Skip to main content
Glama
Smart Quota Orchestrator

Smart Quota Orchestrator

by ElNeMeR70

⚡ 30-Second Quickstart (Zero pip Packages Required!)

Pick any workflow below — works out-of-the-box with Google Antigravity, Claude Code, Cursor, VS Code Copilot, Gemini CLI, and Windsurf:

# Option 1 — Universal 1-Command Project Bootstrap (Auto-detects Flutter / Next.js / Laravel / Python / Go / Rust)
npx -y smart-quota-orchestrator init --workspace .

# Option 2 — 1-Line Cloud Installer (Windows PowerShell)
irm https://sqo.elnemer-ai.com/install.ps1 | iex

# Option 3 — 1-Line Cloud Installer (macOS / Linux)
curl -fsSL https://sqo.elnemer-ai.com/install.sh | bash

# Option 4 — Just want a drop-in 1-File Constitution (Karpathy + FinOps + Quota Rules)?
curl -fsSL https://sqo.elnemer-ai.com/apex-skill.md -o CLAUDE.md

Once installed, run one single command on any bug or feature (in English or Arabic):

# Compiles Repo-DNA + BM25 line coordinates + Hidden Git Co-Change Twins + Pinned SDK Idioms in <45ms!
npx smart-quota-orchestrator autopilot "Fix duplicate Stripe webhook charge & slow orders dashboard" --workspace .

# Before committing or opening a PR: run all 8 deterministic security, FinOps, RTL & performance gates in <65ms!
npx smart-quota-orchestrator pr-shield --workspace .

Related MCP server: genpark-agent-budget-token-spend-circuit-breaker-skill

🔥 Why Do AI Coding Quotas Evaporate in 35 Minutes? (And How v13.0 Fixes It)

Modern AI models (Claude Opus / Sonnet 4.6, Gemini 4 Carbon / Hydrogen, GPT) are extraordinary engineers, yet 85%–95% of your 5-hour token quota and API bill is burned on invisible runtime waste — not the 30 lines of code you actually ship. Worse, unchecked AI diffs frequently introduce silent $5,000 cloud billing loops, SQL injection, TOCTOU wallet race conditions, and broken Arabic RTL layouts.

📊 Head-to-Head Comparison Across the AI Developer Ecosystem

Capability

Unprotected AI IDE

Static .cursorrules

Repo Dumpers (Repomix)

Single-Purpose MCPs

⚡ Smart Quota OS v13.0

Blocks >50KB Lockfiles & .map Pre-Billing

❌ Burns 120k tok

⚠️ Ignored 40% of time

⚠️ Dumps huge text

❌ No

✅ Deterministic <15ms Hook

Prevents Re-Reading Unchanged Files 3–5×

❌ Re-reads blindly

❌ Cannot track state

❌ Static dump

❌ No

✅ Stateful mtime_ns Lock

Symbol-Level AST Edits (-85% Output Tokens)

❌ Rewrites full file

❌ Text prompt only

❌ Read-only

✅ (Serena + LSP deps)

✅ sqo_edit_symbol (0 deps)

Single-Shot <420-Token Repo Architecture DNA

❌ 25,000+ tok walk

❌ Manual writing

❌ 40k–200k tok

❌ No

✅ sqo_repo_dna (-99.2%)

Cloud & AI FinOps $5,000 Bill-Shock Guard

❌ Ships infinite loops

❌ Passive text

❌ No

❌ No

✅ sqo_finops_guard

4-Seat Adversarial Council (TOCTOU + SRE)

❌ Single-agent bias

❌ No

❌ No

❌ No

✅ sqo_council_review (0 tok)

OWASP SAST + N+1 DB Profiler + Arabic RTL

❌ Ships subtle bugs

❌ Passive text

❌ No

⚠️ Separate heavy tools

✅ 8-Gate sqo_pr_review

Git Evolutionary Hidden Co-Change Twins

❌ Misses non-imports

❌ No

❌ No

❌ No

✅ sqo_git_forensics

External Dependencies / Background RAM

—

0

Node/Python deps

Heavy LSP / Vector DBs

✅ 100% Stdlib • 0.0% Idle CPU


🏗️ Deep Dive: Inside the 6-Layer Zenith Architecture

Layer 1 — The 3-Stage <15ms Stateful Runtime Hook Firewall (-96.8% Input Waste)

Passive Markdown rules ask an LLM not to waste tokens; under long-context pressure, LLMs forget. hooks/token_shield_hook.py enforces strict token discipline at the OS tool-execution boundary before tokens hit your bill:

  1. SessionStart (Zero Cold-Start Tax + 100% KV-Cache Protection): Injects your top 8 project architecture memories (.sqo/memory.db) + federated cross-repo wisdom (~/.sqo/hive_mind.db) once at Turn 0. Unlike dynamic per-turn hooks that inject timestamps and destroy your 90% LLM Prompt KV-Cache discount, SQO keeps your system prefix 100% byte-identical across turns.

