Low Latency

Milliseconds determine profit or loss.

Deploy next to the exchange. Smart Placement picks the PoP — not a fixed region you guessed wrong.

<50msglobal path

330+PoPs

30-60%vs plain edge

Service Bindings

Direct function calls. No HTTP overhead.

Workers talk over Service Bindings only. No public URL between microservices.

<1msinternal

0public east-west

V8mesh

Autonomous AI

Risk management that thinks for itself.

Agent-worker runs 5-minute cron cycles — adjusting trailing stops, triggering kill-switches, and routing queries through a 5-provider LLM gateway with automatic fallback.

5mincron cycle

5LLM providers

384-dVectorize embeddings

Bulletproof Security

Zero Trust. Zero exposed endpoints.

Internal workers are unreachable from the public internet. API keys live in the V8 isolate runtime, not environment variables. Every request is signed, validated, and audited before execution.

0public endpoints

V8isolate secrets

WAFmanaged via CLI

Fault Tolerance

Failure is local. Resilience is global.

If telegram-worker fails, trading continues. Circuit breakers, exponential backoff, and Queue failover ensure signals are never lost — even during transient worker failures.

10+2workers + bindings

Queuefailover built-in

IdempotentDurable Objects

Edge-Native Cost

$0/mo on free tier. $0 infrastructure theatre.

No VPS to babysit. No managed database bill. No monitoring subscription. D1, KV, Queues, and Workers Observability run on Cloudflare® free tier. The real cost is latency, not hosting — Smart Placement next to the exchange is worth more than the savings.

$0free tier viable

12xcheaper than VPS stack

Autoscales to zero

1/6

[Loading section]

03 / Services

[EDGE SERVICES]

Twelve cooperating components — ten V8 isolates plus two storage bindings — form a zero-trust microservice mesh. Inter-worker traffic is carried exclusively through Cloudflare Service Bindings, achieving microsecond-scale latency with no east-west exposure on the public internet. Concerns are isolated so that failure of any single component does not compromise trade execution or risk management.

HOOX::MESH

MESH_TOPOLOGY_V4.2 // LIVE

TOPOLOGY_LOG: SYSTEM_READY

The topology implements a formal seven-stage signal lifecycle across a ten-worker mesh plus two storage bindings. Service Bindings provide direct V8-to-V8 invocation with no public routing. State is maintained through globally replicated D1, KV, R2, and Vectorize indexes, with idempotency enforced at the Durable Object layer.

CORE•Gateway & Firewall

hoox

Routes authenticated signals to the execution layer via Service Bindings, with Queue failover for reliability. Uses Durable Objects for idempotent trade execution — prevents duplicate orders even on webhook retries. Validates TradingView webhook signatures, enforces IP allowlists, and applies rate limiting.

Webhook validationIP allowlistRate limitingService Binding router

binding:hoox

CORE•Execution Engine

trade-worker

Receives validated signals and executes market/limit orders across MEXC, Binance, and Bybit. Implements dynamic position sizing, handles partial fills, maintains full order state in D1, and streams execution confirmations to Telegram.

Multi-exchange APIPosition sizingOrder state management

binding:trade-worker

INTELLIGENCE•AI Risk Manager

agent-worker

Autonomous AI agent on 5-minute cron schedules. Each cycle recomputes portfolio PnL, adjusts trailing stops, and re-evaluates drawdown — near-real-time risk control with an evaluation window of up to 5 minutes, not sub-second reactive. Generates market intelligence via multi-provider LLM gateway with Vectorize RAG for semantic search across trade history. Triggers emergency kill-switches when drawdown exceeds thresholds.

Cron-scheduledTrailing stopsKill-switchLLM gateway

binding:agent-worker

CORE•Command Center

dashboard

Next.js 16 React dashboard deployed to Cloudflare Workers via OpenNext. Real-time portfolio monitoring, position management, risk parameter configuration, and comprehensive trade history visualization.

Next.js 16Real-time updatesCloudflare Workers

binding:dashboard

CORE•Notification Service

telegram-worker

Instant trade confirmations and AI-generated market analysis delivered directly to Telegram. Supports rich formatting, position updates, and emergency alerts. Configurable notification preferences per trade type.

Telegram Bot APIRich formattingAlert preferences

binding:telegram-worker

INFRA•Data Operations Layer

d1-worker

Handles all SQL operations against Cloudflare D1. Manages trade history persistence, aggregates performance metrics via Analytics Engine, maintains audit logs, and provides query endpoints for the dashboard and report-worker.

