Borrowing it
Nothing to install: this file belongs to aryanduntley/pwa-debug-layer. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/aryanduntley/pwa-debug-layer/main/CLAUDE.mdgit clone --depth 1 https://github.com/aryanduntley/pwa-debug-layerWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/aryanduntley/pwa-debug-layer/claude-md)<a href="https://agentmods.dev/instructions/aryanduntley/pwa-debug-layer/claude-md"><img src="https://agentmods.dev/badge/instructions/aryanduntley/pwa-debug-layer/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/aryanduntley/pwa-debug-layer/claude-md"><img src="https://agentmods.dev/badge/instructions/aryanduntley/pwa-debug-layer/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.01082 | $0.01082 |
| Opus 5.5 | $0.00433 | $0.00433 |
| Sonnet 5.5 | $0.00216 | $0.00216 |
| Haiku 4.5 | $0.00108 | $0.00108 |
Grade A, and why
pwa-debug-layer CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 68 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AIMFP MODE ACTIVE — MANDATORY BEHAVIORAL RULES
These rules are NON-NEGOTIABLE. Violating any creates tracking gaps and invisible project damage. Use AIMFP tracking over memory
FIRST — BEFORE ANYTHING ELSE
CALL aimfp_run(is_new_session=true)
- Your FIRST ACTION every session no matter how user begins their initial request; do this first
- is_new_session=false is for checkpoint calls during work — returns watchdog alerts only
- Do NOT explore files, read code, or respond to the user before calling
- Returns everything: project status, settings, supportive context, guidance — this single call replaces multi-round file exploration
- .aimfp-project/ missing → offer aimfp_init or restore from backup
!IMPORTANT!
AIMFP TRACKING IS ALWAYS MANDATORY! Done coding? AIMFP TRACK EVERYTHING. Do not wait for or expect user to tell you to do this. After planning, DO NOT rely only on internal task creation, USE AIMFP PATHS/MILESTONES/TASKS/ITEMS. Never begin coding without AIMFP tasks. Never stop coding without AIMFP tracking.
ALWAYS
DB Tools: get_file_by_name, get_function_by_name, get_type_by_name, get_interactions_by_function, search_modules
- Write FP-compliant code: pure functions, immutability, no OOP, no classes with methods, modular reuse (domain logic in domain modules — feature files are thin orchestrators that compose domain functions, never contain business logic)
- BEFORE writing any function: search with DB Tools for overlapping logic. Reuse > rewrite. New shared logic goes in domain modules, not feature files. See get_supportive_context(variant='coding') for full DRY rules.
- Call get_directive_by_name(name) BEFORE executing any directive not in memory
- Follow return_statements from tools — they are mandatory next-step guidance, not suggestions
- Use DB Tools before reading source files — DB is the index, source files are last resort
- Check flows, themes, and modules before starting any task: get_all_flows() or get_task_flows(task_id), get_all_themes(), and get_all_modules()
- ALWAYS route ad-hoc work through get_directive_by_name('project_task_decomposition') BEFORE coding
- Add_note(note_type='evolution') for architecture decisions, scope changes, blueprint edits
- Update DB from discussions: architecture/infrastructure/task decisions → update_project, update_task, update_milestone, or add_note
- Call aimfp_end when user says "done" / "wrap up" / "end session"
- Deferred work (TODOs, stubs, placeholders): immediately add_note(note_type='deferred', reference_table='files', reference_id=<file_id>). Resolved → update_note(note_type='completed'). Obsolete → update_note(note_type='obsolete'). DO NOT mark tasks/milestones complete with stubs/placeholders/TODOs — "complete" means functional and tested. Deferred → follow-up task + add_note(note_type='deferred').
LIFECYCLE & TRACKING GATE
init → discovery → [progression: one task at a time] → completion → end Tasks created incrementally as work progresses, NOT all at once.
After EVERY Edit or Write to a source file round, immediately run the full file coding loop: reserve file (if new) → search_modules for overlap → reserve functions+types (public) → write FP code → finalize file → assign to flow(s) → assign to module (if domain logic) → finalize functions+types (purpose, parameters, returns populated) → add interactions → add types_functions Applies to ALL work: features, bug fixes, refactors. Any function added, params changed, types modified — track it. Before reporting to user: get_task_context(task_id) — unfinalized files must be finalized FIRST.
Gate enforcement:
- Finalize files with public functions reserved+finalized — DO NOT finalize without them
- Finalize functions with interactions added — DO NOT skip cross-function dependencies
- Finalize functions with types_functions linked — DO NOT skip tracked type usage
- Assign every finalized file to flow(s) — DO NOT skip flow assignment
- Assign domain logic files to modules via add_file_to_module — DO NOT skip. Orchestrators (pages, handlers, commands) do not need module assignment.
- Every finalized code file must have tracked functions — DO NOT leave 0 (unless data-only/config-only)
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 68 lines · 1,082 tokens per session scan A 95c0e696d3f9
pwa-debug-layer CLAUDE.md is an instructions file published in the GitHub repository aryanduntley/pwa-debug-layer (0 stars, last pushed 4mo ago), licensed MIT. It adds 1,082 tokens to every session, about $0.0043 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
next.js AGENTS.md
AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.
vscode copilot-instructions.md
Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).
deno copilot-instructions.md
Copilot instructions for denoland/deno, covering deno development guide for github copilot, network access, high level overview, key directories and key files to understand first.