Summary

Ten signals today, and Cloudflare drove six of them, using the day to push Workers past HTTP into raw TCP and gRPC, add push-triggered CI/CD to Artifacts, and give its Agents SDK turn-by-turn tracing. Two threads run across the rest: coding agents keep escaping the editor — Cursor's agents now act across Gmail, Drive, Calendar, Docs, and Sheets, Vercel's eve gained a real web browser, and GitHub added a per-task reasoning dial to its Copilot cloud agent — while security and governance quietly matured, with Vercel WAF for Blob hitting GA, Cloudflare shipping fresh WAF rules for SharePoint and Rails, a FOCUS-based Billable Usage API for FinOps, and cross-team container registry sharing. The through-line is platforms racing to make autonomous agents both more capable and more governable.

Key themes

  • Agents reach beyond code: Cursor's Google Workspace plugins, Vercel eve's agent-browser web navigation, and GitHub's per-task reasoning control all widen what autonomous agents can do and how finely teams can steer them.
  • Cloudflare expands the edge as an application platform: inbound TCP and gRPC on Workers and Containers, push-triggered CI/CD in Artifacts, and turn-by-turn agent tracing in the Agents SDK turn the edge into a place to build and observe full backends.
  • Security coverage broadens to new surfaces: Vercel WAF for Blob reaches GA and Cloudflare's managed WAF ruleset adds SharePoint, Rails, and SSRF cloud-metadata protections, extending firewall coverage from front-end routes to storage and back-end frameworks.
  • Enterprise cost and governance controls harden: Cloudflare's FOCUS-aligned Billable Usage API and Vercel's cross-team Container Registry sharing target FinOps visibility and multi-team distribution for larger organizations.

Notable items

  • Cloudflare Workers and Containers gain inbound TCP and gRPC via Spectrum, enabling full-duplex gRPC services (with automatic gRPC-to-gRPC-web translation) and closing the gap with traditional container platforms for stateful and streaming backends.
  • Cursor's new Google Workspace plugins let its agents read and act across Gmail, Drive, Calendar, Docs, and Sheets, pushing coding-agent vendors onto the turf of horizontal assistants.
  • Cloudflare Agents SDK adds agent tracing — a dashboard with conversation replay and a trace waterfall surfacing model calls, tool runs, approvals, token usage, and runtime ops for production agent debugging.
  • Cloudflare launches a Billable Usage API built on the FOCUS cloud-cost spec, giving FinOps teams a single endpoint to fold Cloudflare spend into the same tooling as AWS, Azure, Google Cloud, and Oracle.
  • Cloudflare's WAF managed ruleset adds detections for Microsoft SharePoint and Ruby on Rails flaws plus stronger SSRF cloud-metadata protection, with a follow-on release on August 10 covering a vBulletin RCE.
  • Vercel ships agent-browser, giving eve agents human-like web navigation — clicking, form-filling, screenshots, and console/network inspection — inside the agent sandbox.

Source coverage

Source rows used: 10