Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/ccivlcid/vibeharness/deploygit clone --depth 1 https://github.com/ccivlcid/VibeHarnessWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00000 | $0.00510 |
| Opus 5 | $0.00000 | $0.00255 |
| Sonnet 5 | $0.00000 | $0.00102 |
| Haiku 4.5 | $0.00000 | $0.00051 |
Grade A, and why
deploy scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 73 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Deploy — Free Vercel Deployment
This command is part of the VibeHarness framework. Use this command only after development is complete. Never mention deployment during development. Update
PROJECT_RULES.mddeployment field after deploying. UpdateProgress.mdstatus. When all P0 features are done and tested, guide the user: "Everything is ready! Want to put it on the internet so others can see it?"
Deploy non-developer MVPs to the internet for free.
Why Vercel
- Made by the creators of Next.js — easiest Next.js deployment
- Connect GitHub for automatic deploys on every push
- Free tier: custom domain, HTTPS, global CDN included
- Almost zero configuration — non-developers can handle it
Pre-Deploy Checklist
- Environment variables: Values in
.env.localneed to be added to Vercel dashboard - Build test:
npm run buildmust pass without errors - Remove hardcoded URLs: No
localhost:3000left in code
Deployment Methods
Method 1: Vercel CLI (recommended)
npm i -g vercel
vercel login
vercel
Answer the prompts on first deploy — auto-configured.
Method 2: GitHub Integration
- Push code to GitHub
- Connect GitHub on vercel.com
- Select repository — auto-deploy
Environment Variables
Vercel Dashboard → Settings → Environment Variables:
DATABASE_URL=file:./dev.db
NEXTAUTH_SECRET=your-secret-key
Note: Variables with NEXT_PUBLIC_ prefix are exposed to the browser. Keep secret keys without the prefix.
Post-Deploy Verification
- Visit the deploy URL (xxx.vercel.app) and verify it works
- Test on mobile too (responsive check)
- Test key features (login, signup, etc.)
Guiding Non-Developers
After deployment is complete:
- "You can see your app here: https://xxx.vercel.app"
- "It works on your phone too — same address"
- "When I update the code, it automatically updates"
Custom Domain
If the non-developer wants to connect their own domain:
- Vercel Dashboard → Settings → Domains
- Add domain
- Guide DNS setup step by step
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 73 lines · 0 tokens per session scan A 71003c381c3c
deploy is a command published in the GitHub repository ccivlcid/VibeHarness (5 stars, last pushed 4mo ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 510 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
account
This API allows you to manage your Scaleway Projects.
domains
Apply the CLI runtime and safety contract before executing a command. Runtime --help is authoritative.
deploy
Build, test, deploy with staged rollout.
d1-migration
Run D1 migration workflow — generate, inspect, apply.
deploy
Deploy a frontend (React, Next.js, or static HTML) to a live URL on Butterbase.
deploy
Build a container image, push it, and deploy the service to the Akka platform. This is the transition from local development to development on the AAO platform.