cloudflare/cloudflare-os

What it solves

Cloudflare OS provides a secure, AI-driven productivity environment that allows users to create, customize, and share small, personal applications (called "Gadgets") using AI agents. It solves the problem of centralized SaaS software by enabling users to run their own private, sandboxed instances of apps, which they can modify via AI to fit their specific needs without compromising security.

How it works

The system operates like a modern office suite where each "file" is a custom app. It uses a "kernel" (workshop-backend) to manage users and sandboxing, and "Gatekeepers" to act as secure drivers for external services.

Key technical components include:

• Gadgets: Private, sandboxed app instances created by AI agents. These run as Dynamic Worker Facets.
• Gatekeepers: Capability-based security layers that moderate access to external APIs. They can simulate action outcomes, allowing AI agents to continue working while a human approves actions in bulk later.
• Blueprints: Templates that share the application code, allowing others to spawn their own private Gadgets.
• Infrastructure: Built on Cloudflare Workers, Durable Objects, and the workerd runtime, ensuring real-time multiplayer collaboration and secure isolation.

Who it’s for

It is designed for companies and teams who want to build their own internal AI productivity ecosystem ("Your Company OS") where non-technical users can safely use AI to build and modify tools.

Highlights

• AI-Generated Apps: A built-in coding agent that writes, tests, and debugs Gadgets from natural language prompts.
• Asynchronous Human-in-the-Loop: Gatekeepers simulate results so agents don't stall while waiting for user approval.
• Capability-Based Security: Agents and Gadgets have zero default access; they must be explicitly introduced to specific resources.
• Real-time Collaboration: Native multiplayer support for Gadgets via Durable Objects.
• LLM Agnostic: Supports various major AI model providers and self-hosted models.