Mesa

Versioned POSIX filesystem built for AI agents working on long-lived documents.

Mesa is a durable, POSIX-compatible filesystem with built-in version control, designed specifically for AI agents that produce, edit, and coordinate documents. Think Git semantics applied to any file type, at agent scale, exposed as a regular filesystem.

The problem

Every team building enterprise agents hits the same wall: how do you persist documents beyond ephemeral sandbox lifetimes, give agents fine-grained access control, and build human-approval workflows for sensitive edits? Swap "real-estate contracts" for case files, insurance claims, audit reports, or pull requests - the shape of the problem is identical.

Existing storage primitives fall short:

Storage What it gives you What's missing
S3 / cloud FS Durable storage No versions, no branches, no diffs, concurrent clobber
GitHub / GitLab Version semantics Rate limits, poor large-file support, not agent-scale
Local sandbox FS Fast reads/writes Ephemeral, no persistence, no access control

How it works

Mesa brings code-repository primitives to any file type:

  • Branches so agents work in parallel without locking
  • Automatic durability so no work is lost when a sandbox dies
  • Fine-grained history with review, rollback, and replay per change
  • Sparse materialization so massive document sets load instantly, fetching only needed files on demand
  • Access control so different agents read/write only appropriate files

All exposed as a standard POSIX filesystem. Agents just read and write files - no git clone, no git push.

Usage

Mount via FUSE for any application in a sandbox or server:

curl -fsSL https://mesa.dev/install.sh | sh
mesa mount --daemonize
cd ~/.local/share/mesa/mnt && claude

Or use the TypeScript SDK for application-level mounting:

import { Mesa } from "@mesadev/sdk";

const mesa = new Mesa({ apiKey: process.env.MESA_API_KEY });
const fs = await mesa.fs.mount({
  repos: [
    { name: "project-foo", bookmark: "session-123" },
    { name: "agent-skills", bookmark: "main" },
  ],
  mode: "rw",
});

Each SDK mount point is fully isolated with its own access controls. Multiple agent sessions can run on the same multi-tenant server.

Status

Currently in private beta. Early design partners are using it in production across legal, healthcare, GTM, business operations, and coding agents. Public beta and v1.0 expected in the coming months. Contact: founders@mesa.dev.

Good fit for anyone building agents that deal with long-lived documents where you need audit trails, parallel execution, and human-in-the-loop approvals.

links

social