{"collection":{"slug":"application-platforms","name":"Application Platforms"},"digest":{"id":"cwd_X1Axy_WmBCVCyk9LRda-i","weekStart":"2026-08-03","title":"Agent foundations: gateways, sandboxes, and observable debugging","intro":"Cloudflare unified Workers AI and AI Gateway access while launching Kitesurf, a stateless agent browser; Railway's CLI matured Postgres operations; and the AI SDK ecosystem tightened video retry and embedding performance. Cloudflare also made local Worker debugging agent-friendly with automatic traces.","body":"### The agent runtime takes shape\n\nThis week's clearest throughline is platform work aimed squarely at AI agents. Cloudflare's [Kitesurf browser](/release/rel_3PTWWHE53ohsebyNRvUBt-cloudflare-launches-kitesurf-an-agent-first-browser-on-browser-run) is the headline: a stateless browser built on Workers that uses 3–7x less CPU and memory than Chromium for agentic tasks like screenshots and HTML extraction. Existing Browser Run clients work by adding `browser=kitesurf` to any CDP or Quick Action endpoint, so it's a drop-in upgrade during a free beta. It's a strong signal of where Cloudflare thinks agent workloads are headed — cheaper, more scalable browser sessions that aren't tied to persistent VM state.\n\nThat's not the only agent-facing move. Cloudflare's [local debugging with automatic trace capture](/release/rel_ICRMyJInG-1w5PEC7Pcpj-cloudflare-workers-ai-agents-can-now-debug-workers-with-local-tracing) turns `wrangler dev` and `vite dev` into an observability platform for AI agents: structured OpenTelemetry traces and correlated console logs are captured automatically, and a Local Explorer API exposes an OpenAPI schema so agents can query telemetry, fix code, and verify results without deploying. The related [Workers Vite plugin 1.51.0](/release/rel_FOkLPNJ-tclLt7gZGaOyQ-workers-vite-plugin-1-51-0-improves-local-explorer-observability-views) refines those views — console output renders like the console, traces are searchable by span ID, and the \"View trace\" button jumps to the emitting invocation even across multi-invocation traces. In headless agent environments, the plugin now prints the API URL to stdout so agents can discover it programmatically. Collectively, Cloudflare is building the debugging loop agents need to be self-sufficient.\n\nMeanwhile Vercel shipped [Agent Plugins 1.0.0](/release/rel_9-T1i3Lbd7Jetx89SQbHU-vercel-ships-agent-plugins-1-0-0-for-packaging-skills-and-mcp-servers), a common format for packaging Agent Skills and MCP servers into portable plugins, and the [CLI now auto-installs provider agent skills](/release/rel_XL70oCXdbBQmgLAFG7qFh-vercel-cli-installs-provider-agent-skills-with-marketplace-integrations) when you install a Marketplace integration. The [Hermes Agent update](/release/rel_cw0jyHxyf3d7z93gZKg31-vercel-hermes-agent-adds-ai-gateway-inference-and-sandbox-microvms) ties the story together: inference across 200+ models via AI Gateway with no token markup, plus commands running in isolated Sandbox microVMs. Add [skill packs](/release/rel_Jrm39k9YiWe6rlRpIv3ai-vercel-launches-skill-packs-for-bundled-skills-downloads) for one-command downloads of bundled skills, and the week reads as Vercel and Cloudflare both racing to make agents first-class platform citizens.