workerd has also had granular sandboxing all along... I actually coined the term "code mode" in this blog post:

https://blog.cloudflare.com/code-mode/

Kind of hard to figure out what sandboxing controls are available given the lack of docs.

Given it's server focus though, I'd be very surprised if it was as good as Deno for giving agents a local code sandbox.

Docs: https://developers.cloudflare.com/dynamic-workers/

Also another blog post from when the feature became generally available: https://blog.cloudflare.com/dynamic-workers/

I agree it would be an awkward choice for an agent that runs as a local application, but the trend I think is towards agents running more and more on servers.

Servers, sure. Not necessarily your servers tho

workerd is open source, you can run it on your own servers.

hard pivot to ai confirmed.

I think it's well-known that we've been pretty focused on AI agent infrastructure for a while...