需 Node.js 18+ 与 Bun,且必须准备 Cloudflare 账号和 API token;生产预览需 Workers Paid 计划与 Workers for Platforms 权限;需自备至少一个模型提供商的凭据,除非使用 AI Gateway 中存储的密钥;生产环境需自定义域名、通配符 DNS,部分场景还需 Advanced Certificate Manager
vibesdk
cloudflareMIT活跃维护一套完全跑在 Cloudflare 技术栈上的开源 vibe coding 平台,帮你快速搭建自己的 AI 编码产品,用户用自然语言描述即可生成应用。
An open-source vibe coding platform that helps you build your own vibe-coding platform, built entirely on Cloudflare stack
git clone https://github.com/cloudflare/vibesdk.git
cd vibesdk
bun install
bun run setup
bun run devREADME 未说明本地硬件要求;运行依赖 Cloudflare 账号与 Workers Paid 计划,生产预览需 Workers for Platforms 权限
基于 Cloudflare 全栈的开源 AI 编码代理平台,可自建并部署全栈应用
一套完全跑在 Cloudflare 技术栈上的开源 vibe coding 平台,帮你快速搭建自己的 AI 编码产品,用户用自然语言描述即可生成应用。
核心能力
- 用模型与工具循环迭代生成代码,而非固定阶段
- 代理在需求不清时主动提出结构化澄清问题
- 每个项目由 Durable Object 提供隔离工作区
- 生成的预览以 Dynamic Worker 加载,无需常驻开发服务器
- 检查浏览器控制台日志并自动修复运行时错误
容易踩的坑
- v1.5.0最新正式版2026-02-06 · 2026-02-06 20:22 UTC
1.5.0 (2026-02-03)
Features
- add app visibility check for preview deployment (3c4f203)
- add phase timeline change subscription and event handling (a1c7404)
- add phase timeline change subscription and event handling (f8b14cd)
- enhance rate limit result with exceeded limit details and limit values (aceac60)
- enhance rate limit result with exceeded limit details and limit values (721b9e8)
- enhance type exports and improve utility functions for better type safety (47eba5f)
- expand drizzle types script on sdk bundle (96b709e)
- expand drizzle types script on sdk bundle (33eb39f)
- implement phase timeline management and state tracking in SDK (dbcf51f)
- implement WebSocket ticket authentication and management system (1fe8640)
- integration tests with worker (f565aff)
- integration tests with worker (a68d9cb)
- readme update (33f72ab)
- refactor client methods to include app management functionalities (b9f0416)
- sdk tests (a841168)
- sdk ws ticket auth and auto reconnect (932271f)
- update model configurations and enhance inference handling (f7960d5)
- use original worker types in sdk (6745f04)
- use original worker types in sdk (0bc7db9)
- wrap global fetch to preserve context in Workers runtime (b7be5db)
Bug Fixes
- v1.4.02025-12-20 · 2025-12-20 19:00 UTC
查看更新说明
Release v1.4.0
Highlights
- New Client SDK: Full TypeScript SDK (
@cf-vibesdk/sdk) for programmatic interaction with the platform, enabling headless automation, CI/CD integration, and third-party tooling (#277) - Zero-Knowledge Vault: End-to-end encrypted user secrets storage with Argon2id/WebAuthn PRF key derivation for secure API key management (#267)
- Enhanced Code Generation Safety: Pre-deploy AST-based static analysis detects and auto-fixes common React antipatterns like render loops and unstable selectors (#267)
- Gemini 3 Flash Support: New model option with optimized prompts for improved performance and reduced token costs (#274)
Changes
SDK
- Added TypeScript Client SDK with
VibeClient,PhasicClient, andAgenticClientclasses for programmatic platform access (#277) - Implemented
BuildSessionfor WebSocket session management with auto-reconnect and exponential backoff (#277) - Added
WorkspaceStorefor local file state synchronization andSessionStateStorefor reactive state management (#277) - Added HTTP retry logic with exponential backoff and jitter to prevent thundering herd scenarios (#282)
- Improved resource cleanup with
clear()methods across SDK stores to prevent memory leaks (#282) - Added blueprint parsing utilities (
BlueprintStreamParser,blueprintToMarkdown) for handling streaming JSON/Markdown (#267) - Added Node.js support via WebSocket shim (#277)
Worker / API
- Vault System: New
UserSecretsStoreDurable Object for encrypted server-side storage with key rotation support (#267) - Screenshot Rendering: Added retry mechanism with blank screenshot detection using entropy analysis; improved page load detection (#283, #284)