\n\n### Postgres on Railway, and AI Gateway as a control plane\n\nRailway's [CLI v5.33.0](/release/rel_RYlVqOH7wcmI-VK4N5dVI-railway-cli-v5-33-0-adds-postgres-ha-replica-and-point-in-time-recovery) is a substantial Postgres release: management for high-availability clusters, point-in-time recovery, and PgBouncer connection pooling, plus a cluster config model and template apply/revert controller that make these composable features declarative. Live HA scaling and a persistent ops trail with upgrade guidance round out what's effectively a managed Postgres console in the terminal. The coding-agent support in [v5.32.0](/release/rel_DSIdUqrba5xcLvJU4qaBJ-railway-cli-v5-32-0-adds-coding-agents-on-cloud-vms) — driving agents on cloud VMs via a new `railway ca` command — ties back to the agent theme.\n\nAI Gateway is consolidating into a genuine control plane. Cloudflare's [unified Workers AI and AI Gateway](/release/rel_yV4w4XuoHG9mCgipvw5Wb-cloudflare-unifies-workers-ai-and-ai-gateway-access-billing-and-rate-limits) is the big one: one AI binding, one REST API, one observability path, and prepaid gateway credits now pay for Workers AI inference — with the rate limit raised from 20 to 50 requests per minute. The [User Insights dashboard](/release/rel_SB8mbT91iiwv7o1-2Glyr-ai-gateway-adds-user-insights-for-spend-tracking-and-anomaly-detection) adds spend tracking and anomaly detection by baselineing each user's 30-day p95 session cost, while the [Access integration](/release/rel_zeWnTgT6Ptvq_06gJwsO_-cloudflare-ai-gateway-adds-access-identity-aware-controls) brings identity-aware controls — verified user IDs land in request metadata as `cf.user_id`, enabling per-user spend limits and policy. Vercel's gateway moved too: [OpenTelemetry trace export via Drains](/release/rel_lpgfDtcnrdQH6CRqbAEvG-vercel-exports-ai-gateway-traces-via-drains-with-otel-support), [Seedance 2.5 video generation](/release/rel_nBx5kDMa8AJvnpvRN1zmj-vercel-ai-gateway-adds-seedance-2-5-video-generation), [Grok Imagine Image 2.0](/release/rel_f0-9QPvrfQRuH6XlVzv7I-vercel-ai-gateway-previews-grok-imagine-image-2-0), and [AWS Marketplace availability](/release/rel_j3n_RBQDHha0oSZyshnnj-vercel-ai-gateway-now-available-on-aws-marketplace).\n\n### SDK hygiene and security patches\n\nThree Baseten provider releases across the AI SDK corrected a real footgun: [AI SDK Baseten 0.1.0](/release/rel_0iLllr9OWtP-56npxExjI-ai-sdk-baseten-provider-0-1-0-makes-native-performance-client-opt-in-for), [Baseten v1.1.0](/release/rel__DX4Lr8b4MklodWul4qLC-ai-sdk-baseten-v1-1-0-makes-native-performance-client-opt-in-for-embeddings), and [@ai-sdk/baseten v2.1.0](/release/rel_3UFrztP_UPlNJa4YxNOax-ai-sdk-ai-sdk-baseten-v2-1-0-drops-native-performance-client-dependency-fixes) all make the native performance client opt-in — it's a NAPI addon with 16 platform binaries that couldn't load in edge runtimes, and it was imported at module top level. Embeddings now go over plain HTTP by default, with a 128-value per-call limit, plus fixed streamed token usage reporting. The [AI SDK 7.0.56](/release/rel_CqD1iNFotRgMGx_AfoZsm-ai-sdk-7-0-56-fixes-idempotent-video-generation-retries) and [Gateway v4.0.44](/release/rel_HRgqYvg3Tnh4EkI9kCE_Q-ai-sdk-gateway-v4-0-44-adds-async-video-operations-and-idempotent-retries) both fix idempotent video retries — a lost-response retry on `doStart` could have started a second billable generation, now prevented with an idempotency-key header. Also new is the [Fish Audio provider](/release/rel_n6HVPBQedYbbtvpIHyMYF-ai-sdk-adds-fish-audio-provider-for-speech-and-transcription) for speech and transcription. On the security front, Cloudflare's [WAF rules](/release/rel_X4D1Vg-PujnmaoKUdLlY9-cloudflare-waf-blocks-microsoft-sharepoint-rce-and-rails-active-storage-rce) block SharePoint RCE and an updated Rails Active Storage RCE, plus improved SSRF detection, and [Next.js 15.5.23](/release/rel_wEfUpTppYHYxCw9P5HzfP-next-js-v15-5-23-patches-replyserver-traversal-guards) ports