Belay

The local trust and memory plane that lets Codex, Claude Code, Antigravity, and other coding agents work as one auditable fleet without sharing private chats or plaintext secrets.

Comment

Problem

Developers increasingly run several AI coding agents against the same codebase. Those agents behave like isolated operators: they rescan the same repository, lose important decisions between sessions, collide on files, and sometimes request credentials or production actions through prompt-visible workflows.

Existing orchestrators usually assume they own every agent. That does not fit a developer who deliberately chooses different tools for different jobs. The missing layer is neutral infrastructure that lets independent agents coordinate safely without merging their private conversations or handing one agent authority over the others.

Solution

Belay is a local-first control plane exposed through MCP. It gives heterogeneous coding agents one bounded view of approved project knowledge, planned work, task ownership, file leases, progress, blockers, and recent activity.

Agents can propose durable project or workspace facts, but those facts remain invisible until a human approves the exact canonical payload digest. Risky commands use the same approval machinery. Secrets stay behind a local encrypted vault and are injected only into registered child processes; known raw and encoded forms are scrubbed from streamed output.

A private Genkit TypeScript service on Google Cloud Run makes Gemini 3.6 Flash the Cloud Arbiter and Fleet Intelligence Engine. Before execution, Gemini decomposes a Workbench goal into structured tasks for Claude Code, Codex, and Antigravity, assigns required repository-relative lease paths, orders dependencies, and labels risk. Raw source, secret-shaped content, connection strings, unknown fields, and known secret encodings are rejected locally before any network call. Gemini cannot authorize execution or mutate local state; SQLite-WAL remains the enforcement authority.

Key Features

  • Dual-mode visual portal (🛡️ Cockpit & ⚡ Studio): Fleet governance board for active tasks, file lock topologies, checklist boards, AES-256 vault posture, audit log, and Gemini conflict adjudication.
  • Approved semantic memory: Durable project- and workspace-scoped facts with provenance, explicit supersession, and collision detection.
  • Atomic file ownership: SQLite WAL transactions provide task leases and repository-relative file locks with exactly one winner for overlapping concurrent requests.
  • Deterministic compact context: project://manifest provides byte-identical structural context with stable hashing (<100ms warm indexing, 685 tokens).
  • Secret-safe execution: AES-256-GCM encrypts environment payloads while age wraps the DEK to the local SSH identity.
  • Human-governed mutation: Command and knowledge proposals are bound to canonical SHA-256 digests, expire, accept one authenticated decision, and reject replay or mutation.
  • Gemini Cloud Arbiter on Cloud Run: Private Cloud Run service powered by Gemini 3.6 Flash / Genkit for multi-agent goal decomposition & AST risk assessment with zero-network egress boundaries.

Testing Instructions

git clone https://github.com/codersguru-hub/Belay.git
cd Belay
npm ci
npm run build
npm test
npm run demo:verify
npm run verify:no-leaks

Built With

Share this project:

Updates