sprawling AGENTS.md

Repository instructions for contributors working on sprawling, a locally deployed agent-city system written mainly in Rust with a WebAssembly client. They describe the required work loop and checks before and after code changes.

In plain words
What is it for?
Use them when modifying the codebase to know what to read, which commands to run, and what evidence is required for a finished change.
Why use it?
They give people and coding agents the repository's rules so changes can be made consistently and verified before being considered complete.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/2youg1/sprawling/agents-md
Clone the repo
git clone --depth 1 https://github.com/2youg1/sprawling

Made for: Codex, OpenCode.

Per session 2,019 This file is loaded in full into every session.
When invoked 2,019 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.02019 $0.02019
Opus 5 $0.01009 $0.01009
Sonnet 5 $0.00404 $0.00404
Haiku 4.5 $0.00202 $0.00202

Measured 3d ago against content hash 3e0886237ae6, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

sprawling AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 100 lines

How it starts

The opening of the file, as written. The whole thing — 100 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md — how work is done in this repository

For any agent or person about to change this code. Read this file to the end before the first edit; it is short on purpose, and everything it does not cover is one link away.

sprawling is a locally deployed agent-city harness: one Rust binary, a WebAssembly client embedded inside it, and a city that keeps its whole history in one append-only Ledger. Most of it was written by models, and every rule below exists for one reason that applies to a person just as much: a contributor who does not remember yesterday still has to produce work that holds.

The loop

cargo install just cargo-nextest --locked   # once; the toolchain installs itself from rust-toolchain.toml
just check                                  # fmt + clippy (-D warnings, --all-features) + nextest + every machine gate

A change is finished when just check is green. "I finished it" is a claim; a green run is the evidence.

Command What it does
just check the closing condition for every change
just gates the machine gates alone
just check-web clippy on the wasm target — the two places just check cannot reach
just build-web build the client bundle, without dx
just dist the whole deliverable: client, binary, bill of materials, size badges
just sim [seed] citysim scenarios; a failure reproduces from its seed
just spec <crate> generate a SPEC skeleton
just api-baseline recompute the public-surface baselines
just replay <log> verify a ledger chain offline, read-only
just mem [pid] / just bench / just budget the measurements, in this platform's own vocabulary
just fuzz <target> / just mutants fuzz targets / mutation testing

Read before you write

  1. ARCHITECTURE.md — what the code is made of, how the twelve crates are wired, what one dispatch does end to end. Its depmap block and module map are machine authorities.
  2. The SPEC of the crate you are touching, crates/<crate>/<crate>-SPEC.md — the interfaces and decisions, written before the code.
  3. docs/glossary.md — one name per concept, enforced by a gate.
  4. The tests next to the code you are about to change.

Read the full file on GitHub · 100 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago First seen · 100 lines · 2,019 tokens per session scan A 3e0886237ae6

Subscribe to this mod's changes

sprawling AGENTS.md is an instructions file published in the GitHub repository 2youg1/sprawling (91 stars, last pushed 4d ago), licensed MPL-2.0. It adds 2,019 tokens to every session, about $0.0101 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.