Glean 拾遗
Recent picks

11picks · chronological

08-19

Agents need a computer, not a container: @cloudflare/computer

Cloudflare has released an early preview of @cloudflare/computer, an open-source agent runtime that pushes against the default assumption that every agent needs its own container. The package's core is a durable, SQLite-backed virtual filesystem called a workspace, which can be shared across execution backends behind one exec(string, options) interface. Two backends are included: an isolate-based backend that translates shell code into JavaScript via just-bash and runs it in a worker, and a container backend using a FUSE mount so file changes are synced back. The post includes code showing how to attach the workspace to an agent on a Durable Object with @cloudflare/think, and argues isolates are the only realistic path to scaling to billions of agents because they can spin up, tear down, and hibernate with state. Aimed at engineers building agent harnesses. The library is in early preview and ships without benchmarks.

blog.cloudflare.com · 12 min · Agent Infrastructure · Agents · AI Engineering
08-10

Cloudflare OS: an open source agent workspace with capability-based governance

Cloudflare has open-sourced Cloudflare OS, the agent workspace it uses internally, to bring AI leverage beyond programmers. A workspace is grounded in company-curated context and skills, and starts each agent with zero access. Resources are exposed as typed bindings, while Gatekeepers—service-specific Workers—hold credentials, enforce policy, and log every observed resource. Sharing a dashboard does not become a way to leak an underlying table, because the platform re-checks the viewer against the observation log. Apps are full-stack Workers with their own SQLite state, and the same server methods are callable by both users and agents. Model routing and spend run through AI Gateway, so admins can set budgets and pick models per task. The code is on GitHub and deployable into a Cloudflare account, with a reference deployment included. Written for engineers working on agent infrastructure, access control, and internal development platforms.

blog.cloudflare.com · 16 min · Agent Infrastructure · AI Agents · Capability Security
08-10

Cloudflare OS: an AI workspace with per-user sandboxed apps

Cloudflare OS is an open-source AI productivity environment that Cloudflare built for its own workforce. It acts as an operating system for both company operations and AI workloads: instead of fixed document types, every file is a 'Gadget'—a private, sandboxed application that an agent can create, modify, and debug on the user's behalf. A capability-based security layer called Gatekeepers brokers access to external services, logging side effects and letting users approve queued actions in bulk later instead of blocking the agent mid-task. The entire platform runs on Cloudflare Workers and workerd, leveraging Durable Objects, Dynamic Workers, and Facets, and every Gadget has real-time multiplayer collaboration by default. Blueprints let users share the code of an app so others can spawn their own copies. It is early access but substantial, and a valuable reference for engineers exploring agent infrastructure, per-user app sandboxing, and edge-based AI tooling.

github.com · 23 min · Agent Architecture · AI Agents · Cloudflare
08-08

Cloudflare ADLC: Workflow-based CI/CD for agent software factories

Cloudflare argues the bottleneck in software development has moved from implementation to every other SDLC stage, now that AI makes code generation cheap. Their answer: let agents drive more of the lifecycle, not just codegen. The post introduces @cloudflare/ci, local OTel traces for Wrangler, Agent Traces, and a set of primitives meant to turn the SDLC into an 'Agent Development Lifecycle' for software factories. It includes Workflow code that parallelizes lint/test/typecheck/build and then deploys, plus guidance that CI/CD is just one kind of Workflow—workflows can spawn containers, agents, and browsers and persist state for days. The article also lists seven platform requirements for agent-driven delivery: programmatic, horizontally scalable, reproducible, push-based, atomic, permissioned, and self-improving. Useful for engineers building agent infrastructure on Cloudflare or exploring autonomous delivery pipelines.

blog.cloudflare.com · 14 min · Agent Engineering · AI Agents · Cloudflare
08-08

Cloudflare Computer: How to Cut AI Agent Sandboxing Costs by 80%

The default way to sandbox AI agents is to keep a full Linux container alive for every agent. Cloudflare Computer proposes a split: the Workspace Durable Object (with a SQLite VFS) owns authoritative project state; ordinary reads, searches and edits run in a Worker isolate via workspace.fs and just-bash; real Linux operations like npm install and build start a container on demand, and a post-command pull synchronizes changes back. Using a small Vite site as the test case, the author shows code for switching backend between worker-shell and container, and warns that exitCode 0 alone is not durability — sync.status must be 'complete'. A cost model projects that dropping container duty cycle from 100% to 10% reduces monthly cost from ~$36.83 to ~$7.53 (79.6%), while node_modules is deliberately kept disposable. A strong read for engineers building coding agents, sandboxes, or durable workspaces.

