Deploy an Agent Sandbox on Cloudflare Computer

mkdir agent-sandbox && cd agent-sandbox
wrangler init --type durable-objects

This scaffolds a Durable Object project. Your agent workspace will live in the src/ directory.

In wrangler.toml, configure the Durable Object bindings:

[[durable_objects.bindings]]
name = "AGENT_WORKSPACE"
class_name = "AgentWorkspace"

[[containers.bindings]]
name = "LINUX_SANDBOX"
image = "ubuntu:22.04"

The Durable Object is the V8 isolate tier — fast, lightweight, no cold start. The container binding is the Linux tier — full execution environment for heavy tasks.

In src/index.ts, implement the routing logic:

export class AgentWorkspace {
  async fetch(request: Request): Promise<Response> {
    const task = await request.json();

    // Route by task weight
    if (task.lightweight) {
      // Execute in V8 isolate — fast, no cold start
      return this.runInIsolate(task);
    } else {
      // Execute in Linux container — full environment
      return this.runInContainer(task);
    }
  }

  private async runInIsolate(task: any): Promise<Response> {
    // Tool calls, API requests, text processing
    const result = await executeTask(task);
    return new Response(JSON.stringify(result));
  }

  private async runInContainer(task: any): Promise<Response> {
    // Code execution, file processing, browser automation
    const container = this.env.LINUX_SANDBOX;
    const result = await container.run(task.command, task.input);
    return new Response(JSON.stringify(result));
  }
}

wrangler deploy

This deploys your workspace to Cloudflare's global network. You get an HTTP endpoint for submitting tasks.

curl -X POST https://agent-sandbox.<your-subdomain>.workers.dev \
  -H "Content-Type: application/json" \
  -d '{"lightweight": true, "action": "echo", "input": "Hello from the isolate"}'

For a heavy task:

curl -X POST https://agent-sandbox.<your-subdomain>.workers.dev \
  -H "Content-Type: application/json" \
  -d '{"lightweight": false, "command": "python3 -c \"print(2+2)\""}'

Point your Hermes Agent or other agent framework at the workspace endpoint. The agent submits tasks; the workspace routes them to the appropriate tier.