cloudflare / cloudflare-os · commit-pinned · static-only

Cloudflare OS

AI 작업공간의 실행·상태·외부 권한을 Workers primitives로 분리한 초기 접근 프로젝트를 고정 커밋에서 해부한다.

6223e261f18849b817a8d7ca03fe3678b77048ca · captured 2026-08-26 UTC · Apache-2.0

출처와 고정 신원

canonical repository
https://github.com/cloudflare/cloudflare-os
object kind
repository
requested ref
not supplied
analysis ref
main
snapshot commit
6223e261f18849b817a8d7ca03fe3678b77048ca
root tree ID
a33059be3126074ef15a6539ca850fd0127ae888
capture ID
430d263c-f8e2-4c9a-95b6-fb42dfdc4508

읽기 전에

Cloudflare OS를 제품명보다 경계 모델로 읽는다. 워크스페이스, Gadget, Gatekeeper가 각각 상태·실행·외부 권한을 나눈다.

  1. 먼저 채택 판단을 읽는다.
  2. 실제 구현과 아키텍처를 대조한다.
  3. 위험 표의 정적 전용 한계를 확인한다.

채택 판단

조건부 채택 후보

Cloudflare 계정 안에서 조기 평가할 수 있으나, 프로젝트는 early access이며 자가 workerd 배포는 문서상 COMING SOON이다. 런타임 신뢰도는 unknown이다.

Evidence trustB
Implementation confidencemedium
Runtime confidenceunknown
Maintenance coveragemedium
Security / privacy confidencemedium

실제 구현

이 판정은 고정 커밋의 문서·선택 소스 정적 검사다. 저장소 코드는 실행하지 않았다.

아키텍처

사용자 표면Workshop frontend
워크스페이스 커널Overseer Durable Object
격리 실행Gadget / Dynamic Worker Facet
외부 권한Gatekeeper Workers

온보딩 (실행 안 함)

README가 제시하는 로컬 진입점은 pnpm run-local과 http://localhost:8787이다. 이 dossier에서는 설치·빌드·테스트·실행을 하지 않았다.

읽기 순서

  1. README.md: 제품 주장과 early access 상태
  2. AGENTS.md: 코드베이스 지도
  3. packages/workshop-backend/src/server.ts: 서버 진입
  4. packages/workshop-backend/src/sharing.ts: 공유 권한
  5. packages/gatekeeper-github/src/github-api.ts: 외부 API 격리 예시

유지보수 건강도

고정 커밋 CI6/6 success
GitHub release / tag0 / 0
stars / forks9,242 / 1,072
최근 PR 표본30

동적 수치는 2026-08-26T13:40:00Z 관측값이다.

위험과 신뢰도

evidence trustB
implementation confidencemedium
runtime confidenceunknown
maintenance coveragemedium
security / privacy confidencemedium

정적 전용: checkout=false, worktree=false, dependency_install=false, build=false, test=false, run_or_import=false, container=false, hooks=false, submodules=false, lfs=false, filters=false, textconv=false.

라이선스

Apache-2.0. 저장소 루트 LICENSE와 GitHub 메타데이터가 일치한다. 공개 dossier는 프로젝트명, 소유자, 고정 커밋 링크를 보존한다.

