What it does
Token Saver is OpenLeash's first container plugin. It embeds Headroom as a compression engine; Headroom never receives provider credentials and never acts as the network proxy. OpenLeash `local-proxy` owns provider transport, `client-api` owns plugin ordering and policy, and this container receives signed requests and returns constrained JSON patches. The versioned response can also request host-mediated `logs`, `usage`, and `signals`. `client-api` checks the installed manifest and effective account setting, enforces each declared permission, sanitizes the payload, and writes through the normal OpenLeash capability implementation. The container never receives Postgres, cloud, provider, or OpenLeash credentials. Stateful CCR content remains in the plugin-scoped `/data` volume and is exposed only through the correlated signed tool API.