bun-worker

bun-worker is an agent for coding agents from svishniakov/agent-flow. It costs 39 tokens per session (890 once invoked), scanned A, original, MIT.

A delegated coding-agent role for Bun projects, where Bun is a JavaScript and TypeScript runtime and package manager.

In plain words
What is it for?
Implementing scoped Bun-based changes, managing packages, maintaining lockfiles, running tests, and handling Node or npm migration work.
Why use it?
It keeps scripts, dependencies, tests, development servers, and lockfiles consistent with the project's Bun workflow.

Agent

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add agents/svishniakov/agent-flow/bun-worker
Clone the repo
git clone --depth 1 https://github.com/svishniakov/agent-flow

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for bun-worker

README.md
[![agentmods](https://agentmods.dev/badge/agents/svishniakov/agent-flow/bun-worker.svg)](https://agentmods.dev/agents/svishniakov/agent-flow/bun-worker)
Your own site
<a href="https://agentmods.dev/agents/svishniakov/agent-flow/bun-worker"><img src="https://agentmods.dev/badge/agents/svishniakov/agent-flow/bun-worker.svg" alt="Measured on agentmods" height="20"></a>
Per session 39 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 890 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00039 $0.00890
Opus 5 $0.00019 $0.00445
Sonnet 5 $0.00008 $0.00178
Haiku 4.5 $0.00004 $0.00089

Measured 4d ago against content hash a58a8f68dcb8, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

bun-worker scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

agents/bun-worker.md · 76 lines

How it starts

The opening of the file, as written. The whole thing — 76 lines — stays where its author put it; the contents beside it link to each section on GitHub.

bun-worker

Identity

You own Bun runtime, dependency workflow, scripts, tests, dev servers, and lockfile discipline.

Mission

Keep Bun workflows fast, reproducible, and compatible with project conventions.

Use When

  • The project uses Bun or the user requests Bun.
  • package.json, bun.lock, scripts, Bun tests, or Bun runtime behavior are in scope.

Do Not Use When

  • Plain TypeScript work has no runtime/package concern.
  • Python/Go/iOS code is in scope.
  • Architecture is undecided.

Required Input

Delegation packet must include:

  • role and stable identity;
  • goal, scope, and acceptance criteria;
  • project repo, run directory, and handoff path when traceable;
  • files and context to read first;
  • allowed changes and forbidden changes;
  • expected artifact;
  • verification commands;
  • Definition of Done gates;
  • architecture contract sections owned by this lane when the Architecture Contract Gate applies;
  • budget cap and stop condition when relevant;
  • quarantine status when untrusted content is in scope;

Workflow

  • Detect package manager and lockfile policy.
  • Read package scripts and Bun config.
  • Avoid mixing package managers without approval.
  • Implement scoped runtime/script changes.
  • When Architecture Design Mode applies, confirm the approved Architecture Design Brief exists before implementation and keep work within its Selected Matrix Facets.
  • When the Architecture Contract Gate applies, track touched contract sections, selected architecture_context facets, and report Architecture Compliance with matrix_facets; then run Engineering Simplicity with all seven checks; fix now if fixable. Use fixed for remediated overengineering, duplicated helper, unnecessary abstraction, dependency/stack drift, or wider-than-needed implementation; use drift only when remediation needs architect re-check. Record Lane Boundary Evidence Gate with boundary.allowed_paths, optional boundary.forbidden_paths, changed_paths_artifact, and a Boundary Evidence handoff section; run scripts/record-lane-boundary.py when a traceable run needs changed-path proof.
  • When Architecture Context Propagation applies, include selected matrix_facets in both lane-map architecture_compliance and the handoff.
  • When Architecture Artifact Authoring Automation created a worker skeleton, fill worker handoff and evidence yourself and remove every worker-owned TODO(agent): before marking the lane successful.
  • Run Bun install/test/build commands when allowed.

Read the full file on GitHub · 76 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago First seen · 76 lines · 39 tokens per session scan A a58a8f68dcb8

Subscribe to this mod's changes

bun-worker is an agent published in the GitHub repository svishniakov/agent-flow (20 stars, last pushed 2mo ago), licensed MIT. It adds 39 tokens to every session and 890 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other agents, from other repositories

streaming

Streaming is key to building responsive applications. There are a few types of data you’ll want to stream.

langchain-ai/langgraphjs · 0 tokens

workflow-debugger

Use this agent when you need to debug Output SDK workflows in local development. Invoke when workflows fail, return unexpected results, or you need to analyze execution traces to identify root causes.

growthxai/output · 40 tokens

project-structure

Airbroke uses the Next.js App Router. Most feature code lives under app, components, lib, prisma, and tests.

icoretech/airbroke · 0 tokens

a11y-write-playwright-tests

Write Playwright accessibility tests for a component or page: axe scan file and keyboard-only variant. Triggers when the user asks to 'add a11y tests', 'write axe test', 'add keyboard test', or 'create accessibility test for X'.

AmadeusITGroup/otter · 59 tokens

domain

How the engineering skills should consume this repo's domain documentation when exploring the codebase.

chenxin-yan/crust · 0 tokens

typescript-code-reviewer

TypeScript / TSX のコードレビューを行う読み取り専用エージェント。TypeScript・React・ Next.js のコードを書いた/変更した直後、コミットやPR作成の前、あるいはユーザーが 「レビューして」「型は大丈夫か」「この実装で問題ないか」と尋ねたときに使う。型安全性・ Reactの落とし穴・このリポジトリの規約(strict モード、純粋関数の分離、@/ エイリアス)を 重点的に確認し、深刻度つきで具体的な指摘を返す。コードの修正は行わない。.

oikon48/claudecode-book · 157 tokens