Borrowing it
Nothing to install: this file belongs to aliramw/lalaclaw. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/aliramw/lalaclaw/main/AGENTS.mdgit clone --depth 1 https://github.com/aliramw/lalaclawWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/aliramw/lalaclaw/agents-md)<a href="https://agentmods.dev/instructions/aliramw/lalaclaw/agents-md"><img src="https://agentmods.dev/badge/instructions/aliramw/lalaclaw/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/aliramw/lalaclaw/agents-md"><img src="https://agentmods.dev/badge/instructions/aliramw/lalaclaw/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.07505 | $0.07505 |
| Opus 5 | $0.03753 | $0.03753 |
| Sonnet 5 | $0.01501 | $0.01501 |
| Haiku 4.5 | $0.00751 | $0.00751 |
Grade A, and why
lalaclaw AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 304 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md
开发服务启动 / Dev Servers
开发态需要同时启动前端和后端,不使用 dist/。
Run both frontend and backend in development. Do not use dist/.
前端开发服务 / Frontend
在项目根目录运行:
npm run dev -- --host 127.0.0.1 --port 5173 --strictPort
前端访问地址 / Frontend URL:
http://127.0.0.1:5173
后端开发服务 / Backend
在项目根目录运行:
PORT=3000 HOST=127.0.0.1 node server.js
后端接口地址 / Backend URL:
http://127.0.0.1:3000
联调说明 / Notes
- 页面入口使用
http://127.0.0.1:5173。Usehttp://127.0.0.1:5173as the main dev entry. vite.config.mjs已将/api/*代理到http://127.0.0.1:3000。vite.config.mjsalready proxies/api/*tohttp://127.0.0.1:3000.- 不要用
npm start做前端联调,它依赖已有dist/。Do not usenpm startfor frontend dev verification. - 默认自动连接本地 OpenClaw。The app auto-detects local OpenClaw by default.
- 强制
mock模式:COMMANDCENTER_FORCE_MOCK=1 PORT=3000 HOST=127.0.0.1 node server.js。
版本维护 / Versioning
- 版本号变更时必须同步更新
CHANGELOG.md。UpdateCHANGELOG.mdwhenever the project version changes. - 发布版本必须保持 npm 兼容。同一天的第 N 个版本使用
YYYY.M.D-N,例如2026.3.17-2,不要使用YYYY.M.D.N。Release versions must stay npm-compatible. For the Nth release on the same day, useYYYY.M.D-N, for example2026.3.17-2, notYYYY.M.D.N. CHANGELOG.md需明确记录新增、修改、修复和重要行为变化。Record additions, changes, fixes, and important behavior changes clearly.
发布顺序 / Release Order
- 发布时按固定顺序执行,避免版本号、tag、npm 包和 GitHub release 中间状态不一致。Follow a fixed release order to avoid mismatches between the version, tag, npm package, and GitHub release.
- 先把版本号从当前版本 bump 到目标版本,例如
2026.3.17-5->2026.3.17-6。First bump the version from the current release to the target release, for example2026.3.17-5->2026.3.17-6. - 写
CHANGELOG.md,并同步更新README、documentation-quick-start等文档里的示例版本号。UpdateCHANGELOG.md, then sync example version numbers inREADME,documentation-quick-start, and related docs. - 跑一轮关键测试和构建,至少覆盖 release 前最关键的 lint、test、build。Run the key validation steps before release, at minimum the critical lint, test, and build commands.
- 在
npm publish之前,必须验证“将要发布的 npm 产物”,不能只验证源码工作区。Beforenpm publish, validate the actual npm artifact that will be released instead of only validating the source checkout. - 发布前必须执行
npm run pack:release,让 tarball 输出到artifacts/,并在干净临时目录里安装该 tarball 做一次安装态验证。Runnpm run pack:releasebefore release so the tarball lands inartifacts/, then install that tarball in a clean temporary directory for installed-package validation. - 安装态验证至少要覆盖一次真实启动路径:能启动服务、首页不白屏、浏览器 console 无新的 runtime error。The installed-package validation must cover one real startup path: the app starts, the first screen is not blank, and the browser console shows no new runtime errors.
vite build、打包日志或安装态 smoke test 中出现Circular chunk、chunk 初始化错误、首屏空白等信号时,视为 release blocker,不得继续发布。TreatCircular chunk, chunk-init failures, blank-first-screen symptoms, or similar build/install smoke signals as release blockers.- 任何修改
vite.config.*、manualChunks、构建产物入口、Mermaid/Monaco/预览器等打包敏感区域的改动,发布前都必须补跑一次安装态 smoke test。Any change touchingvite.config.*,manualChunks, bundle entry behavior, or packaging-sensitive areas such as Mermaid, Monaco, or preview pipelines must rerun the installed-package smoke test before release. - 验证通过后再提交并推送到
origin/main。Only commit and push toorigin/mainafter those checks pass. - 推送完成后再创建 Git tag 和 GitHub release。Create the Git tag and GitHub release only after the main branch has been pushed.
- 最后发布 npm 包。Publish the npm package last.
- 每次发布新版本时,必须单独询问维护者这次是否要给该版本打
stabledist-tag,不能默认自动打。For every new release, explicitly ask the maintainer whether this version should receive thestabledist-tag; never assumestablepromotion automatically. - 如果维护者还没有明确确认,默认只发布版本本身,或先发布到非
latest/ 非stable的 dist-tag(例如next),不要擅自改动stable。If the maintainer has not explicitly confirmed, publish the version itself only, or use a non-latest/ non-stabledist-tag such asnext; do not changestableon your own. - 如果维护者确认要打
stable,优先用npm dist-tag add lalaclaw@<version> stable提升一个“已经发布过”的版本,而不是为了改 tag 重发同版本。If the maintainer confirmsstable, prefer promoting an already-published version withnpm dist-tag add lalaclaw@<version> stableinstead of republishing the same version only to change tags. - 如果维护者确认本次不应再保留某个版本的
stable标记,可以用npm dist-tag add lalaclaw@<older-version> stable把stable挪回旧版本,或在确有需要时用npm dist-tag rm lalaclaw stable移除stable。If the maintainer decides a version should no longer bestable, movestableback to an older version withnpm dist-tag add lalaclaw@<older-version> stable, or remove the tag withnpm dist-tag rm lalaclaw stablewhen that behavior is explicitly desired.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 304 lines · 7,505 tokens per session scan A 4e77442089ba
lalaclaw AGENTS.md is an instructions file published in the GitHub repository aliramw/lalaclaw (21 stars, last pushed 2mo ago), licensed MIT. It adds 7,505 tokens to every session, about $0.0375 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
next.js AGENTS.md
AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.
codex AGENTS.md
AGENTS.md instructions for openai/codex, covering rust/codex-rs, the codex-core crate, code review rules, crate api surface and model visible context.
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, applying the notice (cutover) and fallback chain (never fail the build).
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.
spec-kit AGENTS.md
AGENTS.md instructions for github/spec-kit, covering agents.md, about spec kit and specify, quickstart — add a new integration in 5 steps, integration architecture and integrationmanifest — file tracking.