Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/GhostlyGawd/codewebWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/ghostlygawd/codeweb/narrate)<a href="https://agentmods.dev/commands/ghostlygawd/codeweb/narrate"><img src="https://agentmods.dev/badge/commands/ghostlygawd/codeweb/narrate/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/ghostlygawd/codeweb/narrate"><img src="https://agentmods.dev/badge/commands/ghostlygawd/codeweb/narrate.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00051 | $0.00461 |
| Opus 5.5 | $0.00020 | $0.00184 |
| Sonnet 5.5 | $0.00010 | $0.00092 |
| Haiku 4.5 | $0.00005 | $0.00046 |
Grade A, and why
codeweb-narrate scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
/codeweb-narrate
The fast path's map answers "how big" but never "what for" — every node summary is empty and
every domain summary is a templated count. This command restores the English meaning as a
sidecar with provenance (AI-IDEAS.md Idea 3): graph.json stays byte-identical; delete the
sidecar and you have today.
Hard rules (the fence)
- Write ONLY
.codeweb/narration.json. Never editgraph.json, never any source file. - One sentence per entry. What the domain/symbol is FOR — not how big (the map already says).
- Stamp it against the graph you read, so staleness is visible and stale narration silently drops out of every surface (same discipline as the other sidecars).
- Rendered surfaces label every sentence agent-written — narration annotates the map; it never is the map.
Steps
- Read the map:
codeweb_brieffor the domain list;node scripts/reading-order.mjs <graph>for what to read first; read the top files per domain (bounded — this is a sentence, not a review). - Stat the graph for the stamp:
mtimeMs+sizeof.codeweb/graph.json. - Write
.codeweb/narration.json:
{
"version": 1,
"stamp": { "graphMtimeMs": <graph mtimeMs>, "graphSize": <graph bytes> },
"domains": { "<domain name>": "<one sentence — what it does>" },
"symbols": { "<node id>": "<one sentence>" }
}
Cover every product domain; cover the top ~20 load-bearing symbols (the brief's list). Re-run after a re-map to refresh the stamp.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 40 lines · 51 tokens per session scan A 1968703f2b64
codeweb-narrate is a command published in the GitHub repository GhostlyGawd/codeweb (0 stars, last pushed 4d ago), licensed MIT. It adds 51 tokens to every session and 461 once invoked, about $0.0002 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
impact
Which tests a change impacts, with a ready-to-run test command.
map
Generate MAP.md — a relational map of every file, function, signature, and call in the repo.
sanity
Cross-check a dekko callers/uses result against a targeted grep before trusting a low/zero count.
doctor
Diagnose dekko environment/install issues (PATH shadowing, map freshness, MCP registration, plugin, hooks, CLAUDE.md policy block).
feedback
A design-stage security review for product requirement documents and other planning documents; a PRD is a document describing what a product should do.
compliance
A follow-up security check that verifies whether earlier findings were fixed and, depending on the selected mode, looks for new problems.