Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/dotoricode/tink-harness/weavegit clone --depth 1 https://github.com/dotoricode/tink-harnessWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00014 | $0.02044 |
| Opus 5 | $0.00007 | $0.01022 |
| Sonnet 5 | $0.00003 | $0.00409 |
| Haiku 4.5 | $0.00001 | $0.00204 |
Grade A, and why
weave scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 136 lines — stays where its author put it; the contents beside it link to each section on GitHub.
/tink:weave
Improve harnesses that are actually being used.
Purpose
Tink should get sharper through use, not grow randomly.
Interaction policy
Always call the AskUserQuestion tool for choice prompts. Do not render ❯ text format. Do not ask the user to type a number inline.
Map prompt content to AskUserQuestion fields:
question: the full question textheader: max 12-character tag (e.g. "진행 방식", "저장 여부")label: 1–5 word option name. Add "(권장)" if recommended.description: explanatory text for the option
Use Korean field values when .tink/config.json language is ko or auto with Korean input; use English otherwise.
Procedure
- Read
.tink/harnesses/index.json. If.tink/maintenance/weave-queue.jsonexists, read it to find:- Handoff packets from
/tink:frog(entries whereautois absent or false) - Auto signals from completed runs (entries where
auto: true) Count auto signals per harness:check_failedsignals count as 2, all other outcomes count as 1. Use this frequency to rank improvement candidates — harnesses with the highest signal count should be improved first. If invoked from/tink:frog, also read the purge output and.tink/current/notes.mdfor the weave handoff packet. If.tink/maintenance/friction.jsonlexists, read only compact recent entries and count repeatedcheck_failed,check_skipped,blocked, gate denial, or rollback events. Repeated friction can justify a harness edit, rule graph update, or opt-in guard candidate. If.tink/tools/generate-harness-lifecycle-summary.mjsexists, runnode .tink/tools/generate-harness-lifecycle-summary.mjsfrom the repo root before ranking candidates. The generated.tink/maintenance/harness-lifecycle.jsonis a report, not approval or reusable memory. If.tink/maintenance/harness-lifecycle.jsonor another summary following.tink/schemas/harness-lifecycle.schema.jsonexists, read it as a harness health summary. Prefer entries with recommendationweave, high or medium confidence, and concreteevidence_handles. Low-confidence entries should stay as observation unless the user explicitly asks to act on them. 1b. Scan promotion candidates (임시초안 승격) - weave promotes as well as improves: - Run-only draft harnesses: read recent
.tink/runs/*.mdfor recorded draft names and domain rules. If the same draft (same name, or clearly the same domain rules) appears in 2+ run records, propose promoting it into.tink/harnesses/<name>.mdplus anindex.jsonentry withkind: "synthesized". Score it with the harness synthesis contract (specificity, actionability, verifiability, reuse likelihood, context cost) before proposing. - Candidate memory: read
.tink/memory/candidate/when it exists. If 2+ runs, ledger, or friction entries support one candidate, propose moving it to.tink/memory/approved/as one compact file, with evidence handles recorded under.tink/memory/evidence/. If the user declines, move it to.tink/memory/rejected/with a one-line reason so it is not proposed again. - Every promotion is a reusable-state write: it always goes through the Save Gate approval payload and is appended to
.tink/maintenance/ledger.jsonl. Without 2+ independent evidence handles, present the candidate as an observation, not a proposal.
- Handoff packets from
- Identify one or a few active harnesses to improve using real failures and evidence. When invoked without a specific target, the health summary's
weaverecommendations plus the promotion scan above form the default agenda:- repeated mistakes
- user corrections
- failed checks
- repeated friction entries
- confusing approval prompts
- too much context footprint
- missing done criteria
Rank lifecycle-backed
weavecandidates ahead of raw queue counts when they cite concrete evidence handles and medium or high confidence. Use raw queue and friction counts to break ties.
- Require concrete evidence handles before proposing a save:
- run record path or run ID
- current notes path when same-conversation certainty exists
- failed check name
- friction entry timestamp/type
- compact user correction snippet
- purge handoff ID from
.tink/maintenance/weave-queue.json - lifecycle summary evidence handle plus the source run, ledger, queue, or friction entry it points to
- Classify the evidence as repeated or single-run. Single-run evidence may suggest a trial edit, but should not become broad policy unless the user explicitly approves.
- Explain why the change belongs in the harness rather than
.tink/memory/or.tink/current/notes.md. - Decide the right destination:
- harness edit: a procedure, ask-first question, check, or recovery step should change;
- rule graph update: a contract fact should select a harness, check, or guard candidate earlier;
- opt-in hook guard candidate: the same failure should be blocked by
PreToolUse,PostToolUse, orStopafter user approval; - friction logging update: the run should record a missing evidence pattern more clearly.
- Read only the target harness files and
.tink/rules/index.jsonwhen the evidence points to rule selection. For rule graph updates, run a structural gate before proposing a save:- duplicate: does an existing rule already cover the same
when,include_paths, orchecks? - breadth: is the rule too broad, such as "always check docs", instead of tied to concrete paths, task facts, or risks?
- evidence: does the proposal cite a run, failed check, user correction, or friction entry?
- verification: does the rule add a check or explain why no check is needed?
- compatibility: does the rule make sense for both Claude Code and Codex, and for macOS and Windows?
- portability: does it avoid OS-specific shell syntax unless alternatives are listed?
- duplicate: does an existing rule already cover the same
- Propose small edits:
- clearer when-to-use trigger
- better ask-first question
- tighter checks
- smaller context footprint
- explicit failure recovery
- rule graph node or edge
- opt-in guard template
- Show an approval payload: destination files, exact patch summary, evidence handles, repeated vs single-run classification, why reusable, context-cost delta, sensitive content excluded, rollback path. For rule graph updates, also show structural gate results: duplicate, breadth, evidence, verification, compatibility, and portability.
- Ask for approval before saving.
- Apply surgical changes, update index metadata or
.tink/rules/index.jsonif needed, mark the weave queue item status, and append the approval/result to.tink/maintenance/ledger.jsonl.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 136 lines · 14 tokens per session scan A 68caf6977246
weave is a command published in the GitHub repository dotoricode/tink-harness (1 stars, last pushed 1mo ago), licensed MIT. It adds 14 tokens to every session and 2,044 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
park
Park current session for later resume (append to Markdown file).
daily
Daily update check — official Anthropic docs diff + guide/CC releases digest.
task
Command "task" from d4rkNinja/infynon-cli, covering task, when to use, basic usage, common commands and important options.
workspace
Use workspace to manage project locations, folder aliases, model slots, and the agent root.
fechar-sessao
Closes the current work session — updates the Estado Atual section of AGENTS.md and appends a dated entry to .oficina/memory/log.md.
audit-codebase
RTK Codebase Health Audit — 7 catégories scorées 0-10.