Cloudflare D1SQL operationsPerformance metrics

binding:d1-worker

STORAGE•Configuration Store

config-kv

Cloudflare KV namespace storing runtime configuration. Exchange credentials, IP allowlists, risk parameters, and feature flags. Changes propagate globally within seconds.

Cloudflare KVGlobal propagationRuntime config

binding:config-kv

STORAGE•Object Storage

r2-storage

Cloudflare R2 bucket for large object storage. Trade logs, backtest results, and historical market data archived for analysis and compliance.

Cloudflare R2S3-compatibleArchive storage

binding:r2-storage

INTELLIGENCE•DeFi Execution Engine

web3-wallet-worker

Manages an ethers.js wallet for on-chain operations. Supports DApp interaction via Browser Rendering, executes token swaps, and interacts with smart contracts. Private key or mnemonic stored securely in Cloudflare Secrets Store.

ethers.jsOn-chain swapsBrowser RenderingSecrets Store

binding:web3-wallet-worker

CORE•Email Signal Parser

email-worker

Parses incoming trading signals from email via Mailgun webhooks. Configurable regex patterns for coin/signal detection stored in KV. Direct JSON endpoint also available for programmatic access. Forwards validated signals to the execution layer.

Mailgun webhookRegex parsingKV configurable

binding:email-worker

INFRA•Observability Layer

analytics-worker

Tracks trades, API calls, worker performance, signals, and notifications as time-series data via Cloudflare Analytics Engine. Powers the dashboard with real-time metrics and historical performance data.

Time-series dataAnalytics EngineDashboard metrics

binding:analytics-worker

INFRA•Compliance Reporter

report-worker

Generates detailed trade reports via Browser Rendering with scheduled delivery via Cron Triggers (06:00, 18:00 UTC). Streams PDF reports to R2 for compliance archiving and notifies via Email Worker when finalized. Uses Analytics Engine for historical performance aggregation.

Audit logsPDF generationR2 streamingCompliance

binding:report-worker

Service Bindings

[<1ms]

Direct V8 isolate calls — no HTTP, TLS, or DNS

Smart Placement

[30–60%]

Latency reduction via proximity routing, $0 cost

Cold Start

[<5ms]

V8 isolate initialization, no container warmup

Edge Components

[12]

10 workers + 2 storage bindings (KV, R2)

[Loading section]

04 / Intelligence

[AI GATEWAY]

Not a fixed provider list — a pluggable orchestration layer. Swap LLMs in a single configuration file, introduce new providers without migration, and run inference on cron schedules or on-demand via API. Strategy code addresses one interface; the gateway resolves routing, fallbacks, and provider health.

HOOX::AI

Architecture

Your Codestrategies · signals · analysis

HOOX Gatewayorchestration · failover · routing

Any LLMWorkers AI · OpenAI · Anthropic
Gemini · Local · Custom

Cron Scheduling

Background analysis runs on your schedule — market scans, report generation, portfolio rebalancing checks.

No polling, no manual triggers. Set it once, it runs forever.

$hoox cron add "*/5 * * * * market-scan"

On-Demand

Triggered by signals, API calls, or user actions. React to events in real time with streaming responses.

SSE streaming, batch inference, or single-shot queries.

$hoox agent call market-scan --live

Pluggable by design. Add a provider in one config file. No vendor lock-in, no migration pain.

[Loading section]

05 / vs Competitors

[HOOX VS THE FIELD]

Edge-native Workers mesh versus the stacks operators actually run: open-source bots on a VPS, SaaS bot platforms, and DIY Docker. Read each row left to right — metric → HOOX → named field — and judge latency, cost, control, and failure isolation on the same terms.

Closest matches (edge / CF Workers)

MAHORAGAOpen source

CF Workers + Durable ObjectsLLM sentiment agent · Alpaca only

SwarmsOpen source

CF Workers cron · Python/JSAgent orchestration · no trading

Open-source frameworks

FreqtradeOpen source

Python · Docker / VPS52k* · 20+ exchanges · FreqAI ML

Hummingbot + CondorOpen source

Python · Docker / VPS52k* · 50+ exchanges · LLM harness

JesseOpen source

Python · Docker / VPS8k* · cleanest strategy API

HashTradeOpen source

Python · local processMemory-driven · CCXT · polling

Traditional

Custom VPS stackDIY

Node/Python · Hetzner / DO / AWSccxt + webhooks + manual ops

Field column below = typical posture of these stacks (not a sponsored vendor bake-off).