- Query Validation: Added 20,000 character limit on agent queries with clear error messages (#275)
- Command Output: Truncated exec command output to 1,000 characters to prevent token overflow (#267)
- Inference Context Refactor: Separated persistent metadata from runtime state to prevent accidental serialization of API keys (#276)
- New Models: Added Claude 4.5 Opus, Grok 4.1 Fast, and Qwen 3 Coder 480B model definitions (#267)
- Replaced CLI token authentication with SDK API key management system (#267)
- Changed preview domain to cloudflarepreviews.net (#267)
Frontend
- Vault UI: Added VaultSetupWizard, VaultUnlockModal, SecretsManager, and related components for vault management (#267)
- API Keys UI: Comprehensive API key management interface with create/revoke/list functionality (#267)
- Feature Registry: Introduced feature registry/provider with lazy-loaded modules for better project type decoupling (#267)
- Improved legacy chat stability and preview rendering with proper state normalization (#267)
- Fixed duplicate agent session creation during rerenders (#272)
- Removed redundant width/height styles from preview iframe (#267)
Agent / Prompts
- Added pre-deploy safety gate with AST analysis using
@babel/traversefor detecting React antipatterns (#267) - Detects: infinite render loops, missing useEffect dependencies, unstable store selectors, module-level JSX (#267)
- Implements deterministic fixes for common patterns without LLM invocation (#267)
- Phase implementation prompt rewrite (v78) with condensed guidelines and clearer examples (#274)
- Reduced max phases from 12 to 10 for tighter project scope (#267)
- Improved phase context by showing only last phase with full details (#267)
- Added common pitfalls and dependency documentation to prompts (#267)
Sandbox / Containers
- Improved process monitoring with HTTP health probes instead of lsof (#269)
- Better process group handling with detached mode for clean termination (#269)
- Added port failure threshold tracking for more reliable restarts (#269)
Tooling / CI
- AI Changelog Workflow: Dedicated
ai-changelog.ymlfor automated release notes generation (#271) - Issue Auto-fix: New `claude-issu
- New Client SDK: Full TypeScript SDK (
- v1.3.02025-12-09 · 2025-12-09 03:16 UTC
- v1.2.02025-11-30 · 2025-11-30 21:33 UTC
查看更新说明
1.2.0 (2025-11-30)
Features
- add agent-specific model constraints and refactor generation (3f9ccf7)
- Cost optimizations via model configs and prompt improvements (#247) (2b3a901)
- enhance changelog generation with detailed PR and commit data (8950852)
- improve template selection reliability and prompt clarity (8ed1a08)
- prompt tuning for shorter blueprints (e9041f1)
- rewrite process monitoring and error handling (b0db701)
- upgraded to sandbox sdk version 0.5.2 (9f9cc7a)
Bug Fixes
- add additional ownership verification checks (b74a645)
- added instructions for token creation (3544038)
- added instructions for token creation (f7cc7ea)
- added instructions for token creation (ea3f110)
- better stale comment removal + correct YAML string escaping (834cffa)
- cleanup chat.tsx for build (670c8d6)
- don't wait for runtime errors if app not deployed (0dd3e7e)
- dont clear runtime errors on executeDeepDebug (1eda73e)
- prevent race condition in code generation state (188ba0d)
- typeScript features configurable to reduce memory (d3f984c)
- unescape commit messages before git operations (d51310b)
- v1.1.02025-11-04 · 2025-11-04 07:04 UTC
用户点评
登录用户的真实使用记录,可按版本和硬件筛选还没有人点评。第一个说出真实体验的人最有价值。
Cloudflare VibeSDK
An open source, agentic platform for building and deploying full-stack applications on Cloudflare.
