Does LeanCTX modify my files?

No. LeanCTX only intercepts reads and compresses the output. It never modifies source files.

Which programming languages are supported?

LeanCTX supports 27 languages via tree-sitter AST analysis, preserving code structure while removing redundant syntax and noise.

Can I disable compression for specific files?

Yes. Use path-based rules in config.toml to exclude files from compression or choose a specific read mode for them.

What happens if LeanCTX crashes?

LeanCTX degrades gracefully: reads fall through to native tools, so your agent can keep working without the compression layer.

工作原理

LeanCTX 控制着什么您的 AI 看到的内容。

LeanCTX 是 AI 代理的 context engineering layer：一个小的 Rust 二进制文件，对每一次读取、命令和搜索运行相同的循环。它决定你的代理阅读什么，记住它们跨会话学到了什么，保护它们触及了什么，证明它们保存在签名账本中的内容，以及重放它们看到的内容。它解析来自 26 种语言的结构化读取数据并去除噪声，确保送达模型的内容是有目的、压缩和可证明的。你只需安装一次。其他一切都是自动化的。

开始使用 See the architecture

The context pipeline.

Every request flows through four stages. Your tools stay the same — LeanCTX intercepts silently between your AI tool and the LLM.

Intercept

Your agent calls ctx_read, ctx_shell, or ctx_search. LeanCTX intercepts the call before it reaches the filesystem.

Analyze

Tree-sitter parses the AST. Shell patterns match the command. The content-addressed cache checks for re-reads.

Deliver

Only the signal reaches the model. Signatures, errors, relevant matches — structured, deduplicated, compressed.

One Rust binary. Zero config. Your agent gets better context without knowing LeanCTX exists.

What your agent actually sees.

When your agent reads a file, LeanCTX returns only the structural signature — function signatures, type definitions, and key logic. The full file never enters context.

Explore read modes

ctx_read — src/auth/handler.rs mode: signatures

1pub struct AuthHandler

2 config: AuthConfig,

3 store: Arc<dyn TokenStore>,

⋯ 42 lines omitted

47pub async fn validate(

48 &self, token: &str

49) -> Result<Claims, AuthError>

⋯ 18 lines omitted

68pub fn revoke(&self, id: &str) -> Result<()>

⋯ 9 lines omitted

78impl AuthHandler

79 fn decode_jwt(&self, raw: &[u8]) -> Result<Token>

Shell output, compressed.

A raw git diff produces hundreds of lines. LeanCTX pattern-matches 95+ commands and returns only the meaningful delta — file names, hunks, and error lines.

See all patterns

ctx_shell — git diff HEAD~1 pattern: git-diff

src/proxy/handler.rs

+ let budget = config.max_tokens.unwrap_or(64_000);

− let budget = 64_000;

src/core/compression/engine.rs

+ pub fn compress_with_budget(&self, input: &str, budget: usize)

+ -> CompressedOutput

− pub fn compress(&self, input: &str) -> CompressedOutput

tests/integration/budget_test.rs (new)

+ #[test] fn budget_caps_output_length()

+ #[test] fn budget_default_fallback()

Security built into every call.

Before any file read or shell command executes, LeanCTX validates the path against PathJail, checks the shell allowlist, and redacts detected secrets. lean-ctx doctor shows the full posture.

Security docs

lean-ctx doctor all checks passed

✓Binary signature valid (ad-hoc codesign)

✓PathJail active — root: /Users/dev/project

✓Shell allowlist loaded (14 allow, 6 deny)

✓Secret redaction enabled (.env, credentials.*)

✓LaunchAgent running (pid 4821, uptime 3h12m)

✓Proxy listening on 127.0.0.1:47821

✓MCP server registered (Cursor, Claude Code)

Security posture: containment + secret defense

Last audit: 2 minutes ago · 0 violations

How it works, answered.

The practical details behind the compression layer.

See itin action.

Install LeanCTX and watch your agent's context usage drop.

curl -fsSL https://leanctx.com/install.sh | sh

开始使用 Read the docs →

LeanCTX 控制着什么 您的 AI 看到的内容。