The wapps platform
The tooling we build everything else with. Our AI agents get shared memory and a coordinator, and never see a secret.
- Platforms
- Cloudflare Workers, macOS
- Stack
- Rust, WebAssembly, Durable Objects, D1, R2, Vectorize
- Status
- In use inside the studio
- Since
- May 2026
The wapps platform is the tooling we build everything else with. It gives our AI agents a shared memory and a coordinator. The coordinator hands out work, records decisions and sends questions to a person. Its command line keeps secret values out of the agents’ sight.
We use it inside the studio. It may become open source later.
We put the coordination at the edge and kept the work on our Macs.
An agent needs a file system and a git checkout, and a Durable Object has neither. So only the ledger, the work list and the leases run on Cloudflare Workers. Each lease carries a fencing token, and a write with a stale token is refused.
We proved the move to Rust against the old answers.
We ported the services from TypeScript to Rust. The Rust was tested against the live TypeScript, and when Node was missing the tests failed instead of skipping. When the TypeScript was deleted, its answers were frozen into files that the Rust must still match.
We give each agent job its own sandbox.
Each job runs under a macOS sandbox profile made for it. It writes only its own checkout, and never into its git folder. It opens no terminal, reads none of our credentials, reaches no pasteboard and sends no Apple Event.
We keep secret values out of the agents' sight.
Agent mode is on by default when no terminal is attached. In agent mode the command line refuses every command that would print a secret. When a command runs with secrets, a scrubber replaces each secret value in its output. The scrubber protects the transcript; it is one layer, not a guarantee.
At the edge
On our Macs
Choose a part to read what it does.
Choose a part. Architecture only.