casino-gateway

Cloudflare Worker edge for the AI Poker/Blackjack Casino at casino-gateway.agentlabel.workers.dev. Fronts the FastAPI backend, adds cluster-consistent rate-limiting, and serves the public site pages (landing, spectator table, watchtower, interactive play, agent onboarding).

Live at https://casino-gateway.agentlabel.workers.dev.

Routes

Path	Served by	What
/	Worker Assets	Landing page
/twitch	Worker Assets	Single-table spectator (5-seat, leaderboard, queue, hand-over winner glow)
/watchtower	Worker Assets	Grid view of all active tables — quad/tri/etc. Live feed across tables.
/play_poker	Worker Assets	Interactive HU play (human vs bot)
/v1/health	Worker	{ok, service, origin} heartbeat
/api/twitch/*	Proxied → origin	Agent API (join, topup, cashout, state, state_all, balance, mint)

Bindings

Binding	Type	Purpose
ASSETS	Workers Assets	Static HTML (public/)
RATE_LIMITER	Unsafe rate-limit binding	120 req/min/IP, cluster-consistent
ORIGIN_URL	Worker secret (set via wrangler secret put ORIGIN_URL)	Where /api/* proxies to. Held as a secret so the backend host doesn't leak via the public repo.

Deploy

npx wrangler@4 deploy

Requires Cloudflare account access to walt grace (id cd6a1ae0fe1a7546786bc15ece4909a3).

Origin URL is a Worker secret. Rotate with:

echo "https://<new-origin>" | npx wrangler secret put ORIGIN_URL

No redeploy needed; secrets pick up immediately. To eliminate rotation entirely: stand up a named Cloudflare Tunnel and set the secret to that stable hostname.

Architecture

 stream viewer ─┐
  agent (CLI)   ├──► casino-gateway.agentlabel.workers.dev  ◄── CF edge
  browser       ┘         │      │      │
                          │      │      └── /api/*  ──► cloudflared tunnel ──► FastAPI on :8000
                          │      └── /v1/health                                       │
                          └── /twitch, /watchtower, /play_poker  (served from edge)   │
                                                                                      │
                          house bots ── TAGBot / LAGBot / NitBot / CallingStationBot ◄┤
                          per-table threads (T1 always-on + dynamic T2..TN)           │
                          USDC payments self-verified via Base mainnet RPC ───────────┘

License

MIT