Approval-Gated Executions
Never let an agent push code blindly. Inspect the delegation plan, affected files, and planned terminal commands before granting execution approval.
Ship code with a self-hosted cloud coding agent.
Delegate approval-gated coding tasks to an account-owned Cloudflare Sandbox. This repository is a local prototype until a dated live run is recorded in VERIFICATION.md.
ai-intern · cloudflare-worker · sandbox-session #1042
● READY
agent> delegate_coding_task { task: “Fix auth token cookie expiration and add Vitest unit test”, repoUrl: “https://github.com/org/web-app” }
PLAN READY Orchestrator analyzed codebase & generated 3-step delegation plan.
GATE Approval requested via Dashboard & Slack. Waiting for human sign-off…
APPROVED Approved by human reviewer ([email protected]).
SANDBOX Spun up ephemeral Cloudflare micro-container running OpenCode in 180ms.
VITEST Ran test suite: 14 test files passed, 68 assertions green, 0 regressions.
PR READY Publication is optional and requires a configured GitHub token.
Zero Host Access · Ephemeral Containers · Single-Tenant Isolation
Unlike tools that execute on a developer laptop, AI Intern delegates every task to an isolated Cloudflare Sandbox container. Each installation is single-tenant and account-owned.
Start here
Section titled “Start here”Quick pathways to get started with AI Intern on your infrastructure.
01
Quickstart Guide
Install dependencies, build the dashboard and docs, and review the prerequisites for a live run.
02
Architecture
Understand how Durable Objects, Sandbox Containers, and Workers AI fit together in the current prototype.
03
Security & Sandboxing
Learn how isolation boundaries, secret redaction, and approval gates keep your code secure.
04
GitHub Integration
Review repository access, webhook verification, and the current limits around pull request publication.
What you can do with AI Intern
Section titled “What you can do with AI Intern”Delegate real engineering workflows with full human control, safety, and auditability.
Isolated Sandbox Containers
Every coding task runs in its own micro-container powered by Cloudflare Containers and OpenCode. Malicious packages or runaway processes cannot escape.
Account-Owned Deployment
Deploy directly to your own Cloudflare account. Your source code, API keys, repository secrets, and logs never touch third-party servers.
Automated Issue Triage & Bug Fixing
Receive GitHub webhook events on new issues. AI Intern reproduces the bug, writes a regression test, fixes the logic, and opens a ready-to-merge PR.
Interactive Diff Review
Review live syntax-highlighted diffs in the built-in React dashboard or directly inside Slack before approving pull request publication.
Autonomous Scheduled Sweeps
Fire runs from cron schedules, GitHub webhooks, Slack events, or per-automation webhook triggers. Approval gates, repo allowlists, and a daily run budget still apply to every trigger.
Built for Cloudflare Platform
Section titled “Built for Cloudflare Platform”Engineered specifically for Cloudflare’s next-generation edge stack.
⚡ Cloudflare Workers
Request routing, orchestration, and signature-verified webhook handlers at the Worker boundary.
🛡️ Cloudflare Sandbox
Isolated OpenCode runs with git and Linux tooling. Package registries are off the egress allowlist in v0.1. Cold start is unmeasured until T10.
💾 Durable Objects
Durable state for orchestrator, agent, and sandbox objects, with retained run metadata.
🤖 Workers AI & Flash Models
Blazing-fast plan synthesis with Gemini 3.5 Flash Lite and Llama 3.1 Instruct, managed via Cloudflare AI Gateway.
Ready to deploy your self-hosted AI Intern?
Prepare an account-owned installation with Wrangler, then complete the acceptance checklist before live use.