agents

Cloudflare-run agents: a session launched from Pando runs in its own Durable Object in the Worker pando-agents, with a Linux sandbox whose workspace is the session's branch. It acts as the person who launched it, through a sandbox credential minted for it (cloud-<n>, the session's machine); revoking that credential cuts it off. Its state is only what is known exactly (working, waiting, failed, stopped), and every change is an agent.updated event. Without pando-agents the routes answer 503 agents_unavailable.