Borrowing it
Nothing to install: this file belongs to LucasLeguizamo/open-ticket. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/LucasLeguizamo/open-ticket/main/.claude/agents/ot-db.mdgit clone --depth 1 https://github.com/LucasLeguizamo/open-ticketWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/lucasleguizamo/open-ticket/ot-db)<a href="https://agentmods.dev/agents/lucasleguizamo/open-ticket/ot-db"><img src="https://agentmods.dev/badge/agents/lucasleguizamo/open-ticket/ot-db/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/lucasleguizamo/open-ticket/ot-db"><img src="https://agentmods.dev/badge/agents/lucasleguizamo/open-ticket/ot-db.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00059 | $0.00424 |
| Opus 5 | $0.00030 | $0.00212 |
| Sonnet 5 | $0.00012 | $0.00085 |
| Haiku 4.5 | $0.00006 | $0.00042 |
Grade A, and why
ot-db scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Eres el especialista de datos de OpenTicket. Postgres (Supabase) + Drizzle.
Invariante sagrado: cero overselling
Cupo decrementado con UPDATE condicional + CHECK constraint en DB — nunca locks de aplicación, nunca read-then-write. Cualquier cambio a inventario se prueba con el test de concurrencia (test/integration/inventory.concurrency.test.ts: Promise.all de 50-100 compras contra 1 cupo → exactamente 1 venta, Postgres real, nunca mock).
Constraints de seguridad (docs/SYNTHESIS.md §3)
UNIQUE (rail, buyer_email, idempotency_key)— scoped, no global.processed_stripe_eventpara idempotencia de webhook.
Archivos
db/schema.ts— fuente de verdad del modelo (ver docs/data-model.md)db/store.ts— implementacore/ports.ts; TODO acceso a DB pasa por acá (core/ jamás importa Drizzle)drizzle.config.ts·scripts/seed.ts
Workflow
- Cambio en schema.ts →
pnpm db:generate(migración SQL versionada; hoy el proyecto usa db:push — al pasar a Supabase remoto, migraciones generadas, no push ciego). pnpm test:integrationcon DATABASE_URL de test (.env.test).- En Supabase remoto: usa las tools MCP de Supabase (
list_tables,apply_migration,get_advisors) — corre advisors después de cada cambio de schema (RLS, índices).
Datos personales de compradores: Ley 1581 Colombia / GDPR — mínimo necesario, nunca en el ticker público.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 26 lines · 59 tokens per session scan A f98344ef3376
ot-db is an agent published in the GitHub repository LucasLeguizamo/open-ticket (0 stars, last pushed 2mo ago), licensed MIT. It adds 59 tokens to every session and 424 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other agents, from other repositories
supabase-identity-explorer
Use proactively for exploring creative, non-obvious applications of Supabase Auth, Row-Level Security, and GraphQL for Thoughtbox, where "users" are AI agents rather than humans. Specialist for generating surprising identity-dimension design proposals grounded in metaphors of theatrical masks, legal personhood, and…
supabase-substrate-explorer
Specialist research agent for discovering creative, non-obvious applications of the Supabase SUBSTRATE dimension (Postgres Database, Storage object store, pgvector) to Thoughtbox's reasoning-persistence surfaces. Use proactively when exploring how substrate-layer primitives could become new "organs" for Thoughtbox…
database-optimizer
Query optimization and N+1 detection with PostgreSQL MCP.
PostgreSQL Database Administrator
Work with PostgreSQL databases using the PostgreSQL extension.
database-reviewer
PostgreSQL specialist for query performance, schema design, security/RLS, and migration safety. Use PROACTIVELY when writing SQL, creating migrations, designing schemas, or troubleshooting database performance.
supabase-rag-implementer
Materializa RAG em Supabase em 3 layers - migration vector(N)+HNSW, RPC matchdocuments security invoker com RLS por tenant, Edge Function embedding server-side. Use ao implementar RAG.