  2. PreToolUse (4-in-1 Pre-Billing Interceptor):

    • Token-Bomb Blocker: Denies unbounded reads or cat dumps on package-lock.json, pubspec.lock, pnpm-lock.yaml, .min.js, and .js.map.

    • Stateful Duplicate-Read Deduplicator: Hashes (file_path, mtime_ns, line_range). If the agent tries to re-read an unchanged file already in context, SQO halts the duplicate read instantly and unlocks it automatically the millisecond edit_file modifies it!

    • Giant-Monolith Auto-Clamper: Transparently rewrites blind full-file reads on >1,200-line source files into bounded StartLine: 1, EndLine: 280 reads.

    • Blind Retry-Loop Breaker: Halts the 3rd identical failing terminal command if zero files were edited in between.

  3. PostToolUse (Silent Auto-Memory Graph & $USD ROI Ledger): Silently records file co-edits and test failed -> edit -> test passed bugfix resolutions into .sqo/memory_graph.db, while logging every single saved token and $USD equivalent into .sqo/roi_ledger.db!


Layer 2 — sqo autopilot, <420-Token Repo-DNA & Surgical AST Editing (-85% Output Tokens)

Output tokens cost 3× to 5× more than input tokens on frontier models ($15–$75 / 1M tokens), yet most agents rewrite an entire 500-line file just to change one 18-line method!

  • sqo autopilot "<goal>" (autopilot_engine.py): Runs Repo-DNA + Prompt X-Ray (BM25 symbol pinning in English & Arabic) + Git Forensics + SDK Radar in <45ms and hands the agent an exact surgical mission brief.

  • sqo_edit_symbol (edit_symbol.py): Locates ClassName.method_name via AST/brace boundaries, takes an automatic Time-Machine backup, splices only the mutated symbol (saving ~85% of Output Tokens!), verifies syntax in <8ms (ast.parse / brace & string balance), and auto-rolls back if a syntax error is detected!

  • sqo rules-gen (compile_repo_rules.py): Compiles a bespoke, repo-aware CLAUDE.md / AGENTS.md / .cursorrules tailored to your exact package.json / pubspec.yaml scripts, core modules, and SDK versions in <25ms (0 LLM tokens burned, unlike claude /init which burns 30,000+ tokens!).


Layer 3 — Cloud & AI FinOps Bill-Shock Guard (sqo_finops_guard)

AI coding agents love writing code that "works on localhost" while planting catastrophic cloud billing time-bombs. finops_guard.py catches them statically before you deploy:

// ❌ BLOCKED BY sqo_finops_guard [FINOPS-INF-USEEFFECT • Risk: $2,500/day]:
// Missing `[]` dependency array causes setOrders() -> re-render -> new Firestore listener -> infinite $$$ loop!
useEffect(() => {
  onSnapshot(collection(db, "orders"), (snap) => setOrders(snap.docs));
});

// ❌ BLOCKED BY sqo_finops_guard [FINOPS-RECURSIVE-TRIGGER • Risk: $10,000/hr]:
// Cloud Function triggered on `invoices` writes back to `invoices` with no idempotency guard!
export const onInvoice = onDocumentWritten("invoices/{id}", async (e) => {
  await db.collection("invoices").add({ syncedAt: Date.now() });
});

Also flags paid LLM API calls inside for/while loops, LLM calls missing max_tokens / max_output_tokens caps, and public AI HTTP endpoints missing auth/rate-limiting!


Layer 4 — 8-Gate Pre-PR Autonomous Code Doctor (sqo pr-shield / sqo_pr_review)

Before committing or merging any AI-generated code, pr_shield.py runs 8 deterministic engineering audits in <65ms and generates a complete GitHub Pull Request Review Table:

  1. 🛡️ OWASP Security SAST (sqo_security_audit): Catches SQL Injection (CWE-89), Command Injection (CWE-78), XSS (CWE-79), eval() RCE (CWE-95), and Weak MD5/SHA1 password hashing across Python, JS/TS, PHP & Dart.

