Workspaces, auth, APIs, and observability, built on Cloudflare. Structured logs and request tracing are included; external monitoring is optional.
Start with the workspace overview. Inspect its API contract and shared function, then the infrastructure behind the app.
The workspace overview supplies the data on this page.
curl -H "Authorization: Bearer $API_TOKEN" \
https://api.example.com/workspaces/starter-lab/overview
{
"workspace": {
"id": "wrk_starter",
"slug": "starter-lab",
"name": "Starter Lab",
"planId": "team"
},
"notifications": []
}This deployment has no sample workspace. The hostname and response show an example using seed data.
Each route declares its parameters, response, and failures. The group requires bearer authentication.
export const WorkspaceApi = HttpApiGroup.make('workspace')
.add(
HttpApiEndpoint.get('overview', '/workspaces/:slug/overview', {
params: SlugParams,
success: WorkspaceOverviewDto,
error: WORKSPACE_ERRORS
})
)
.middleware(BearerAuth)The web app, REST, and MCP call the same capability.
export const workspaceOverview: Effect.Effect<
WorkspaceOverviewProjection,
CapabilityUnavailable,
WorkspaceContext | NotificationFeed
> = Effect.gen(function* () {
const ctx = yield* WorkspaceContext
const feed = yield* NotificationFeed
const notifications = yield* feed.list
return {
workspace: ctx.workspace,
notifications
}
})return runWorkspaceCapabilities(
DEMO_WORKSPACE_SLUG,
Effect.all(
{
overview: workspaceOverview,
…
},
{ concurrency: 'unbounded' }
)
).handle('overview', ({ params, request }) =>
workspaceRead(READ_OPERATIONS.overview, params, undefined, request)
)const caller = yield* requireCaller()
const invoke = yield* decodeOperationInput(operation, payload)
…
const guarded = Effect.gen(function* () {
yield* authorizeMcpOperation(caller, operation.permission, MCP_READ_SCOPE)
return yield* invoke
}).pipe(Effect.scoped)Cloudflare Workers run the app and API. D1 stores business records, Durable Objects persist private assistant conversations, and Queues and Email handle delivery.
Web app, REST and MCP API, and background jobs
apps/web · apps/api · apps/background
Workspace data, schema, and migrations
packages/db
Private assistant history, one active answer and reconnect replay
apps/web · WorkspaceAssistantConversation
Webhook delivery with retries and backoff
apps/background
Transactional email, enabled when configured
packages/email
pnpm run deploy
These integrations stay off until you configure them. You can run the app without them.
| Provider | Role |
|---|---|
| Stripe | Billing |
| Cloudflare Web Analytics | Website analytics |
| Cloudflare Email | Transactional email |
| Turnstile | Bot protection |
The setup guide and architecture docs live alongside the code.
docs/
Setup, architecture, deployment, and licensing.
Clone the repo and run the commands below. The sample workspace runs locally without a Stripe account, OAuth app, or email provider.
Clone and run