주장 원장

ID주장판정신뢰
C001Cloudflare OS is an "operating system" for AI productivity, originally developed inside Cloudflare and now open sourced under Apache-2.0.supportedhigh
C002The product provides three things: agent chat UI, sandboxed gadget development, and a Gatekeepers security framework.supportedhigh
C003A Gadget runs as a Dynamic Worker with internet access disabled; the client runs in a sandboxed iframe with only postMessage Cap'n Web RPC to its server.partially-supportedmedium
C004Auto-approval is a first-class capability: manual gates are never skipped ahead of, and eligibility requires both an author verdict and a user-enabled rule.supportedhigh
C005Cloudflare Access can front the OS with JWT verification, and the rate-limit key is derived from verified claims without emitting raw email.supportedhigh
C006Every workspace is a Durable Object, every Gadget runs in a Dynamic Worker Facet, and Gatekeepers install facets into each workspace.partially-supportedmedium
C007Every Gadget must expose its client/server via Cap'n Web RPC.supportedhigh
C008`pnpm run-local` runs the entire stack locally on wrangler + workerd for quick trials.supportedhigh
C009The project is a version 2 rewrite currently in "early access" as of August 2026.supportedmedium
C010External code contributions are strongly discouraged except for trivially-verified fixes; small typo-only PRs will be closed.supportedhigh
C011CI runs on every push to main and every PR (lint + type-check + tests + build).supportedhigh
C012No published GitHub releases or tags exist yet.supportedhigh
C013No published security advisories at capture time.partially-supportedmedium
C014Contribution activity is heavily concentrated in a small Cloudflare team (kentonv 381, jonesphillip 85, bjesus 64, ndisidore 52).supportedhigh
C015v2 rewrite; a `workerd`-only self-hosting path is documented as "COMING SOON".supportedhigh

원문 링크 보존

README 저자가 배치한 37개 미디어·링크 occurrence를 순서대로 보존한다. 1번 이미지는 URL을 노출하지 않는 inert 생략 마커이며 2–37번은 안전한 링크다.

  1. [저자 미디어 생략] README.md:5 · Cloudflare OS: An AI productivity environment
  2. install pnpm README.md:22 · Quick Start
  3. http://localhost:8787 README.md:26 · Quick Start
  4. deploy to your Cloudflare account README.md:30 · Quick Start
  5. Cloudflare Workers README.md:116 · Built on Workers, by the Workers team
  6. Durable Objects README.md:116 · Built on Workers, by the Workers team
  7. Dynamic Workers README.md:116 · Built on Workers, by the Workers team
  8. Facets README.md:116 · Built on Workers, by the Workers team
  9. `workerd`, the Cloudflare Workers Runtime, is itself open source README.md:120 · Built on Workers, by the Workers team
  10. Code Mode README.md:126 · General multi-purpose agent
  11. Cap'n Web RPC README.md:140 · Collaborate with AI
  12. Code Mode README.md:142 · Collaborate with AI
  13. Durable Object README.md:148 · Real-time Multiplayer
  14. Dynamic Worker README.md:161 · Sandboxed and secure by default
  15. Workers Bindings README.md:161 · Sandboxed and secure by default
  16. https://os.cloudflare.app/deploy README.md:178 · Deploy to your Cloudflare account
  17. https://github.com/cloudflare/cloudflare-os-starter README.md:182 · Deploy to your Cloudflare account
  18. install pnpm README.md:186 · Run locally
  19. http://localhost:8787 README.md:190 · Run locally
  20. read the low-level documentation for workerd config README.md:200 · Deploy to your own server using `workerd`
  21. GitHub API README.md:208 · Configuring external services
  22. Google API README.md:209 · Configuring external services
  23. Cloudflare API README.md:210 · Configuring external services
  24. Supabase API README.md:211 · Configuring external services
  25. Notion API README.md:212 · Configuring external services
  26. Confluence API README.md:213 · Configuring external services
  27. Email Workers README.md:214 · Configuring external services
  28. Home Assistant README.md:215 · Configuring external services
  29. Slack API README.md:216 · Configuring external services
  30. Spotify README.md:217 · Configuring external services
  31. ZoomInfo API README.md:218 · Configuring external services
  32. http://localhost:3000 README.md:227 · Developing
  33. open a discussion README.md:237 · Contributing
  34. Pi README.md:245 · Credits
  35. CodeMirror README.md:246 · Credits
  36. isomorphic-git README.md:247 · Credits
  37. Vite README.md:248 · Credits

수집 범위

관찰 한도: 16분, REST 요청 13, substantive files 15, inspected lines 2,400, dependency hops 0. 선택 수와 관찰 파일 수는 일치한다.

evidence/index.json · delivery-receipt.json

이 문서의 게시 상태와 검증 시각은 delivery-receipt.json을 기준으로 한다.