Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add commands/maxwellsdm1867/wheeler/updategit clone --depth 1 https://github.com/maxwellsdm1867/wheelerWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00011 | $0.01689 |
| Opus 5 | $0.00005 | $0.00844 |
| Sonnet 5 | $0.00002 | $0.00338 |
| Haiku 4.5 | $0.00001 | $0.00169 |
Grade B, and why
wh:update scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
Wheeler registers its MCP servers in `~/.claude/settings.json` under `mcpServers`. How it starts
The opening of the file, as written. The whole thing — 173 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Check for a new Wheeler version and offer to upgrade.
Step 0: Resolve the Wheeler venv
Wheeler registers its MCP servers in ~/.claude/settings.json under mcpServers.
A modern install uses the SPLIT servers (wheeler_core, wheeler_query,
wheeler_mutations, wheeler_ops); the legacy monolith used a single wheeler
key (now removed by the installer). Each command resolves to an absolute path in
the same venv bin, e.g. /Users/me/wheeler-user-test/.venv/bin/wheeler-core-mcp,
so derive WHEELER_BIN from whichever Wheeler key is present:
python3 -c "
import json, pathlib, os, shutil
def load(p):
try: return json.loads(pathlib.Path(os.path.expanduser(p)).read_text())
except Exception: return {}
# Search a project .mcp.json (the session override) BEFORE the global settings,
# so we resolve the install actually serving this session. Split keys first (the
# current shape), then the legacy monolith key.
KEYS = ('wheeler_core', 'wheeler_query', 'wheeler_mutations', 'wheeler_ops', 'wheeler')
bin_dir = ''
for cfg in (load('.mcp.json'), load('~/.claude/settings.json')):
servers = cfg.get('mcpServers', cfg) # .mcp.json may keep servers at top level
for key in KEYS:
cmd = (servers.get(key) or {}).get('command', '') if isinstance(servers, dict) else ''
if cmd and os.path.isabs(cmd) and pathlib.Path(cmd).exists():
bin_dir = str(pathlib.Path(cmd).parent); break
if bin_dir: break
# Last resort: a Wheeler console script on PATH.
if not bin_dir:
for name in ('wheeler-core-mcp', 'wheeler'):
found = shutil.which(name)
if found: bin_dir = str(pathlib.Path(found).parent); break
print(bin_dir or 'NOT_FOUND')
"
Save this as WHEELER_BIN. All subsequent commands MUST use $WHEELER_BIN/python and
$WHEELER_BIN/wheeler instead of bare python or wheeler. Never use source .venv/bin/activate
— that activates whatever venv is in the CWD, which may not be Wheeler's.
If NOT_FOUND, tell the user Wheeler is not registered (no Wheeler MCP server in
~/.claude/settings.json and no wheeler-core-mcp on PATH).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 173 lines · 11 tokens per session scan B c3d15b1ea33e
wh:update is a command published in the GitHub repository maxwellsdm1867/wheeler (10 stars, last pushed 5d ago), licensed MIT. It adds 11 tokens to every session and 1,689 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other commands, from other repositories
export
Export a knowledge abstract to an Obsidian vault — a folder of Markdown notes linked by [[wikilinks]].
bootstrap-memory
RUN { git ls-files; git ls-files --others --exclude-standard; } 2>/dev/null | sort -u | xargs wc -l 2>/dev/null | sort -rn | head -150 READ README.md.
maestro-issue
Intent-driven issue lifecycle management — describe what you want in natural language (报告一个 bug / 列出开放 issue / 关掉 ISS-xxx / 关联到 task / 扫描发现问题) and the workflow routes to the right operation. Operates on .workflow/issues/. 知识管理走 /maestro-knowledge;knowhow 沉淀走 /maestro-knowhow;约束规则走 /maestro-spec。Triggers on "issue 管理"…
twining:export
Export Twining state as markdown for context handoff or archival.
formula-f10
../../../core/thinkingos/agents/observer.md.
formula-f8
../../../core/thinkingos/agents/securityauditor.md.