hex: Instructions file for Codex

AGENTS.md

hex AGENTS.md is an instructions file for Codex, OpenCode from anomalyco/hex. It costs 28,519 tokens per session, scanned B, original, MIT.

Project instructions for HEX, a local macOS voice tool with experimental Linux display support. They describe its audio, speech-recognition, keyboard, settings, and feature boundaries.

In plain words
What is it for?
Developing or reviewing HEX’s voice input, hotkeys, audio handling, settings, and supported desktop environments.
Why use it?
They give an AI the project’s safety and architecture rules, including which features are enabled by default and where important behavior must remain explicit.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md. Also seen: mentions AGENTS.md; mentions OpenCode.

This is anomalyco/hex's own configuration. It tells Codex and OpenCode how to work on hex itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything hex configures →

About the project

Hex is a local-first voice dictation app that turns spoken words into text on the device and pastes them into the application currently in use. It is for people who want keyboard-independent dictation on macOS, with beta support for Windows and Linux. The catalogue entries provide an instruction and a skill for working with Hex.

anomalyco/hex · 5,331 stars · on GitHub · anoma.ly

Reuse

Borrowing it

Nothing to install: this file belongs to anomalyco/hex. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/anomalyco/hex/dev/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/anomalyco/hex

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for hex AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/anomalyco/hex/agents-md/github.svg)](https://agentmods.dev/instructions/anomalyco/hex/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/anomalyco/hex/agents-md"><img src="https://agentmods.dev/badge/instructions/anomalyco/hex/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for hex AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/anomalyco/hex/agents-md"><img src="https://agentmods.dev/badge/instructions/anomalyco/hex/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 28,519 This file is loaded in full into every session.
When invoked 28,519 The same file — it is already loaded in full.
Security scan B 3 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.28519 $0.28519
Opus 5.5 $0.11408 $0.11408
Sonnet 5.5 $0.05704 $0.05704
Haiku 4.5 $0.02852 $0.02852

Measured today against content hash 17497e57d8b8, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade B, and why

hex AGENTS.md scanned grade B with 3 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Asks for rootmediumPrivilege escalation

A mod that escalates privileges can change anything on the machine, not only the project.

sudo pacman -S --needed base-devel git rustup python alsa-lib curl jq openssl xxd \

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

cancellation and deadlines. It never runs an OpenCode executable or curl;

Runs shell commandslowCapability

Expected in a hook, worth knowing in a rule or an instructions file.

`node:child_process` `exec`/`execFile` over `std::process` with a process
AGENTS.md · 1,760 lines

How it starts

The opening of the file, as written. The whole thing — 1,760 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Hex Agent Guide

Private Kit Tool

dev and production take changes only through pull requests (Dax's ruleset; .github/ changes also need Dax). Branch from dev, open a PR to dev, and merge it yourself once it compiles (don't wait on CI); merge any open PR without asking. After merging, update the installed copy. See ~/code/control/AGENTS.md. production holds what was released and moves only by a fast-forward from dev when Kit releases; never commit to it. There is no main.

Any change to what the window draws regenerates the goldens in the same PR: run HEX_UPDATE_GOLDENS=1 cargo test --locked --bin hex rune_ui on Linux (the golden tests only run there; from a Mac, dispatch check-linux.yml on the branch and take its golden-actual artifact), look at every changed image, and commit them with the change.

dev is canonical and contains the Rune front end on every OS; GPUI is removed. The rune-ui integration branch is merged and kept only for history: branch from and push to dev.

Purpose

Build Hex as a local, observable macOS voice appliance with explicit Linux X11, wlroots-compatible Wayland, and Windows (x64 and ARM64) beta contracts. Keep the engine native Rust and keep consequential behavior explicit. Deterministic personal transcript transformations live in the explicit TypeScript user config (~/.config/hex/hex.config.ts). User-facing runtime settings persist in Application Support.

Every build shows General, Output, History, and Labs. Labs holds features we're unsure about, especially ones people asked for that we built: new or user-requested features land in Labs, off by default, not on by default. Labs has no master switch; Settings › Labs lists every lab this OS has as a card (name, description, toggle), each off by default, under one collapsible header per group (Dictation, Output, History, Meetings, Annotate, Shortcuts, Models; labs::Feature::group), plus Send feedback and Run setup again. Each feature has an audience: Everyone or Dev (dev, local, test, and dev-channel builds only; a stable build never lists, accepts, or runs it). A feature with its own pane joins the sidebar as a normal item while on and is hidden while off; a behaviour-only feature is just its toggle. Today: Meetings (beta), Voice Filter (Dev; locked on while its macOS driver is installed, and a stable build with the driver keeps its pane for Uninstall alone), Playground (Dev), Live text, Live chapters, Vocabulary biasing, Switch model with keyboard language (#216), Mouse shortcuts (#209, macOS), Also pause the browser (#301, macOS), Share dictation shortcut (#176, Windows), Unload model when idle (#442), and Terminal paste (Windows). Externally contributed features land there too. Annotate is a normal feature in every build, stable included, on macOS, Linux, and Windows; only developer tools (dev_build::is_dev_build() with DEVELOPER_FEATURES_ENABLED) stay gated to dev builds.

Read the full file on GitHub · 1,760 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today Changed · +8 lines · +177 tokens per session 17497e57d8b8
  2. yesterday Changed · +35 lines · +586 tokens per session 44861b1de656
  3. 2d ago Changed · +37 lines · +657 tokens per session 0bc0bc15831d
  4. 3d ago Changed · +34 lines · +613 tokens per session 41860fbe71bc
  5. 4d ago Changed · +138 lines · +2,338 tokens per session c5b02b67b188
  6. 6d ago Changed · +77 lines · +1,532 tokens per session e5523247c923
  7. 6d ago Changed · +124 lines · +2,214 tokens per session f01285570517
  8. 7d ago Changed · +33 lines · +649 tokens per session cef6cf4175c1
  9. 8d ago Changed · +71 lines · +1,304 tokens per session 91485556f014
  10. 9d ago First seen · 1,203 lines · 18,449 tokens per session scan B d48b814ea6ed

Subscribe to this mod's changes

hex AGENTS.md is an instructions file published in the GitHub repository anomalyco/hex (5,331 stars, last pushed yesterday), licensed MIT. It adds 28,519 tokens to every session, about $0.1141 per session on Opus 5.5. A static security scan graded it B with 3 findings (asks for root, makes network calls, runs shell commands). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

hex AGENTS.md compared with instructions from other repositories

hex AGENTS.md next to 6 instructions from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
hex AGENTS.mdanomalyco/hexInstructions file5.3kyesterdayMITB28,519Codex, OpenCode
vscode buildNext.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA9,719GitHub Copilot
next.js AGENTS.mdvercel/next.jsInstructions file143kyesterdayMITA7,461Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchainInstructions file149kyesterdayMITA4,680Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA5,516GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA3,093GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harnessInstructions file274k2d agoMITA4,313Codex, OpenCode