Try VibeSDK at build.cloudflare.dev
What is VibeSDK?
VibeSDK lets people build full-stack applications by working with an AI coding agent. Describe what you want, answer clarifying questions, and follow the agent as it plans, edits files, deploys previews, inspects errors, and iterates with you in the loop.
The platform runs the complete workflow on Cloudflare. Think drives the agentic model-and-tool loop, a Durable Object provides an isolated workspace for each project, Dynamic Workers serve generated application previews, Durable Object Facets provide per-app SQLite storage, and Cloudflare Artifacts stores durable git history and restore points.
Capabilities
- Agentic code generation: Build iteratively through a model-and-tool loop instead of a fixed sequence of generation phases.
- Human-in-the-loop clarification: Let the agent ask structured questions when a request is underspecified.
- Live workspace: Follow generated files and edits in an integrated code editor.
- Dynamic previews: Bundle generated code and load each preview as a Dynamic Worker without a long-running development server.
- Browser verification: Inspect browser console output, repair runtime errors, and redeploy in the same loop.
- Application data: Give each generated app isolated SQLite-backed storage through a Durable Object Facet, with database inspection and reset controls.
- Version history: Save agent-created restore points in Cloudflare Artifacts and roll back without rewriting existing history.
- Model flexibility: Route configured model providers through AI Gateway with centralized observability and caching.
- Realtime progress: Stream agent output, tool activity, file changes, and deployment status to the UI.
- Project export: Export generated projects when you want to continue development outside VibeSDK.
Architecture
| Component | Role |
|---|---|
ThinkAgent | Agent powered by Cloudflare Think and backed by a Durable Object that runs the model-and-tool loop |
SpaceDO | Durable Object that provides each project's isolated workspace and files |
| Cloudflare Artifacts | Binding that stores commits, branches, history, and restore points |
| Worker Loader | Binding that loads bundled code as a Dynamic Worker preview |
Generated App | Durable Object Facet with isolated SQLite storage |
| AI Gateway | Routes configured model providers with observability and caching |
flowchart LR
U[User] <--> T[ThinkAgent]
T <--> M[Models via AI Gateway]
T <--> S[SpaceDO workspace]
S <--> A[Cloudflare Artifacts]
S --> L[Worker Loader]
L --> W[Dynamic Worker preview]
W <--> F[App Facet + SQLite]
Agent and tools
Think manages conversation history, streaming, skills, and the iterative model-and-tool loop. Its explicit tools read and edit the SpaceDO workspace, create restore points, deploy previews, inspect browser logs, and ask clarifying questions. Bash access is disabled.
Previews and application data
VibeSDK bundles each committed deployment with @cloudflare/worker-bundler and loads it through the Worker Loader binding. Static assets are served by SpaceDO, while backend requests and WebSockets are forwarded to the generated App Durable Object Facet. Each Facet has isolated SQLite storage that users can inspect and reset.
Files and version history
SpaceDO is the workspace and file layer. Cloudflare Artifacts is the git and version-history layer. Rollback restores a selected commit into the current branch, creates a new commit, and redeploys without rewriting history.
Agent workflow
- Understand: Read the request and ask structured questions when important details are missing.
- Build: Create and edit files in the SpaceDO workspace.
- Save: Record coherent restore points in Cloudflare Artifacts.
- Deploy: Commit and bundle the current branch into a Dynamic Worker preview.
- Verify: Inspect the live preview and browser console output.
- Repair: Fix build or runtime errors and repeat the deploy-and-verify loop.
- Stream: Continuously surface output, tool calls, files, and preview status in the UI.
Deploy your own VibeSDK
The fastest way to deploy is the Deploy to Cloudflare flow:
You will need:
- A Cloudflare account with the required Workers features enabled.
