Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/CPUtester5465/countbean-pluginWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/cputester5465/countbean-plugin/ingest)<a href="https://agentmods.dev/commands/cputester5465/countbean-plugin/ingest"><img src="https://agentmods.dev/badge/commands/cputester5465/countbean-plugin/ingest/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/cputester5465/countbean-plugin/ingest"><img src="https://agentmods.dev/badge/commands/cputester5465/countbean-plugin/ingest.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00031 | $0.01125 |
| Opus 5.5 | $0.00012 | $0.00450 |
| Sonnet 5.5 | $0.00006 | $0.00225 |
| Haiku 4.5 | $0.00003 | $0.00112 |
Grade A, and why
ingest scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 28d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 73 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Ingest the data referenced by $ARGUMENTS into the user's Countbean book.
$ARGUMENTS may be a file path (CSV, OFX/QFX, PDF, an image of a receipt), a directory of such
files, or a plain-language description ("I got paid $4000, spent $200 on software"). If it's empty,
ask the user what to import.
CSV, OFX and QFX go through the importer, not through you
propose_transactions parses statements. Do not read a CSV yourself and work out which column
is the amount: that answer changes between runs, and the tool's does not.
A RECEIPT IS NOT A STATEMENT and takes the other path. Call stage_receipt with the path first —
a receipt is the source document for the entry, and it is kept as evidence outside the book. Read
the image yourself (the tool does no OCR, deliberately), then call propose_receipt_transaction
with what you read and an honest confidence for each field. It returns a proposal with anything
uncertain flagged rather than filled in, and it will tell you BEFORE the write if the account is
pinned to another currency or was never opened. Show the proposal to the user, ask about anything
flagged, and only then pass its beancount to add_transactions unchanged.
A PDF bank STATEMENT is neither: extract the transactions from it (date, payee, amount, and whether each line is a debit or credit).
-
Hand the bytes to the tool. Base64 the file and call
propose_transactions(content=<base64>, account="Assets:Checking", filename="<name>"), naming the account the statement belongs to. If you were given astatement_id(stm_…), pass that instead ofcontent— the file is already stored on the book. It parses on the book and returns a SUMMARY with aproposal_id: counts, date range, totals, the column mapping, what it flagged, and each distinct payee once. It never returns the rows and never writes. -
Read
mappingbefore you read the numbers. It says which column was taken as the date, the description and the amount; which of the three amount shapes it found (a signed column, separate debit/credit columns, or a running balance); which date format and decimal separator; and whether a positive number was read as money in or money out, with the evidence —balance_checksays whether the running balance confirmed it and how many rows it contradicted. If any of it is wrong, call again with the override (amount_shape,columns,date_format,delimiter,decimal_separator,sign,opening_balance) — never by editing the amounts. -
Categorise by payee. This is your job and the tool deliberately does not do it. Choose an account for each entry in
payees, following the countbean-accounting skill. Payees you leave out stay onExpenses:Unclassified/Income:Unclassified. Flagged rows (!) are rows the file itself could not settle; say so rather than guessing. -
Preview, then commit. Show the user
counts, the date range and anything flagged. Once they agree, callcommit_proposal(proposal_id, overrides='{"payees": {"<payee>": "<account>"}}'). It writes the parsed rows itself — do not re-type them intoadd_transactions. The server validates with bean-check and commits to git as one commit; rows already in the book are skipped. If it names accounts that are not open, confirm them with the user and call again withopen_new_accounts=true. If it is refused, read the error, fix the overrides and retry — never leave the user thinking it saved when it didn't. -
Report back the commit id, how many landed, how many were skipped as already imported, how many are still unclassified, and anything flagged. Suggest
/countbean:reportto see the updated numbers.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 28d ago Changed · +5 lines ad528458404c
- 1mo ago First seen · 68 lines · 31 tokens per session scan A f0e7c1899961
ingest is a command published in the GitHub repository CPUtester5465/countbean-plugin (34 stars, last pushed 18d ago), licensed MIT. It adds 31 tokens to every session and 1,125 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other commands, from other repositories
audit
Scan for non-kernel money math. Rebuild critical flows as JournalEntrys. Replay and prove. Complements /ledger-verify.
reconcile
Assumptions → Money.from → cited, balanced JournalEntry → Ledger.apply. Output entries + proof.
review
Kernel first (/ledger-verify or /ledger-audit), then host TDD/review/security if present. See skills/ledger-review/SKILL.md.
sim
Seeded scenario on the kernel. Log assumptions. Prove equation. Replay with the same seed must match.
setup
An interactive setup wizard for configuring a Japanese tax accountant's office. It asks about the firm, clients, accounting software, expense rules, overseas services, invoices, payroll, and report sharing.
classify
A command that classifies one Japanese business transaction into an accounting category and tax type. It checks exclusions, past corrections, known keywords, and uses AI when needed.