ReplyServer traversal guards to the FlightClient transport.","releaseIds":["rel_3PTWWHE53ohsebyNRvUBt","rel_ICRMyJInG-1w5PEC7Pcpj","rel_FOkLPNJ-tclLt7gZGaOyQ","rel_9-T1i3Lbd7Jetx89SQbHU","rel_XL70oCXdbBQmgLAFG7qFh","rel_cw0jyHxyf3d7z93gZKg31","rel_Jrm39k9YiWe6rlRpIv3ai","rel_RYlVqOH7wcmI-VK4N5dVI","rel_DSIdUqrba5xcLvJU4qaBJ","rel_yV4w4XuoHG9mCgipvw5Wb","rel_SB8mbT91iiwv7o1-2Glyr","rel_zeWnTgT6Ptvq_06gJwsO_","rel_lpgfDtcnrdQH6CRqbAEvG","rel_nBx5kDMa8AJvnpvRN1zmj","rel_f0-9QPvrfQRuH6XlVzv7I","rel_j3n_RBQDHha0oSZyshnnj","rel_0iLllr9OWtP-56npxExjI","rel__DX4Lr8b4MklodWul4qLC","rel_3UFrztP_UPlNJa4YxNOax","rel_CqD1iNFotRgMGx_AfoZsm","rel_HRgqYvg3Tnh4EkI9kCE_Q","rel_n6HVPBQedYbbtvpIHyMYF","rel_X4D1Vg-PujnmaoKUdLlY9","rel_wEfUpTppYHYxCw9P5HzfP"],"releaseCount":161,"generatedAt":"2026-08-10T06:16:58.458Z","releases":[{"id":"rel_3PTWWHE53ohsebyNRvUBt","title":"Cloudflare launches Kitesurf, an agent-first browser on Browser Run","path":"/release/rel_3PTWWHE53ohsebyNRvUBt-kitesurf-agent-first-browser-now-on-browser-run","org":{"slug":"cloudflare","name":"Cloudflare"},"importance":4},{"id":"rel_ICRMyJInG-1w5PEC7Pcpj","title":"Cloudflare Workers AI agents can now debug Workers with local tracing","path":"/release/rel_ICRMyJInG-1w5PEC7Pcpj-ai-agents-debug-workers-locally-via-opentelemetry-traces","org":{"slug":"cloudflare","name":"Cloudflare"},"importance":4},{"id":"rel_FOkLPNJ-tclLt7gZGaOyQ","title":"Workers Vite plugin 1.51.0 improves Local Explorer observability views","path":"/release/rel_FOkLPNJ-tclLt7gZGaOyQ-local-explorer-traces-searchable-by-id-api-surfaced-to-agents","org":{"slug":"cloudflare","name":"Cloudflare"},"importance":3},{"id":"rel_9-T1i3Lbd7Jetx89SQbHU","title":"Vercel ships Agent Plugins 1.0.0 for packaging skills and MCP servers","path":"/release/rel_9-T1i3Lbd7Jetx89SQbHU-agent-plugins-1-0-0-standardize-skill-and-mcp-packaging","org":{"slug":"vercel","name":"Vercel"},"importance":3},{"id":"rel_XL70oCXdbBQmgLAFG7qFh","title":"Vercel CLI installs provider agent skills with Marketplace integrations","path":"/release/rel_XL70oCXdbBQmgLAFG7qFh-marketplace-integrations-auto-install-provider-skills","org":{"slug":"vercel","name":"Vercel"},"importance":3},{"id":"rel_cw0jyHxyf3d7z93gZKg31","title":"Vercel Hermes Agent adds AI Gateway inference and Sandbox microVMs","path":"/release/rel_cw0jyHxyf3d7z93gZKg31-ai-gateway-and-sandbox-microvms-now-on-hermes-agent","org":{"slug":"vercel","name":"Vercel"},"importance":3},{"id":"rel_Jrm39k9YiWe6rlRpIv3ai","title":"Vercel launches skill packs for bundled skills downloads","path":"/release/rel_Jrm39k9YiWe6rlRpIv3ai-skill-packs-bundle-multiple-skills-in-one-command","org":{"slug":"vercel","name":"Vercel"},"importance":3},{"id":"rel_RYlVqOH7wcmI-VK4N5dVI","title":"Railway CLI v5.33.0 adds Postgres HA, replica, and point-in-time recovery management","path":"/release/rel_RYlVqOH7wcmI-VK4N5dVI-postgres-ha-pitr-and-pgbouncer-management-added","org":{"slug":"railway","name":"Railway"},"importance":4},{"id":"rel_DSIdUqrba5xcLvJU4qaBJ","title":"Railway CLI v5.32.0 adds coding agents on cloud VMs","path":"/release/rel_DSIdUqrba5xcLvJU4qaBJ-coding-agents-now-run-on-cloud-vms","org":{"slug":"railway","name":"Railway"},"importance":3},{"id":"rel_yV4w4XuoHG9mCgipvw5Wb","title":"Cloudflare unifies Workers AI and AI Gateway access, billing, and rate limits","path":"/release/rel_yV4w4XuoHG9mCgipvw5Wb-workers-ai-and-ai-gateway-unify-model-access-and-billing","org":{"slug":"cloudflare","name":"Cloudflare"},"importance":4},{"id":"rel_SB8mbT91iiwv7o1-2Glyr","title":"AI Gateway adds User Insights for spend tracking