在 Cloudflare 上跑 Claude Managed Agents：全球部署、隔离执行、工具自定义

// worker-deploy-status.js
export default {
  async fetch(request, env) {
    // 只允许来自 Agent 的内部调用
    const signature = request.headers.get("X-Agent-Signature");
    if (signature !== env.AGENT_SECRET) {
      return new Response("Forbidden", { status: 403 });
    }

    const url = new URL(request.url);
    const service = url.searchParams.get("service") || "all";

    // 模拟查询内部部署系统（实际中替换为你的后端调用）
    const status = await queryDeployStatus(env.DEPLOY_DB, service);

    return Response.json({
      tool_result: {
        service,
        status: status.state,
        last_deploy: status.timestamp,
        commit: status.commit_sha,
      },
    });
  },
};

async function queryDeployStatus(db, service) {
  // 实际实现：查 D1 / 内部 API / KV
  // 这里用 D1 做示例
  const result = await db
    .prepare("SELECT state, timestamp, commit_sha FROM deploys WHERE service = ? ORDER BY timestamp DESC LIMIT 1")
    .bind(service)
    .first();
  return result || { state: "unknown", timestamp: null, commit_sha: null };
}

# wrangler.toml
name = "deploy-status-tool"
main = "worker-deploy-status.js"

[[d1_databases]]
binding = "DEPLOY_DB"
database_name = "deploy-status-db"
database_id = "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"

[vars]
AGENT_SECRET = "change-me-to-a-real-secret"

wrangler d1 create deploy-status-db
wrangler deploy

curl -X POST "https://api.cloudflare.com/client/v4/accounts/{account_id}/ai/agents" \
  -H "Authorization: Bearer $CF_API_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "deploy-review-agent",
    "model": "claude-sonnet-4-20250514",
    "description": "Review deployment status and suggest rollback actions",
    "tools": [
      {
        "type": "custom",
        "name": "query_deploy_status",
        "description": "Query the deployment status of a service",
        "worker_endpoint": "deploy-status-tool.your-subdomain.workers.dev",
        "input_schema": {
          "type": "object",
          "properties": {
            "service": {
              "type": "string",
              "description": "Service name to query"
            }
          },
          "required": ["service"]
        }
      }
    ],
    "private_backends": [
      {
        "name": "internal-api",
        "binding": "INTERNAL_API",
        "service": "your-internal-api-worker"
      }
    ]
  }'

curl -X POST "https://api.cloudflare.com/client/v4/accounts/{account_id}/ai/agents/{agent_id}/run" \
  -H "Authorization: Bearer $CF_API_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "prompt": "Check the deployment status of the payment-service and tell me if the latest deploy is healthy. If not, suggest a rollback plan.",
    "stream": false
  }'