  2. 💸 Cloud & AI FinOps Guard (sqo_finops_guard): Zero infinite useEffect read loops, recursive triggers, or uncapped LLM loops.

  3. 🎭 4-Seat Adversarial Council (sqo_council_review):

    • 🔴 Exploit Hunter: Catches TOCTOU Double-Spend Race Conditions (if user.balance >= amt: user.balance -= amt in memory instead of atomic SQL UPDATE wallets SET balance = balance - ? WHERE id = ? AND balance >= ?).

    • 🟠 3 AM Principal SRE: Flags outbound requests.post(...) / httpx calls missing timeout= (which freeze production workers indefinitely) and silent except: pass / catch {} blocks.

    • 🔵 UX Critic & 🟢 Karpathy Minimalist: Catches leftover debug console.log/debugger noise.

  4. ⚡ N+1 & UI-Jank Profiler (sqo_perf_audit): Catches DB/HTTP queries inside loops, sequential await waterfalls, undisposed Flutter TextEditingControllers, and jsonDecode inside Widget build().

  5. 🎨 Bilingual Arabic RTL & WCAG Auditor (sqo_ui_audit): Catches hardcoded EdgeInsets.only(left:) / margin-left: that break Arabic RTL layouts, unexpanded Text inside Flutter Rows, and <img> tags missing alt.

  6. ⚖️ Karpathy Gate & Live SDK Radar (sqo_verify_work + sqo_sdk_radar): Blocks TODO laziness stubs, silent function deletions, and deprecated 2023 SDK hallucinations (WillPopScope, .withOpacity(), legacy google.generativeai, Next.js 15 sync params).

  7. 📦 Anti-Hallucination Dependency & .env Parity (sqo_verify_deps + sqo_drift_guard): Catches undeclared phantom imports and missing .env.example keys before boot crashes.

  8. 🔐 10-Rule Secret DLP (sqo_secret_scrub): Blocks leaked OpenAI/Anthropic/Gemini keys, GitHub PATs, JWTs, Private Keys, and DB URIs.


Layer 5 — Git Evolutionary Forensics, Live Mermaid Diagrams & Hive-Mind Memory

  • 🕵️ Git Evolutionary Forensics (sqo forensics / sqo_git_forensics): Static AST graphs can only see explicit import statements. git_forensics.py mines git log commit co-occurrence matrices to uncover Hidden Co-Change Twins — e.g., backend/stripe_webhook.py and mobile/lib/models/plan_tier.dart that share 0 imports yet co-change in 82% of commits — plus Historical Bug-Magnet Hotzones!

  • 🕸️ Zero-Token Live Mermaid Generator (sqo arch-mermaid / sqo_arch_diagram): Auto-generates 3 copy-pasteable Mermaid diagrams (flowchart LR Core Gravity Modules, flowchart TD HTTP/UI Route Map, and erDiagram Database Schema) in <25ms!

  • 🧠 Cross-Project Federated Hive-Mind (sqo hive / sqo_hive_mind): Promote hard-won stack lessons once into ~/.sqo/hive_mind.db so every new repository on your machine inherits your engineering wisdom automatically!


🛠️ Step-by-Step Integration Guide by AI IDE

npx -y smart-quota-orchestrator sync-ide --workspace . --ides cursor
npx -y smart-quota-orchestrator rules-gen --workspace . --write .cursorrules

Automatically registers sqo-engine (all 53 MCP tools) in .cursor/mcp.json, generates stack-aware .cursorignore rules blocking lockfiles/build artifacts, and compiles a custom .cursorrules tailored to your repo!

npx -y smart-quota-orchestrator sync-ide --workspace . --ides claude
npx -y smart-quota-orchestrator rules-gen --workspace . --write CLAUDE.md

Wires .mcp.json, .claudeignore, and a repo-specific CLAUDE.md constitution in under 1 second.

# Windows PowerShell
irm https://sqo.elnemer-ai.com/install.ps1 | iex

# macOS / Linux
curl -fsSL https://sqo.elnemer-ai.com/install.sh | bash

Installs the complete plugin (plugin.json), activates SessionStart / PreToolUse / PostToolUse stateful hooks, and unlocks specialist subagents (codebase-scout, quota-planner, token-auditor).

npx -y smart-quota-orchestrator sync-ide --workspace . --ides vscode,windsurf
npx -y smart-quota-orchestrator git-guard --workspace .
npx -y smart-quota-orchestrator ci-shield --workspace .