and anomaly detection","path":"/release/rel_SB8mbT91iiwv7o1-2Glyr-ai-gateway-tracks-spend-and-flags-anomalous-usage-per-user","org":{"slug":"cloudflare","name":"Cloudflare"},"importance":3},{"id":"rel_zeWnTgT6Ptvq_06gJwsO_","title":"Cloudflare AI Gateway adds Access identity-aware controls","path":"/release/rel_zeWnTgT6Ptvq_06gJwsO_-ai-gateway-gains-access-identity-aware-controls","org":{"slug":"cloudflare","name":"Cloudflare"},"importance":3},{"id":"rel_lpgfDtcnrdQH6CRqbAEvG","title":"Vercel exports AI Gateway traces via Drains with OTel support","path":"/release/rel_lpgfDtcnrdQH6CRqbAEvG-ai-gateway-traces-exportable-via-drains","org":{"slug":"vercel","name":"Vercel"},"importance":3},{"id":"rel_nBx5kDMa8AJvnpvRN1zmj","title":"Vercel AI Gateway adds Seedance 2.5 video generation","path":"/release/rel_nBx5kDMa8AJvnpvRN1zmj-seedance-2-5-available-on-vercel-ai-gateway","org":{"slug":"vercel","name":"Vercel"},"importance":3},{"id":"rel_f0-9QPvrfQRuH6XlVzv7I","title":"Vercel AI Gateway previews Grok Imagine Image 2.0","path":"/release/rel_f0-9QPvrfQRuH6XlVzv7I-grok-imagine-image-2-0-previews-on-ai-gateway","org":{"slug":"vercel","name":"Vercel"},"importance":3},{"id":"rel_j3n_RBQDHha0oSZyshnnj","title":"Vercel AI Gateway now available on AWS Marketplace","path":"/release/rel_j3n_RBQDHha0oSZyshnnj-ai-gateway-procurable-via-aws-marketplace","org":{"slug":"vercel","name":"Vercel"},"importance":3},{"id":"rel_0iLllr9OWtP-56npxExjI","title":"AI SDK Baseten provider 0.1.0 makes native performance client opt-in for embeddings","path":"/release/rel_0iLllr9OWtP-56npxExjI-native-performance-client-opt-in-embeddings-default-to-http","org":{"slug":"vercel","name":"Vercel"},"importance":4},{"id":"rel__DX4Lr8b4MklodWul4qLC","title":"AI SDK Baseten v1.1.0 makes native performance client opt-in for embeddings","path":"/release/rel__DX4Lr8b4MklodWul4qLC-native-performance-client-opt-in-for-embeddings-streamed-token-usage-fixed","org":{"slug":"vercel","name":"Vercel"},"importance":3},{"id":"rel_3UFrztP_UPlNJa4YxNOax","title":"AI SDK @ai-sdk/baseten v2.1.0 drops native performance client dependency, fixes stream token usage","path":"/release/rel_3UFrztP_UPlNJa4YxNOax-native-performance-client-now-opt-in-stream-token-usage-fixed","org":{"slug":"vercel","name":"Vercel"},"importance":3},{"id":"rel_CqD1iNFotRgMGx_AfoZsm","title":"AI SDK 7.0.56 fixes idempotent video generation retries","path":"/release/rel_CqD1iNFotRgMGx_AfoZsm-video-retries-idempotent-stream-cancellation-hardened","org":{"slug":"vercel","name":"Vercel"},"importance":3},{"id":"rel_HRgqYvg3Tnh4EkI9kCE_Q","title":"AI SDK Gateway v4.0.44 adds async video operations and idempotent retries","path":"/release/rel_HRgqYvg3Tnh4EkI9kCE_Q-async-video-flow-supported-dostart-retries-idempotent","org":{"slug":"vercel","name":"Vercel"},"importance":3},{"id":"rel_n6HVPBQedYbbtvpIHyMYF","title":"AI SDK adds Fish Audio provider for speech and transcription","path":"/release/rel_n6HVPBQedYbbtvpIHyMYF-fish-audio-provider-ships-speech-and-transcription-models","org":{"slug":"vercel","name":"Vercel"},"importance":3},{"id":"rel_X4D1Vg-PujnmaoKUdLlY9","title":"Cloudflare WAF blocks Microsoft SharePoint RCE and Rails Active Storage RCE","path":"/release/rel_X4D1Vg-PujnmaoKUdLlY9-sharepoint-rce-and-rails-active-storage-rce-now-blocked-by-waf","org":{"slug":"cloudflare","name":"Cloudflare"},"importance":4},{"id":"rel_wEfUpTppYHYxCw9P5HzfP","title":"Next.js v15.5.23 patches ReplyServer traversal guards","path":"/release/rel_wEfUpTppYHYxCw9P5HzfP-replyserver-traversal-guards-ported-to-flightclient","org":{"slug":"vercel","name":"Vercel"},"importance":3}]}}