08-07

Introducing Cloudflare Agents: Agent Tracing and Observability

Cloudflare introduces Cloudflare Agents, a unified console to deploy and manage hosted agents, launching with agent tracing. The feature adds agent-aware spans for model calls, tool executions, approval events, token usage, and supported subagent calls, overlaying existing Workers infrastructure traces (fetch, KV, D1). It is initially compatible with Think, Flue, and AI SDK, with plans to accept OpenTelemetry semantic conventions directly in Workers. Developers can replay recorded sessions to inspect full conversation context, or view execution waterfalls that show subagent delegation and the Cloudflare resources used. Traces can be exported to any OTLP destination, enabling evaluation and analytics. Pricing is based on existing Workers observability events, free during beta and then included in Workers Free/Paid plans. The feature targets teams running agents on Cloudflare who need behavior-level insight beyond traditional telemetry.

blog.cloudflare.com · 9 min · Agent Engineering · AI Agents · Cloudflare
06-29

Temporary Cloudflare Accounts for AI Agents

Cloudflare introduces temporary accounts for AI agents, enabling deployment via `wrangler deploy --temporary` without manual signup. The accounts last 60 minutes, during which agents can iteratively deploy and developers can permanently claim them. The post addresses the problem of background AI sessions getting stuck at browser-based OAuth flows and explains how the CLI prompts agents about the flag for discovery. A complete TypeScript demo walks through deploying a hello world Worker, modifying it, and redeploying with verification. Partnerships with Stripe and WorkOS are noted as part of broader efforts to reduce agentic deployment friction. Target readers include agent platform builders and developers using coding agents.

x.com · 1 min · Agent Infrastructure · Agents · CLI
06-17

Persistent Memory Engine for AI: Auto-Extract, Update, and Forget Intelligently

Supermemory is a memory and context layer for AI. It automatically extracts facts from conversations, builds and maintains user profiles, resolves contradictions, and intelligently forgets expired information. Combining hybrid search (RAG + memory), document processing, and live connectors (Google Drive, GitHub, etc.) into one API, it gives AI agents instant, personalized context. With plugins for Claude Code, Cursor, and more, it targets both developers integrating memory into apps and users wanting persistent AI memory across tools.

github.com · 14 min · Agent-Memory · Ai-Memory · Cloudflare
06-08

Maple: An Open-Source Observability Platform Built on OpenTelemetry and ClickHouse

Maple is an open-source observability platform for traces, logs, and metrics, built on OpenTelemetry and ClickHouse. It features an OTLP ingest gateway with key-based auth, a chat agent, alert evaluation, and SQLite/Turso-backed dashboard persistence. The monorepo ships with Clerk or self-hosted auth modes and a full suite of CI/CD workflows for Cloudflare Workers, targeting teams that want to own their observability stack in a TypeScript-native codebase.

github.com · 9 min · ClickHouse · Cloudflare · Monorepo
06-06

Why Your AI Agent Is Drowning in Tools (And How Code Mode Saves It)

When an AI agent integrates many MCP tools, it risks context bloat and tool hallucination — 50+ tools can eat 5–7% of the context window. Traditional remedies like agent-side filtering and MCP-side reduction have trade-offs. Code mode lets the LLM search and execute tools via code, slashing token usage, enabling complex control flow, but adding debugging and infrastructure overhead. Cloudflare and Anthropic examples show that the real lesson is to keep a reasonable toolset driven by use cases, not magic numbers.

engineering.leanix.net · 7 min · Agents · Cloudflare · LLM
06-01

Orchestrating AI Code Review at Scale

Cloudflare built an AI code review system on OpenCode, orchestrating up to 7 domain-specific agents (security, performance, docs, etc.) via a coordinator. Over 30 days it processed 131k+ reviews with a median latency of 3m39s and average cost of $1.19. The post dives deep into plugin architecture, risk tiers, circuit breakers, incremental re-reviews, prompt injection prevention, and honest limitations. Suitable for engineers exploring AI-assisted development and CI/CD integration at scale.

blog.cloudflare.com · 51 min · AI · Cloudflare · LLM