Configures .vscode/mcp.json, .codeiumignore, local <40ms Git pre-commit secret/tax protection, and automated PR Shield checks!


🔌 Complete Catalog of All 53 Zero-Dependency Native MCP Tools

Category

Native MCP Tools (sqo-engine)

🚀 Autonomous Orchestration & Specs (8)

sqo_autopilot • sqo_spec_engine • sqo_compile_rules • sqo_init_preset • sqo_swarm_plan • sqo_dependency_slices • sqo_quota_pools • sqo_context_health

🧬 Ultra-Lean Code Recon & Diagrams (10)

sqo_repo_dna • sqo_code_search • sqo_smart_outline • sqo_find_callers • sqo_code_hotspots • sqo_api_routes • sqo_arch_diagram • sqo_git_forensics • sqo_blast_radius • sqo_pinpoint_error

🗡️ Surgical Editing & Zero-Risk Sandboxes (5)

sqo_edit_symbol (-85% Out Tok) • sqo_checkpoint (Time-Machine) • sqo_worktree_sandbox • sqo_gen_tests (0-Tok Synth) • sqo_shadow_check

🛡️ 8-Gate Security, FinOps & Quality (11)

sqo_pr_review • sqo_finops_guard • sqo_security_audit • sqo_council_review • sqo_perf_audit • sqo_ui_audit (RTL/a11y) • sqo_verify_work (Karpathy) • sqo_sdk_radar • sqo_verify_deps • sqo_drift_guard • sqo_dead_code

🗜️ Context, Schema & Media Compaction (10)

sqo_prompt_xray • sqo_context_pack • sqo_schema_distill (6-Stack DB) • sqo_api_contracts (OpenAPI 3.1) • sqo_budgeted_diff • sqo_compress_prompt • sqo_media_budget • sqo_i18n_audit • sqo_cache_audit • sqo_secret_scrub

🧠 Memory, ROI Telemetry & Cloud Hub (9)

sqo_memory_vault • sqo_memory_graph • sqo_hive_mind • sqo_memo_cache (2ms SHA-256) • sqo_roi_ledger • sqo_benchmark • sqo_cloud_hub • sqo_repo_badge • sqo_ci_shield


❓ Frequently Asked Questions (FAQ)

  • Does SQO send my source code to any external server or LLM API? 100% Local & Offline by default. All 53 MCP tools, SQLite databases (.sqo/), BM25 search, SAST, FinOps, and hook shields run locally on your machine in pure Python 3.8+ standard library (0 external pip packages). Cloud features (sqo hub pull or sqo share --publish) are strictly opt-in.

  • How fast are the runtime hooks and tools? PreToolUse hook checks run in 4ms–14ms, incremental mtime_ns SQLite graph warm queries run in <10ms, and a full 8-Gate sqo pr-shield workspace audit finishes in <65ms.

  • Does it break Anthropic / OpenAI / Gemini Prompt KV-Caching? Never — SQO is specifically engineered to protect your 90% KV-Cache discount (sqo cache-audit verifies 100/100 static prefix stability).


🇸🇦 الملخص العربي السريع

تُعد منظومة Smart Quota & Superpowers OS (v13.0 Zenith) أول نظام تشغيل هندسي متكامل ومجاني مفتوح المصدر (Zero Dependencies) يجمع بين مضاعفة كوتا وكلاء الذكاء الاصطناعي من 10 إلى 25 ضعفاً وبين حماية مشاريعك في الإنتاج من الثغرات والفواتير الكارثية:

  • 🚀 أمر القيادة الذاتية الموحد (sqo autopilot): يفحص البصمة الجينية للمشروع (Repo-DNA)، ويحدد أسطر الدوال المطلوبة بدقة (BM25)، وينبّهك للتوائم الخفية في تاريخ Git، ويحقن قواعد الإصدارات الحديثة في أقل من 45ms بصفر توكن!

  • 💸 حارس فواتير السحابة والـ AI (sqo finops): يمنع كوارث الفواتير اللانهائية قبل الرفع (مثل useEffect مع قراءات Firestore بدون []، والدوال السحابية العودية، واستدعاءات الـ LLM داخل الحلقات).

