Not a filing cabinet. A product, mapped.

Under the hood, Mega Saver is 289 design specs. But you don't care about the count — you care about what it does for you. Here it is, grouped by the things you actually touch: saving tokens, remembering, staying safe, trusting the output, and picking up where you left off.

12
capability areas
289
design specs behind them
113
high / critical risk
4
months shipped
one pipeline, every tool output
redactchunkrankfitsummarize

risk, honestly classified

289specs
critical124%
high10135%
medium9533%
low166%
varied10%
unrated6422%

shipping cadence

May59Jun68Jul94Aug68

Twelve capabilities.

Every one traces to its design specs — linked below each card. Jump to what you care about.

Token Saver Cut token spend on every tool call 46 specs Memory & Brain Never re-explain your repo 36 specs Smart Reads The model sees what matters 21 specs Safety & Redaction Secrets never leak 20 specs Trust & Verification Prove it before you trust it 10 specs Continuity & Handoff Pick up where you left off 12 specs Multi-Agent Mesh & Office Many agents, one team 23 specs Observability & Analytics Know what you saved 33 specs Proxy & Metering Count tokens, not conversations 5 specs Desktop Console See it in the browser 19 specs Setup & Connectors Works with your agent 38 specs Platform & Foundation The engine underneath 26 specs

Token Saver

46 specs

Cut token spend on every tool call

Big reads, command runs, and noisy logs are compressed to the lines that matter — with the full raw output one call away, never thrown away.

mega output · mega session saver · proxy_* tools · PostToolUse hook

Save integrity

unrated

Compression is proven lossless — saved bytes are real, recoverable, and audited.

classify → rank → dedupe → fit → summarize, in one deterministic pass.

Commands are rewritten so compressed output is the only version cached.

Filter matrix

medium

Structured compressors for git, docker, npm, pip, cargo, terraform.

Compression that does not invalidate the model's prompt cache.

Multi-chunk recovery and GC that never deletes a live session's output.

Honest metrics

unrated

Token-weighted savings that refuse to double-count or inflate.

Reversible extractive compression for docs and memory files.

all 46 specs in this area

Memory & Brain

36 specs

Never re-explain your repo

Durable, human-approved facts about your project that every agent inherits — plus a portable, syncable, self-healing brain.

mega memory · mega brain · mega warmup · mega adopt

Typed, approved facts — decisions, bugs, gotchas, conventions — recalled across sessions.

Agents suggest, a human approves. Nothing enters recall unvetted.

Hybrid BM25 + embeddings find the right memory, not just keyword hits.

See how memories connect, conflict, and supersede each other.

Brain sync

critical

Your brain follows you across machines, E2E-encrypted to your own S3.

Brain doctor

medium

One command explains your brain's health and points at the exact repair.

Warm start

high

Every session boots with a budgeted brief assembled from the project brain.

Agent-written memories must resolve evidence before they persist.

Evidence-backed hybrid recall — the benchmark runtime, now the product.

all 36 specs in this area

Smart Reads

21 specs

The model sees what matters

Files and context reach the model on real boundaries, ranked by your task — not dumped as raw walls of text.

proxy_read_file · context packs · outline-first · intent hook

AST reads

high

Files split on function/class boundaries, so the model sees whole coherent units.

Outline-first

medium

Signatures first, bodies on demand — lossless and additive.

Re-reading an unchanged file returns a pointer, not the file again.

Never re-send what's already in the context window.

Compression keeps the lines about your current task, not generic ones.

A freeloader table showing which injected memories and rules actually earn their place.

Repo index

high

Typed code blocks so retrieval works on blocks, not files.

all 21 specs in this area

Safety & Redaction

20 specs

Secrets never leak

Secrets and PII are stripped before anything is stored or sent, and the redaction itself is hardened against pathological input.

redaction pipeline · context firewall · permissions.yaml

Secrets are stripped before anything is stored — the invariant the whole product rests on.

Home credential stores and private keys never reach the model.

Blocked secret reads and PII redactions, with an auditable leak ledger.

Regexes that cannot hang on pathological input, proven by a growth-ratio harness.

Path-glob matching rebuilt on an NFA matcher — no regex injection.

Tighten-only command and path allow-lists at the project boundary.

Pasted content is held and inspected before it can act on your repo.

all 20 specs in this area

Trust & Verification

10 specs

Prove it before you trust it

Success claims are joined to receipts, packages are checked against reality, and reviews produce receipts that prove coverage.

mega verify · mega review · mega prove bite · firewall

“Done” is joined to the actual exec receipt — no unverified success claims.

Blocks imports of packages that don't exist before they waste a session.

Surfaces failures that would otherwise vanish into the log.

Receipts prove a review covered the code that actually shipped.

Claims about code are checked against the code itself.

