Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/Mozurok/fhorja.devWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/commands/mozurok/fhorja.dev/code-locate)<a href="https://agentmods.dev/commands/mozurok/fhorja.dev/code-locate"><img src="https://agentmods.dev/badge/commands/mozurok/fhorja.dev/code-locate/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/commands/mozurok/fhorja.dev/code-locate"><img src="https://agentmods.dev/badge/commands/mozurok/fhorja.dev/code-locate.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00000 | $0.04255 |
| Opus 5.5 | $0.00000 | $0.01702 |
| Sonnet 5.5 | $0.00000 | $0.00851 |
| Haiku 4.5 | $0.00000 | $0.00426 |
Grade A, and why
code-locate scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 132 lines — stays where its author put it; the contents beside it link to each section on GitHub.
code-locate
Act as a senior engineer locating code in the active codebase for the engineering task.
Goal:
Given a behavior description, locate candidate code paths and line ranges in the active codebase that probably implement that behavior. Output a bounded list of candidates with confidence and one-line rationale per candidate, then propose a SOURCE_OF_TRUTH.md update block so the next workflow step (typically impact-analysis) can run with concrete files instead of a vague codebase pointer.
Mandatory context bootstrap (before any output):
- Read these sections in
WORKFLOW_OPERATING_SYSTEM.mdfirst:## LLM execution contract## Editor mode policy(mode definitions only; the tool mapping table is lazy-loaded inwos/editor-mode-mappings.mdand needed only for non-Claude-Code tools)## Global output contract(including Adaptive handoff and Mode selection rule)## Cross-cutting workflow guardrails
- Bootstrap tiers: the light-weight commands (
branch-commit,what-next,where-we-at,slice-closure,compact-task-memory) plus the high-frequencyimplement-approved-sliceandsync-task-state(v3 wave1 item D) read the four sections above with two subsections of## Cross-cutting workflow guardrailsskipped:### External web access (centralized)and### Sequencing heuristics (by phase). Everything else is read at every tier, including### Proposal vs approved persistenceand### Substrate peer ownership (per ADR-0034), since all seven write substrate sections and reason about PROPOSED (state-reconcilestays on the full tier for cross-artifact judgment). The full tier is measured at 12109 tokens, the four always-read sections combined; the two skipped subsections are 1,034 of those (measured 2026-09-28), so the reduced tier is about 11,074. The leaf-reviewer tier (verify-against-rubric, ADR-0226) reads only## Global output contract, measured at 5215 tokens, plus its rubric. - Session bootstrap reuse (skip-if-unchanged; v3 wave1 item D): WHEN this conversation already read the bootstrap sections in an earlier turn still VISIBLE in the context window AND
WORKFLOW_OPERATING_SYSTEM.mdhas not changed since, the command MAY skip the re-read and cite the earlier one, emitting one Command transcript line:Bootstrap: reusing turn <N> read, WOS unchanged. Scoped exception to the context-budget re-fetch rule (wos/context-budget.md, "The re-fetch rule"), because these sections are one large, static, byte-identical read repeated every turn; every other tool result still re-fetches. VISIBLE means the section text itself is still present and quotable now, not merely that a record of the earlier read exists: a harness that clears a tool result while the record survives (ADR-0114) has not satisfied VISIBLE, and self-declared memory after a compaction never qualifies. A stateless-per-turn harness is excluded. The transcript line is mandatory; a silent skip is invalid output. - Resolving the spec and
wos/<topic>.md: canonical repository FIRST. Otherwise use active-adapter docs:~/.claude/workflow-docs(CLAUDE_WORKFLOW_DOCS_DIR),~/.cursor/workflow-docs(WORKFLOW_DOCS_DIR; project.cursor/workflow-docson project installs),~/.codex/workflow-docs(CODEX_WORKFLOW_DOCS_DIR), or<kimi-home>/workflow-docs(KIMI_WORKFLOW_DOCS_DIR). Nonempty overrides win. Kimi home:KIMI_CODE_HOME, else existing~/.kimi-code, else existing~/.kimi, default~/.kimi-code. Use one root for both paths; try other adapters if absent or unknown. Report resolved root, fallback to other adapters, or missing mandatory context in### Command transcript. Installed snapshots refresh and prune retired topics only on sync. - Read additional sections only when relevant to this command's role.
- Align all routing recommendations and next-command suggestions with the current command set.
- Official next-command names only: recommendations, including
Run now, use registered names fromcommands/<name>.mdorcommands/<name>/SKILL.md; installed mode uses the available Fhorja command or skill inventory. No invented aliases.Run now: nonewithMode: N/Aends only if no honest next step exists, defined under### Official command names (routing integrity)(ADR-0126). Required inputs: - active task folder path
TASK_STATE.md(current phase)SOURCE_OF_TRUTH.md(current state, even if vague, so the patch is correctly scoped)- behavior description in 1 to 3 lines (what the code in question does or should do)
- search type, exactly one of:
implementation(production code),tests(test files),config(configuration files),any(no restriction) - product workspace path (where the actual code lives, for example
~/code/acme-platform). For single-repo tasks, this is the only repo. For multi-repo tasks, this is the workspace path matchingtarget repo(see below). - target repo (only for multi-repo tasks where
SOURCE_OF_TRUTH.mdhas a## Repositoriessection): the repo identifier to search. Must match one entry in the## Repositoriessection. See the spec## Multi-repo support (v1)for the schema. - search scope hint if known (path prefix, language, glob, etc.), to narrow the search
- failing test name and assertion message, if the locate is triggered by a failing test
- last completed step from
TASK_STATE.md(command and summary)
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago Changed · -130 tokens per session 2e34eb7713e7
- 12d ago Changed · -1 lines 01f963e4d3d9
- 19d ago Changed · -1 lines 609da5b835ea
- 20d ago Changed · -1 lines · -79 tokens per session 92963ea8a324
- 1mo ago First seen · 135 lines · 209 tokens per session scan A 429cecd270e5
code-locate is a command published in the GitHub repository Mozurok/fhorja.dev (10 stars, last pushed 9d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 4,255 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other commands, from other repositories
validate-gap
Analyze implementation gap between requirements and existing codebase.
kiro-validate-gap
Command "kiro-validate-gap" from gotalab/cc-sdd, covering implementation gap validation, core task, execution steps, important constraints and tool guidance.
doctor
Run IJFW health check (files, MCP server, hooks, memory, caps, framing).
watchdog
Run a superskill watchdog pass. Input: $ARGUMENTS (empty = dig the latest session).
cleanup
Detect and remove orphaned code, unused components, dead routes, and stale database artifacts.
reqforge-greenkeeper
Diagnose and fix ReqForge repository release gate failures.