Writing
Writing on building for the web, mostly on Cloudflare.
14 posts20262 hours of reading
21 minFeatured
Every Cloudflare product, and which ones this site runs on
Every Cloudflare developer product as of September 2026 in one table: what Workers, D1, KV, R2, Queues, Durable Objects, AI Search and the rest actually do, and which ones a complete site runs on, where, and why. With the refusals and the constraints, dated.
3 min
Carrel, part 3: AI drafts sit beside mine, never on top
Carrel, part 3
How Carrel lets an AI assistant draft, check and preview writing without ever replacing the writer's text or publishing on its own.
3 min
Carrel, part 2: one small API for every site
Carrel, part 2
The contract every site exposes to Carrel: list, read, save with a version check, preview the real page, publish. How this site implements it, and the one rule about first publication.
3 min
Carrel, part 1: a writing desk that lives apart from the site
Carrel, part 1
Why the writing for this site moved out of the site's own admin and into a separate private tool, and what that separation buys.
10 min
Rendering Observable Plot charts inside a Cloudflare Worker
How to render Observable Plot charts inside a Cloudflare Worker: the linkedom shim that works, the domino and Vega failures that don't, byte-identical output across Node and workerd, and accessible charts enforced by the build.
9 min
Put the rules in the API, not in the MCP server
APIs and MCP servers are layers, not rivals. A practical rule for architects: implement authentication, authorization, and business policy in the HTTP API exactly once, and build MCP servers as thin discovery layers that contain none of it.
13 min
Building an MCP server on Cloudflare Workers with OAuth
How to build a production MCP server under the 2026-07-28 specification: measure your real client with a probe before choosing auth, pick the protocol library by conformance score, isolate legacy support in one deletable module, and keep policy out entirely.
12 min
Giving an AI agent write access to a live site
How to grant an AI agent real write access to a production site safely: one shared write path, a single human-reserved operation enforced in code, tamper-evident state in version control, and the draft leak that revealed the method's hardest problem.
11 min
Site search on Cloudflare D1 with SQLite full-text search
How to build site search on Cloudflare D1 with SQLite FTS5: two indexes for stemmed and exact matching, reciprocal rank fusion in place of raw bm25, section-level records, a browse path for filter-only queries, and the D1 export problem every FTS5 user has.
15 min
How this blog stores posts in git and serves them from D1
How to build a content pipeline where markdown in git is the source of truth and D1 serves every read: one deterministic renderer shared by the build and the Worker, a gate verified by breaking it, atomic commits through the GitHub API, and the two bugs to expect. Updated August 2026, when the committed artifact came out in favor of provenance hashes, a deploy-time drift table, and a self-repairing health check.