  • 🛡️ بوابة فحص ما قبل النشر الثمانية (sqo pr-shield): تفحص 8 محاور هندسية دفعة واحدة (ثغرات SQLi/XSS، ثغرات السحب المزدوج للرصيد TOCTOU، أخطاء الاتجاه العربي RTL، بطء استعلامات N+1، المكتبات المهلوسة، وتسريب المفاتيح السرية).

  • 🗡️ التعديل الجراحي للدوال (sqo_edit_symbol) + مولّد القواعد الذكي (sqo rules-gen): يوفر 85% من توكنات الكتابة الباهظة ويولّد ملف CLAUDE.md / .cursorrules مخصص لمشروعك في ثانية واحدة!

📖 اقرأ الشرح العربي التفصيلي الكامل والأمثلة العملية خطوة بخطوة في:

Available Tools

53 tools
sqo_api_contractsA

Spec-Driven Backend-to-Frontend API Contract & OpenAPI 3.1 Extractor: distills HTTP endpoints and path parameters into a <350-token Contract Table + OpenAPI 3.1 JSON so mobile/frontend agents never need to read backend controllers.

Inputs: workspace (required).

sqo_api_routesB

Extract complete Backend & UI Route table across Next.js, Express/Fastify, NestJS, FastAPI/Flask, Laravel, Go, and Flutter in <200 tokens.

Inputs: workspace (required).

sqo_arch_diagramB

Zero-Token Live Mermaid Architecture, Route & ER Diagrammer (v13.0 Zenith): inspects real imports, HTTP/UI routes, and DB schemas in <25ms to emit 3 GitHub-ready Mermaid diagrams (flowchart LR, flowchart TD, erDiagram).

Inputs: workspace (required).

sqo_autopilotC

1-Command Autonomous Mission Compiler (v13.0 Zenith): orchestrates Repo-DNA + Bilingual Prompt X-Ray BM25 Pinning + Git Forensics Twin Warnings + Pinned SDK Idioms in <45ms into a single <650-token Master Mission Packet!

Inputs: goal (required), workspace (required).

sqo_benchmarkA

Run live empirical token-compression benchmarks on a workspace and return measured Before-vs-After savings.

Inputs: workspace (required).

sqo_blast_radiusA

Trace transitive reverse-import dependents (who imports X) and return ONLY affected downstream files and minimal unit tests to run.

Inputs: targets (required), workspace (required).

sqo_budgeted_diffB

Compress working-tree git diff into a strict token ceiling, automatically stripping lockfiles, sourcemaps, and generated bundles.

Inputs: workspace (required), staged, max_tokens.

sqo_cache_auditB

Audit hooks, MCP tools, and rules for LLM Prompt KV-Cache prefix stability (ensuring 75%-90% prompt cache hit discounts).

Inputs: workspace (required).

sqo_checkpointB

Zero-Git-Conflict Session Time-Machine: create instant zlib-compressed source snapshots, diff live edits against a checkpoint, or surgically roll back files without touching Git history.

Inputs: action (required), workspace (required), files, label, +1 more.

sqo_ci_shieldB

Generate .github/workflows/sqo-shield.yml GitHub Actions Pull Request Shield to enforce zero secret leaks, pre-flight syntax checks, KV-cache stability, and vision media budgets on every PR.

Inputs: workspace (required).

sqo_cloud_hubC

Global Smart Quota Community Hub (https://sqo.elnemer-ai.com/api/presets.php): list, pull, or publish battle-tested Golden AI Rules & Gotchas for Flutter, Next.js, Laravel, Python, Rust & Go.

Inputs: action (required), rule, stack, title, +1 more.

sqo_code_hotspotsB

Sync incremental mtime-cached SQLite code graph (<10ms warm) and return top Cyclomatic Complexity x Import Fan-In bug hotspots plus unreferenced orphan modules.

Inputs: workspace (required), top_k.

sqo_compile_rulesB

Bespoke Repo-Aware CLAUDE.md / AGENTS.md / .cursorrules Compiler (v13.0 Zenith): inspects your exact repo stack, build/test scripts, core modules & SDK versions in <25ms (0 LLM tokens!) and compiles custom AI constitution files.

Inputs: workspace (required), write_target.

sqo_compress_promptA

Deterministically compress verbose raw text, repetitive JSON arrays, and noisy log pastes by 55%-85% while scrubbing accidental API keys/secrets.

Inputs: text (required).

sqo_context_healthC

Measure quadratic session Context-Rot risk (0-100) on the active conversation transcript and emit a ready-to-paste <350-token Zero-Loss Handoff Snapshot.