- A Workers Paid plan and Workers for Platforms access for production app previews.
- A Cloudflare API token with access to the resources created by setup.
- Credentials for at least one supported model provider, unless you use provider keys stored in AI Gateway.
- A custom domain for production, including wildcard DNS and Advanced Certificate Manager when required by your subdomain layout.
Authentication providers, model providers, and export integrations are optional and configuration-dependent. See the complete setup guide for current permissions, DNS, AI Gateway, provider, OAuth, and production configuration.
Local development
Prerequisites
- Node.js 18 or later
- Bun
- A Cloudflare account and API token
Quick start
git clone https://github.com/cloudflare/vibesdk.git
cd vibesdk
bun install
bun run setup
bun run dev
Open http://localhost:5173. The setup script configures local and production environments, Cloudflare resources, AI Gateway and model providers, authentication, and database migrations.
For all setup options and troubleshooting, read docs/setup.md.
Feature toggles
Feature settings are dashboard-managed rather than committed in wrangler.jsonc, so production values survive deploys through keep_vars: true. Set them in the Cloudflare dashboard for each deployed environment, or in .dev.vars for local development. Unset values default to off unless noted otherwise: ENABLE_ARTIFACTS, ENABLE_READ_REPLICAS, ENABLE_CLOUDFLARE_LIMITS, ENABLE_USER_ACCOUNT_DEPLOY, ALLOWED_EMAIL, USE_CLOUDFLARE_IMAGES, and USE_TUNNEL_FOR_PREVIEW; ENABLE_EMAIL_AUTH defaults to on. ALLOCATION_STRATEGY uses its normal default when unset. See the feature-toggle setup reference for dependencies and behavior.
Development commands
| Command | Purpose |
|---|---|
bun run dev | Start the frontend development server |
bun run dev:browser | Start the optional local browser sidecar used for console-log inspection |
bun run build | Build SpaceDO and the Vite application |
bun run typecheck | Run TypeScript type checking |
bun run lint | Run ESLint |
bun run test | Run the test suite |
bun run test:watch | Run tests in watch mode |
bun run deploy | Build, migrate, and deploy using .prod.vars |
Security and isolation
- Project isolation: Each app maps to its own ThinkAgent Durable Object, SpaceDO workspace, Artifacts repository, and generated application Facet.
- Tool boundaries: Think uses explicit workspace and product tools; workspace bash access is disabled.
- Application data isolation: Each generated application stores its data in its own SQLite-backed Durable Object Facet.
- Preview authorization: Preview URLs use signed, branch-scoped access.
- Secret handling: Provider and platform credentials flow through configured Cloudflare services and bindings.
- Reversible changes: Artifacts-backed restore points make deployed changes recoverable without deleting history.
Troubleshooting
- Preview does not resolve: Confirm the wildcard DNS record is proxied, allow time for DNS propagation, and verify any required Advanced Certificate Manager configuration.
- AI Gateway authentication fails: Confirm the gateway and token are configured, the token has Run permission, and the selected provider has valid credentials or stored keys.
- Database migrations fail: Check D1 access and API-token permissions, then retry after newly provisioned resources become available.
- Required variables are missing: Verify
JWT_SECRET, Cloudflare account credentials, AI Gateway settings, and credentials for every enabled provider or integration.
More diagnostics are available in the setup guide. For help, use GitHub issues, GitHub discussions, or the Cloudflare Developers Discord.
Contributing
- Fork and clone the repository.
- Run
bun installandbun run setup. - Make focused changes that follow
AGENTS.md. - Run
bun run typecheck,bun run lint, andbun run test. - Open a pull request describing the change and how you validated it.
Resources
- VibeSDK demo
- VibeSDK setup guide
- Cloudflare Workers
- Cloudflare Agents
- Durable Objects
- AI Gateway
- Cloudflare Developer Platform Discord
- Cloudflare Community
License
VibeSDK is available under the MIT License.