Proves a test actually catches the bug it claims to cover.

Past mistakes become rules that block repeats before they happen.

all 10 specs in this area

Continuity & Handoff

12 specs

Pick up where you left off

Live task state moves between agents, dead sessions are rebuilt, and every task starts with a bounded kickoff brief.

mega handoff · mega resume · mega warmup · mega fork

Hot handoff

unrated

Pack live task state and hand it to another agent mid-session.

A dead session's working context is rebuilt into a bounded kickoff capsule.

After compaction, the agent is reconnected to what it still needs.

Task kickoff

unrated

A bounded, safe kickoff brief for every task — nothing more, nothing less.

Snapshot a conversation and resume from a pending capsule.

all 12 specs in this area

Multi-Agent Mesh & Office

23 specs

Many agents, one team

Parallel agents see each other, share a board, and hand work back and forth — files are the source of truth, pull-based.

mega mesh · mega office · mega board · mega task

Live presence, messaging, and claims across parallel agents in one repo.

Agent office

critical

Roster, roles, task queues, and a live board for many agents.

Post, resolve, and promote facts on a shared board.

Peer Q&A

medium

Agents ask each other — rate-limited and keyword-hinted.

Flow governor

medium

Advisory nudges keep a session from running away.

Task engine

medium

Decompose a task into a tracked, retryable plan with selective retry.

all 23 specs in this area

Observability & Analytics

33 specs

Know what you saved

Token savings, cost, decision traces, and anomaly alerts — honest numbers, labeled estimates, never inflated.

mega audit · mega cost · mega savings · mega alerts · mega why

A windowed, persisted token-savings summary — your running receipt.

Cost ledger

medium

Spend and savings receipts by project, task, agent, and session.

See why each context happened — the causal chain behind every output.

See which files and outputs burn the most tokens.

mega why

medium

One command explains the raw-vs-delivered gap for the last failure.

Honest report of output that bypassed the saver, grouped by cause.

History, insights, forecast, and share cards — with CSV/JSON export.

Median+MAD spike detection and persistent savings goals.

Per-session and per-task token limits with warn-only alarms.

all 33 specs in this area

Proxy & Metering

5 specs

Count tokens, not conversations

An opt-in transparent proxy records token counts only — never prompts, responses, or keys — and never compresses by default.

mega proxy · mega proxy start

Proxy mode

unrated

Transparent token metering — counts only, on loopback, opt-in.

A dedicated supervisor keeps the proxy up without EADDRINUSE crash-loops.

Cache parity

unrated

Routing through the proxy no longer taxes the prompt cache.

all 5 specs in this area

Desktop Console

19 specs

See it in the browser

A loopback-only dashboard with a one-time token — sessions, memory, the saver toggle, and the setup doctor, all keyboard-reachable and WCAG AA.

mega gui · /api routes · live session cockpit

The localhost dashboard served by mega gui — no clone, no build.

A live-first dashboard over running Claude Code sessions.

Setup doctor

medium

Install and repair the bridge and connector blocks in one click.

Dashboard numbers wired to real ledgers — it stops lying.

Sidebar shell and amber editorial — a calmer, clearer console.

all 19 specs in this area

Setup & Connectors

38 specs

Works with your agent

Thin connectors for Claude Code, Codex, Cursor, and Aider — plus one-command onboarding, hooks, the MCP bridge, and skill packs.

mega init · mega up · mega connector · mega mcp · mega hooks

Hooks, MCP bridge, and the dashboard in a single mega init.

Activate everything idempotently, with manifest-backed reversal.

Connectors

medium

Instruction blocks for Claude Code, Codex, Cursor, and Aider — your content preserved.

Saver hook

high

Native tool output compressed automatically via a PostToolUse hook.

MCP bridge

critical

35+ tools over stdio, each publishing a real Zod input schema.

Audits your MCP config for clones, shadowing, and non-localhost URLs.

Protects generated files, lockfiles, and build output from agent edits.

Discover, install, and load agent skills — with path-escape guards.

all 38 specs in this area

Platform & Foundation

26 specs

The engine underneath

The agent-agnostic core, the context-gate pipeline, Windows support, atomic writes, and the governance files — the bedrock every feature builds on.

@megasaver/core · context-gate · indexer · content-store

The agent-agnostic engine — agents connect to it, never the reverse.

Context gate

medium

The redact → chunk → rank → fit → summarize pipeline, as its own package.

Full win32 store path, CRLF-safe writes, and a Windows CI matrix.

Atomic writes

medium

A committed write never fails on a post-rename fsync error.

One durable atomic-JSON-store mechanic, shared by every package.

The repo skeleton and the agent governance files that dogfood the product.

A daemonless lazy worker, so the standalone bundle stays lean.

all 26 specs in this area