Inputs: workspace (required), goal.

sqo_context_packB

Compile a multi-file directory or workspace into a strict token budget using full code for focus files and AST skeletons for supporting files.

Inputs: workspace (required), paths, max_tokens, focus_files.

sqo_council_reviewC

4-Persona Adversarial Engineering Council (v12.0 Quantum): audits code from 4 senior seats (Exploit Hunter TOCTOU race conditions, 3 AM SRE missing HTTP timeouts & swallowed exceptions, UX Critic, Karpathy Minimalist) with 0 extra LLM token cost!

Inputs: workspace (required).

sqo_dead_codeB

Orphan Module & AI Dead-Code Hunter (v13.0 Zenith): cross-checks all source files against inbound imports and framework entrypoints to find unreferenced orphan files bloating context tokens.

Inputs: workspace (required).

sqo_dependency_slicesC

Parse import dependency graphs into Stage-0 shared contracts and Stage-1 collision-free parallel worker slices (optionally emitting an Antigravity run_workflow script).

Inputs: workspace (required), goal, max_workers, emit_workflow.

sqo_drift_guardB

Environment Variable & Config Drift Detector (v11.0 Hypernova): cross-checks all process.env, os.getenv, env(), and String.fromEnvironment references in code against .env.example to prevent production boot crashes.

Inputs: workspace (required).

sqo_edit_symbolB

Serena-Class Surgical Symbol-Level AST Mutator (v10.0): edits exact functions, classes, or Class.method symbols by name (-85% Output Tokens!) with automatic Time-Machine backup and <8ms syntax auto-rollback.

Inputs: action (required), symbol (required), file_path (required), workspace (required), +1 more.

sqo_find_callersB

Fast Cross-Repo Symbol Call-Site Locator (v10.0): finds all call sites and definitions of a function or method before changing its signature.

Inputs: symbol (required), workspace (required), max_hits.

sqo_finops_guardC

Cloud & AI API Bill-Shock Preventer (v12.0 Quantum): detects infinite React useEffect Firestore/API read loops, recursive Cloud Function self-triggers, LLM calls inside loops, and uncapped/unrated AI endpoints before $5,000+ overnight bills!

Inputs: workspace (required).

sqo_gen_testsB

Zero-Token Deterministic Unit & Edge-Case Test Synthesizer (v11.0 Hypernova): parses Python, TS/JS, or Dart source files and generates ready-to-run Red-Green TDD test harnesses (saving ~3,000 Output Tokens per module!).

Inputs: file_path (required), output_path.

sqo_git_forensicsB

Git Evolutionary Forensics — Invisible Co-Change Twins & Bug-Magnet Miner (v12.0 Quantum): mines git log commit co-occurrence matrices to reveal un-imported files that always change together (>=55% coupled) + historical bug-magnet files.

Inputs: workspace (required), max_commits.

sqo_hive_mindB

Cross-Project Federated Brain (~/.sqo/hive_mind.db): promote architectural wisdom/gotchas across repos, recall stack-specific lessons (flutter, nextjs, laravel, python), or inject global lessons into a new project.

Inputs: action (required), query, stack, title, +2 more.

sqo_i18n_auditA

Universal Localization / i18n Drift & Placeholder Auditor: checks Flutter .arb and locales/*.json bundles for missing translation keys and {var} placeholder mismatches in <200 tokens (-97% vs reading raw locale files).

Inputs: workspace (required).

sqo_init_presetB

Auto-detect workspace framework (Flutter, Next.js, Laravel, Python/FastAPI, Node/TS, Go, Rust) and bootstrap IDE MCP configs, framework ignore shields, starter memories & Git pre-commit guard.

Inputs: workspace (required), preset.

sqo_media_budgetB

Estimate multimodal vision & PDF input token costs (PNG, JPEG, WebP, GIF, PDF) across Gemini, Claude, and OpenAI and flag oversized 4K screenshots.

Inputs: workspace (required), targets.

sqo_memo_cacheB

SHA-256 Content-Hash Invalidated Semantic Memoization Cache: stores/retrieves expensive subsystem analyses in 2ms (100% token savings) and auto-invalidates when any bound source file changes on disk.

Inputs: action (required), workspace (required), files, answer, +1 more.

sqo_memory_graphC

Claude-Mem + Graphiti Auto-Captured Temporal Knowledge Graph (v10.0): queries .sqo/memory_graph.db co-edit & bugfix relationships per file or exports Mermaid architecture memory diagrams.