~22 msmedian signal-to-ack

$0free-tier capable

Zero trustno open internal ports

01PerformanceSpeed, uptime, scaling9 metrics

MetricLatency

HOOX~22ms global (Smart Placement)

Field100–300ms+ (VPS / SaaS hop)

MetricCold start

HOOX<5ms V8 isolate

FieldProcess restart · container boot

MetricSmart Placement

HOOX30–60% latency reduction, $0

FieldFixed region or vendor PoP

MetricInternal calls

HOOX<1ms Service Bindings

FieldHTTP between services / monolith

MetricUptime

HOOX99.99% SLA (Cloudflare)

FieldVPS SLA or SaaS black box

MetricScaling

HOOX330+ edge locations

FieldSingle region or vendor cloud

MetricThroughput

HOOXUnlimited concurrent isolates

FieldCPU / thread limited

MetricData locality

HOOXColocated at exchange PoPs

FieldDistant fixed region

MetricAI fallback

HOOX5 providers (auto-failover)

FieldUsually none or single LLM key

02OperationsCost, deployment, maintenance11 metrics

MetricInfrastructure

HOOX$0 / month (Cloudflare free tier)

FieldMAHORAGA: $0 (CF Workers). Others: VPS $10–100+

MetricDeployment

HOOXhoox deploy --auto (one command)

FieldMAHORAGA: wrangler deploy. Freqtrade/Jesse: Docker Compose. HashTrade: pip install

MetricMaintenance

HOOXPlatform-managed workers

FieldOS patches · bot upgrades · Docker images

MetricSecrets

HOOXEncrypted bindings, zero leaks

Field.env files or SaaS vault

MetricDisaster recovery

HOOXMulti-PoP by default

FieldSnapshots · reinstall from image

MetricRate limiting

HOOX10 trades/min, KV-persisted

FieldIn-memory or exchange-side only

MetricQueue retry

HOOXExponential backoff 30s → 15min

FieldCustom retry / lost signals

MetricEmail signals

HOOXMailgun + regex via email-worker

FieldRare — usually webhook only

MetricIdempotency

HOOXSQLite Durable Objects + TTL

FieldManual dedup if any

MetricObservability

HOOXAnalytics Engine (free, time-series)

FieldLogs + Grafana DIY

MetricLocal development

HOOXwrangler dev + full parity

FieldFreqtrade: freqtrade trade --dry-run. Jesse:jesse backtest. MAHORAGA: wrangler dev

03IntelligenceRisk, routing, reporting7 metrics

MetricAI risk manager

HOOXagent-worker cron, 5-provider LLM

FieldMAHORAGA: multi-LLM (Alpaca only). Freqtrade: FreqAI (ML, not LLM). Others: manual rules

MetricExchange routing

HOOXLive KV config, no redeploy

FieldHummingbot: 50+ exchanges. Freqtrade: 20+. MAHORAGA: Alpaca only. Config-file based

MetricVectorize RAG

HOOX384-d embeddings, semantic search

FieldMAHORAGA: sentiment only. Others: not built-in

MetricPDF reports

HOOXBrowser Rendering, 06:00 + 18:00 UTC

FieldFreqUI web dashboard. Jesse: JSON exports. Others: CSV / none

MetricKill switches

HOOXAutomated drawdown triggers

FieldManual stop / limited stops

MetricSemantic memory

HOOXVectorize over full history

FieldSQL history only

MetricReal-time PnL

HOOXStreaming Analytics Engine

FieldPolling dashboards

04SecurityTrust model, integrations5 metrics

MetricTrust model

HOOXZero Trust mesh

FieldOpen ports + firewall / SaaS trust

MetricDeFi wallet

HOOXethers.js on edge

FieldSeparate node or unsupported

MetricWebhook security

HOOXHMAC + IP allowlist built-in

FieldCustom validation

MetricAttack surface

HOOXZero open internal ports

FieldSSH + exposed bot API

MetricAuditability

HOOXImmutable D1 + Analytics

FieldApp logs only

05ResilienceFailover, durability, continuity4 metrics

MetricFailover

HOOXAutomatic Queue + Bindings

FieldProcess supervisor / none

MetricState durability

HOOXDurable Objects + D1 snapshots

FieldSQLite/Postgres on disk

MetricGraceful degradation

HOOXMulti-provider fallback chain

FieldAll-or-nothing on failure

MetricSelf-healing

HOOXAgent cron + kill-switches

FieldHuman operator / restart

HOOX figures measured on Cloudflare's global edge (Smart Placement path). Competitor names describe the common class of stack — not an independent third-party benchmark of each product. MAHORAGA is the closest architectural match (also CF Workers) but runs single-exchange only.

