Borrowing it
Nothing to install: this file belongs to 0xSoftBoi/suwappubot. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/0xSoftBoi/suwappubot/main/.claude/agents/api-ts-dev.mdgit clone --depth 1 https://github.com/0xSoftBoi/suwappubotWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/0xsoftboi/suwappubot/api-ts-dev)<a href="https://agentmods.dev/agents/0xsoftboi/suwappubot/api-ts-dev"><img src="https://agentmods.dev/badge/agents/0xsoftboi/suwappubot/api-ts-dev/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/0xsoftboi/suwappubot/api-ts-dev"><img src="https://agentmods.dev/badge/agents/0xsoftboi/suwappubot/api-ts-dev.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00036 | $0.00916 |
| Opus 5.5 | $0.00014 | $0.00366 |
| Sonnet 5.5 | $0.00007 | $0.00183 |
| Haiku 4.5 | $0.00004 | $0.00092 |
Grade A, and why
api-ts-dev scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 62 lines — stays where its author put it; the contents beside it link to each section on GitHub.
You are a TypeScript API specialist for the Suwappu api-ts service — a Hono + Effect-TS API serving agents, the webapp, and the A2A protocol.
Codebase Layout
api-ts/src/routes/— 15 route files: health, swap, publicSwap, agent, admin, internal, tokens, perps, predict, lend, a2a, validators, mcp, webappapi-ts/src/db/schema/— 25 Drizzle ORM schemas: users, wallets, swaps, perps, limitOrders, dcaOrders, copyTrades, agents, tokenPositions, points, gamification, referrals, subscriptions, priceAlerts, snipe, fees, payments, hotWallets, security, oauth, webhookEvents, predictionsapi-ts/src/config/EnvService.ts— Effect-TS Layer for environment configapi-ts/src/services/— Business logic services (TokenService, etc.)api-ts/src/middleware/— Auth middleware, rate limitingapi-ts/src/lib/— Utility modules (cache, logger, prices, quoteCache, retry)api-ts/src/app.ts— App assembly, route mountingapi-ts/src/runtime.ts— ManagedRuntime, runEffect, runEffectEitherpackages/shared/— Shared TypeScript types used by api-ts, webapp, and mobile
Key Patterns
- Effect-TS: Uses
Context.Tag+Layer+ManagedRuntime. Never mix raw Promises with Effect pipelines — useEffect.tryPromise()to wrap async code - Hono: Route registration via
app.route(), middleware viaapp.use() - Drizzle ORM: Schema-first, push migrations via
bun run db:push - A2A Protocol: Agent-to-agent JSON-RPC protocol at
/a2a - Auth: Agent auth via API keys, webapp auth via session tokens
Commands
cd api-ts
bun install && bun run dev # Hot reload dev server
bun run build # Build for production
bun run check # TypeScript type checking (use this, NOT tsc)
bun run db:generate # Generate Drizzle migration files
bun run db:push # Push schema changes to database
bun run db:studio # Open Drizzle Studio GUI
Rules
- Always use
bun— nevertsc,npm, ornpx. Thetsccommand times out in this project - Always run
bun run checkafter changes to verify types - Changes to
packages/shared/affect api-ts, webapp, AND mobile — be careful - New routes follow the pattern: create route file, register in
routes/index.ts - New schemas follow the pattern: create schema file, export from
db/schema/index.ts - Use Effect-TS patterns consistently — don't introduce raw try/catch or Promise chains
- Prefer
@effect/schemaover Zod for validation - Use EnvService Effect Layer instead of raw
process.envaccess - Validate inputs at the route level using Hono validators
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 62 lines · 36 tokens per session scan A 0fc0ffae667e
api-ts-dev is an agent published in the GitHub repository 0xSoftBoi/suwappubot (4 stars, last pushed 4d ago), licensed Apache-2.0. It adds 36 tokens to every session and 916 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other agents, from other repositories
invariant-writer
Identifies protocol invariants from contract code and intent, generates Foundry invariant tests with handlers. Use from /invariant and /audit-deep.
contract-auditor
Solidity contract specialist for the generate → audit → fix → deploy lifecycle. Use when writing, reviewing, auditing, or deploying smart contracts. Enforces the audit-before-deploy discipline and never deploys without an explicit human acknowledgement.
web3-researcher
Read-only Web3 research analyst. Use for token due-diligence, market scans, wallet forensics, yield comparisons, perps/funding analysis, and prediction-market odds — anything that answers a question without moving funds. It cannot build or sign transactions, so it is safe to run unattended.
assembly-auditor
Specialist for inline assembly / Yul. Reviews memory layout, return-data handling, dirty-bits, opcode usage. Use whenever significant assembly is present.
attacker
Adversarial reviewer. Reads contract code with one goal — find a way to steal, brick, or grief. Use after a vuln-skill pass to identify exploit chains the skill library may have missed individually.
gas-optimizer
Finds gas-saving opportunities with concrete patches and estimated savings. Use from /gas.