Inputs: action (required), workspace (required), file, note.

sqo_memory_vaultB

Persistent cross-session SQLite FTS5 architectural memory bank (auto-injected at SessionStart!). Store ('remember') or BM25-query ('recall' / 'list') project facts.

Inputs: action (required), workspace (required), files, query, +3 more.

sqo_perf_auditB

Database N+1 Query, Sequential Async Waterfall & Flutter UI-Jank Profiler (v11.0 Hypernova): catches N+1 DB/HTTP calls inside loops, unbatched sequential awaits, undisposed Flutter controllers, and jsonDecode in build().

Inputs: workspace (required).

sqo_pinpoint_errorA

Parse any multi-file crash stack trace (Python, Node/TS, Dart/Flutter, Go, Rust, PHP) and extract the exact +-10 line source window around every local workspace frame in 1 call.

Inputs: workspace (required), stack_trace (required), radius.

sqo_prompt_xrayC

Prompt Token X-Ray & Sniper Brief Auto-Enricher (v12.0 Quantum): upgrades vague Arabic/English prompts into <160-token laser-pinned briefs with exact file:Lstart-Lend BM25 coordinates, saving ~28,000 blind exploration tokens!

Inputs: prompt (required), workspace (required).

sqo_pr_reviewB

8-Gate Pre-PR & Pre-Deploy Autonomous Scorecard (v13.0 Zenith): runs OWASP SAST + Cloud FinOps + 4-Seat Council + N+1 Perf + Arabic RTL + Phantom Deps + Env Drift + Secret DLP in <65ms and outputs a GitHub PR Review Markdown Table (0–100 Grade A+).

Inputs: workspace (required).

sqo_quota_poolsA

Analyze live model quota JSON into shared vs. independent reserve pools, reset countdowns, and safe %/hour burn rates.

Inputs: models_json (required).

sqo_repo_badgeC

Generate a verified Smart Quota OS SVG shield badge (sqo-badge.svg) displaying the repository's empirical token reduction % and prompt-tax grade.

Inputs: workspace (required), output_path.

sqo_repo_dnaB

Single-Shot <420-Token Repository Genome Synthesizer (v12.0 Quantum): compresses an entire unfamiliar codebase (stacks, entrypoints, top 5 gravity modules, DB ER genome, HTTP routes, env keys) into 1 ultra-dense strand (-99.2% vs Repomix dumps!).

Inputs: workspace (required).

sqo_roi_ledgerB

Query the live SQLite Token & Dollar ($USD) ROI Ledger showing cumulative tokens saved by the autonomous hook shield and MCP compression engines.

Inputs: db_path.

sqo_schema_distillB

Universal 6-Stack Database & GraphQL Schema Distiller: compresses 30k-90k tokens of SQL DDL, Prisma, Laravel migrations, Flutter Drift/Sqflite, SQLAlchemy, or GraphQL schemas into a <350-token Entity-Relationship DSL + Mermaid diagram.

Inputs: workspace (required).

sqo_sdk_radarB

Context7-Class Live Version-Pinned SDK Idioms & Deprecation Radar (v10.0): reads installed package versions (package.json, pubspec.yaml, pyproject.toml) and detects deprecated 2023/2024 API hallucinations with modern fixes.

Inputs: workspace (required).

sqo_secret_scrubA

Audit workspace source files for hardcoded secrets (outputs safe masked fingerprints only) or redact secrets from text.

Inputs: text, workspace.

sqo_security_auditB

OWASP Top-10 & Agentic SAST Vulnerability Scanner (v11.0 Hypernova): scans Python, TS/JS, PHP/Laravel, Dart & Go for SQL Injection (CWE-89), Command Injection (CWE-78), XSS (CWE-79), Eval/Pickle RCE (CWE-95), Weak Crypto & CORS bugs in <15ms!

Inputs: workspace (required).

sqo_shadow_checkB

Speculative <12ms Pre-Flight Syntax, Balanced Delimiter, Broken Relative Import & Merge-Conflict Guard across Python, JSON, TS/JS, Dart, PHP, Go, and Rust BEFORE running expensive builds/tests.

Inputs: workspace (required), targets.

sqo_smart_outlineA

Extract compact AST/symbol signatures and Lstart-Lend line ranges from a large source file (saves 85-96% tokens vs reading full file), or extract one specific symbol body.