[Loading section]

07 / Storage Layer

[DATA PRIMITIVES]

The data layer is constructed from six Cloudflare edge primitives chosen for complementary latency, durability, and consistency characteristics. D1 provides globally replicated SQLite for trade state; KV delivers sub-millisecond configuration; R2 offers zero-egress object storage; Vectorize supplies embeddings for semantic retrieval; Analytics Engine records time-series metrics; and Queues guarantee at-least-once delivery with built-in backoff.

PRIMARY STORAGE

Global SQLite

Trade History & Positions

Storage free

1 GB

Rows written free

100K/day

Rows read free

25M/day

Distribution

Global replica

Atomic, persistent storage for all trade records, open positions, and performance metrics. R2 offloads verbose logs to preserve write limits for financial data.

PRIMARY STORAGE

Sub-ms Config Store

Live Config & Kill-Switch

Read latency

<1ms

Reads free

1M/day

Writes free

1K/day

Propagation

Global ~60ms

Stores exchange credentials, IP allowlists, risk parameters, routing tables, rate-limiter state, and the Global Kill Switch toggle. Changes propagate globally without redeployment.

SECONDARY STORAGE

S3-Compatible Object Store

Reports, Logs & Compliance

Storage free

10 GB

Class A ops free

1M/month

Egress

$0 (no egress fees)

Compatibility

S3 API

Stores generated PDF trade reports, system logs offloaded from D1, and historical market data archives. Zero egress charges on retrieval via Cloudflare CDN.

VEC

SECONDARY STORAGE

Vector Database

RAG Index & Semantic Search

Dimensions

384-d

Queries free

30M/month

Stored vectors free

Index type

ANN (HNSW)

Embeds trade documentation and market intelligence for retrieval-augmented generation. Powers the Telegram /search and /ask commands with source-cited answers.

COMPUTE PRIMITIVES

Time-Series Metrics

Observability & Dashboards

Writes free

Unlimited

Reads free

1M/day SQL

Granularity

Per-event

Retention

90 days

Tracks API call latency, trade execution times, error rates, and worker health as structured time-series blobs. Powers the Command Center dashboard and performance reporting. Free on all plans.

COMPUTE PRIMITIVES

Async Message Queue

Guaranteed Signal Delivery

Messages free

1M/month

Min retry

30 seconds

Max retry

15 minutes

Backoff

Exponential

Provides a guaranteed-delivery fallback for trade signals when the fast-path Service Binding is unavailable. Exponential backoff policy ensures delivery survives exchange downtime and API rate-limit windows.

These primitives are available within Cloudflare's Workers free tier. For typical retail volumes (under 100,000 requests per day), complete trading infrastructure can operate at zero marginal cost.

[Loading section]

08 / Craft & Patterns

[100% TYPESAFE]

Every architectural decision in this project is enforced at the type level. From animation orchestration to color tokens, the compiler validates what production depends on. No runtime checks for what the type system already guarantees.

TS / STRICT

Inferred Types, Zero ‘any’

TypeScript strict mode across all 200+ modules. No ‘@ts-ignore’, no ‘as any’ casts. Every API boundary, every animation tween, every route handler carries full type information inferred from source.

tsconfig strict: true · isolatedModules · noUncheckedIndexedAccess · exactOptionalPropertyTypes

ZOD / RUNTIME

Schema-Guaranteed Boundaries

All ingress data (webhooks, configs, env vars, form payloads) passes through ZOD schemas before reaching business logic. Parse failures produce structured error types — no undefined-at-runtime surprises.

z.object({ ... }).parse() · safeParse · discriminated unions · branded types

USE / CLIENT

Zero Server Components

Every renderable node is a client component. Animations drive the entire experience; there is no server-side rendering path for UI. This eliminates the Server/Client boundary tax and keeps the mental model uniform.

“use client” on every component · no RSC · no serialization gap · single runtime

These patterns are enforced by convention and reviewed at every merge. The type system is the single source of truth for architecture — documentation follows the compiler, not the other way around.

[Loading section]