workerd is Cloudflare's JavaScript/Wasm server runtime powering the Cloudflare Workers platform. It implements a nanoservices architecture where all services are deployed to every machine, using a capability-based security model for isolation. The runtime executes serverless Workers in response to HTTP requests, queues, scheduled events, and other triggers, providing APIs for HTTP, storage (KV, Durable Objects, R2), websockets, and more. The core is implemented in Rust and C++ with bindings for JavaScript/TypeScript and Python via Pyodide. Key entry points include the `workerd` CLI binary (built via Bazel) and the Rust `workerd_cli::main()` function. The system processes requests by routing them to Worker isolates, which execute user scripts and can access bindings for subrequests, storage, and other services. It includes extensive compatibility layers for Node.js APIs and Web standards, along with a comprehensive test suite validating spec compliance and implementation correctness.
Octopool is a production-grade GitHub API relay and caching proxy, deployed as a Cloudflare Worker with a companion Go CLI. It pools multiple GitHub identities (PATs, GitHub App installations) to share API quota, caches responses in D1 and edge cache, and applies string-rewrite policies to protect sensitive data. The CLI acts as a drop-in `gh` shim, routing eligible read commands through the relay before falling back to native `gh`. The system also supports token-free transports (public web pages, raw content, Git smart HTTP) to minimize API consumption. Architecture includes Durable Objects for coordination (pool identity selection, cache-fill ownership, policy revisioning), D1 for persistent cache and audit, and edge cache for low-latency reads. The codebase is dual-language (TypeScript for Worker, Go for CLI) with extensive unit and e2e tests, CI/CD, and a dashboard for monitoring.
ClawRouter is a production-grade AI/LLM proxy gateway deployed on Cloudflare Workers. It provides a unified API endpoint for multiple AI providers (OpenAI, Anthropic, Google Gemini, etc.) with policy-based access control, per-user and per-provider budget accounting, usage tracking, and a comprehensive admin console (React/TypeScript). The system authenticates users via Cloudflare Access, local auth, or API keys, then routes requests through configurable policies that enforce budget limits, grant selection, and content retention. It supports streaming, WebSocket-based Responses API, and a Fusion mixture-of-agents feature for multi-model orchestration. The worker uses Durable Objects for stateful budget ledgers, usage ledgers, credential stores, and background job recovery, all backed by SQLite. A rich admin UI (Patchboard) allows operators to manage policies, credentials, grants, users, and view analytics. The codebase includes extensive unit, integration, and browser (Playwright) tests, along with CI/CD pipelines for Cloudflare deployment and self-hosting via Docker/workerd. It is a well-architected, thoroughly tested system that demonstrates high craftsmanship in state management, error handling, and idempotent accounting patterns.
Notty is a full-stack, cross-platform notes application (an Apple Notes-style clone) built with a React 19 + Vite + Tailwind 4 frontend, a Hono API running on Cloudflare Workers, and per-user Durable Objects that each own a SQLite database. Clients include a web app, a Tauri 2 desktop app (with local SQLite, markdown export/import, cloud sync, deep-link auth, and a quick-note hot corner), and a mobile variant. Realtime collaboration is powered by Yjs with three persistence paths (Durable Object SQLite, browser IndexedDB, and Cloudflare R2), and authentication uses Better Auth with passkeys, Google/GitHub/Apple social login, and anonymous sessions. The backend also serves server-rendered public pages generated from TipTap JSON with URL sanitization and RSS 2.0 feeds, and integrates Supermemory for AI-powered note indexing. File storage and full version-history snapshots live in R2, with branch management (create/checkout/merge/delete), diff views, and restore-with-auto-backup. The architecture is notable for its platform adapter pattern (web/desktop/mobile adapters abstracting storage and sync) and per-user Durable Object isolation, but the codebase carries meaningful baggage: dead code from an earlier NextAuth-based iteration (src/lib/auth.ts, old NotesContext, DarkModeSwitch, search-results.tsx), no visible unit tests beyond a race-condition QA script, a non-standard FNV-1a-based lock token instead of a real HMAC, and a merge operation that is actually a replace. Optimistic update logic in the notes context is fragile and can diverge from server state under rapid tab switches. Despite these issues, the core architecture is sound and the adapter pattern is genuinely reusable.