Inputs: file_path (required), symbol.

sqo_spec_engineC

Spec-Kit + Taskmaster Autonomous Spec-Driven DAG Engine (v10.0): manages .sqo/specs.db atomic task graphs with file-ownership locks, <220-token next task briefs, and mandatory verification command gates.

Inputs: action (required), workspace (required), goal, slug, +3 more.

sqo_swarm_planB

Autonomous Multi-Agent Swarm Brief & Model-Routing Planner: partitions any goal into Stage-0 Shared Contracts (Frontier model) + collision-free Stage-1 Parallel Workers (Fast model, -82% quota burn) with ready-to-send prompts.

Inputs: goal (required), workspace (required), max_workers.

sqo_ui_auditC

Bilingual Arabic RTL, WCAG Accessibility & Flutter RenderFlex Overflow Auditor (v11.0 Hypernova): catches hardcoded physical left/right directions, missing image alt labels, and unwrapped Text inside Flutter Row().

Inputs: workspace (required).

sqo_verify_depsA

Anti-Hallucination Dependency & Phantom Import Verifier: cross-checks source imports across Python, JS/TS, and Dart/Flutter against package.json, pubspec.yaml, pyproject.toml, and requirements.txt to catch hallucinated/undeclared packages before build!

Inputs: workspace (required).

sqo_verify_workB

Executable Andrej Karpathy + Superpowers Diff Gatekeeper (v10.0): audits git diffs for TODO/placeholder laziness, silent public symbol deletions, out-of-scope file creep, and bloat, returning a 0-100 Surgical Discipline Score.

Inputs: workspace (required), diff_text, allowed_files.

sqo_worktree_sandboxB

Superpowers Isolated Experiment Sandbox (v10.0): creates zero-risk Git worktree / snapshot sandboxes under .sqo/sandboxes/<name>, diffs changes, promotes verified files, or cleans up cleanly.

Inputs: action (required), workspace (required), name.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    TDQS

    C2.8/5.0

    Scored across 53 tools

    Disambiguation2/5

    The set has many overlapping clusters: sqo_pr_review, sqo_security_audit, sqo_council_review, and sqo_verify_work all perform diff/code audits; sqo_memory_vault, sqo_hive_mind, sqo_memory_graph, and sqo_memo_cache all store/retrieve memory; sqo_context_pack, sqo_repo_dna, sqo_compress_prompt, and sqo_prompt_xray all compress or package context. Some tools are genuinely distinct, but the boundaries between several categories are unclear enough that an agent could easily choose the wrong audit, memory, or compression tool.

    Naming Consistency4/5

    Every tool uses the same sqo_ snake_case prefix, which makes the set easy to recognize and scan. However, the suffix pattern mixes noun phrases (sqo_dead_code, sqo_memory_vault, sqo_blast_radius) with verb-led names (sqo_compile_rules, sqo_verify_deps, sqo_edit_symbol), so it is mostly consistent rather than perfectly verb_noun throughout.

    Tool Count1/5

    With 53 tools, the surface is far beyond a well-scoped MCP set and is likely to overwhelm tool selection. Many tools are near-duplicates or subsumed by orchestrator tools like sqo_pr_review and sqo_autopilot, so the count is an extreme mismatch for the server's purpose.

    Completeness4/5

    The surface broadly covers repo analysis, context compression, auditing, memory, planning, quota tracking, test generation, and symbol editing, so most workflows in the stated domain have a tool. There are minor gaps around general whole-file read/write/list operations and direct build/test execution, but agents can work around these with the symbol-editing and analysis tools.

    Maintenance

    ActivityMaintained
    ResponsivenessNo recent community issues

    Related MCP Connectors

    Related MCP Servers

    • A
      license
      Not graded
      quality
      B
      maintenance
      Enables autonomous agents to enforce financial guardrails by tracking real-time token burn and cost velocity, automatically throttling or freezing execution when budgets are exceeded. It also blocks destructive shell commands, prompt injections, and runaway planning loops while sanitizing outputs before they are returned.
      7
      MIT
    • A
      license
      Not graded
      quality
      B
      maintenance
      Enables AI coding agents to compile polyglot repositories into architectural mipmap containers and use stateful pre-edit guardrails, fog-of-war resolution gating, blast-radius analysis, and compact Markdown packets to inspect code and prevent unsafe edits.
      2
      Apache 2.0