Glean 拾遗
Recent picks

2picks · chronological

08-08

Cloudflare Computer: How to Cut AI Agent Sandboxing Costs by 80%

The default way to sandbox AI agents is to keep a full Linux container alive for every agent. Cloudflare Computer proposes a split: the Workspace Durable Object (with a SQLite VFS) owns authoritative project state; ordinary reads, searches and edits run in a Worker isolate via workspace.fs and just-bash; real Linux operations like npm install and build start a container on demand, and a post-command pull synchronizes changes back. Using a small Vite site as the test case, the author shows code for switching backend between worker-shell and container, and warns that exitCode 0 alone is not durability — sync.status must be 'complete'. A cost model projects that dropping container duty cycle from 100% to 10% reduces monthly cost from ~$36.83 to ~$7.53 (79.6%), while node_modules is deliberately kept disposable. A strong read for engineers building coding agents, sandboxes, or durable workspaces.

08-08

Virtual filesystem and pluggable runtimes for AI agents

Cloudflare Computer is a virtual filesystem built inside a Durable Object. The authoritative state lives in SQLite, and a single pluggable execution entry point, workspace.runtime.exec, dispatches work to one of three backends. The container backend projects SQLite state into a sandbox as a real FUSE mount, allowing full Linux userland binaries and network access. The isolate shell backend runs bash in a Dynamic Worker and reaches the authoritative Workspace over Workers RPC, avoiding a second store. The isolate JavaScript backend evaluates ECMAScript modules in a Dynamic Worker with structured I/O, durable relative imports, and Workspace-backed node:fs/promises. A Workspace can also be used standalone as a filesystem without a backend. The project is explicitly preview-only, not for production, but includes docs, runnable examples, and fs-bench benchmarks. Useful for engineers exploring agent infrastructure, sandboxed runtimes, and cloud-native file systems.

github.com · 5 min · Agent Infrastructure · Agents · Durable Objects