state-in-url: Instructions file for Codex

AGENTS.md

state-in-url AGENTS.md is an instructions file for Codex, OpenCode from asmyshlyaev177/state-in-url. It costs 6,165 tokens per session, scanned B, original, MIT.

Repository instructions for coding agents working on state-in-url, a React library that stores typed application state in URL query parameters. The instructions explain the project, commands, demo URLs, and layout, including its pnpm monorepo structure—a repository containing multiple related packages or projects.

In plain words
What is it for?
Use them when changing the state-in-url repository, especially to follow its pnpm commands, understand its framework integrations, and locate the relevant project files.
Why use it?
They give an agent project-specific rules so it can work consistently instead of guessing how to run commands or understand the codebase. They also point users of the library to separate, more focused guidance.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md. Also seen: mentions AGENTS.md.

This is asmyshlyaev177/state-in-url's own configuration. It tells Codex and OpenCode how to work on state-in-url itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything state-in-url configures →

Reuse

Borrowing it

Nothing to install: this file belongs to asmyshlyaev177/state-in-url. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/asmyshlyaev177/state-in-url/master/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/asmyshlyaev177/state-in-url

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for state-in-url AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/asmyshlyaev177/state-in-url/agents-md/github.svg)](https://agentmods.dev/instructions/asmyshlyaev177/state-in-url/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/asmyshlyaev177/state-in-url/agents-md"><img src="https://agentmods.dev/badge/instructions/asmyshlyaev177/state-in-url/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for state-in-url AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/asmyshlyaev177/state-in-url/agents-md"><img src="https://agentmods.dev/badge/instructions/asmyshlyaev177/state-in-url/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 6,165 This file is loaded in full into every session.
When invoked 6,165 The same file — it is already loaded in full.
Security scan B 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.06165 $0.06165
Opus 5.5 $0.02466 $0.02466
Sonnet 5.5 $0.01233 $0.01233
Haiku 4.5 $0.00617 $0.00617

Measured 23d ago against content hash ffbf4a334ef2, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade B, and why

state-in-url AGENTS.md scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 23d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Asks for rootmediumPrivilege escalation

A mod that escalates privileges can change anything on the machine, not only the project.

and `node_modules/.vite` caches that the next non-sudo run cannot delete.
AGENTS.md · 240 lines

How it starts

The opening of the file, as written. The whole thing — 240 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS — state-in-url

Guidance for AI coding agents working on this repository. If you are here to use the library in someone else's project, read skills/ instead — those files are written for that, and are far more specific than this one. npx @tanstack/intent@latest install wires them into your agent.

What this is

state-in-url is a ~2KB, zero-runtime-dependency React library that stores typed, JSON-serializable state objects in URL query parameters while preserving types and structure (numbers stay numbers, dates stay dates, nested objects/arrays work). It ships a useUrlState hook per framework, each behind its own entry point: state-in-url/next (App Router), /react-router (v7), /react-router6, /remix, /astro (React islands), and /react for a plain React app with no router at all. useUrlStateBase builds one for a router with no entry point of its own. Plus framework-agnostic encode/decode helpers. Positioned as a NUQS alternative.

Commands

This is a pnpm monorepo. pnpm is enforced (only-allow). Most scripts run through wireit (caching/dependency graph), so always invoke them via pnpm run <script>, not the underlying tool directly.

  • pnpm run test — full suite: tsc typecheck → unit tests → build all packages → exports test → integration (e2e) tests. Everything CI checks, but not the command CI runs — .github/workflows/tests.yml splits it into three parallel jobs and calls the tools directly, so a break in this wiring shows up locally only.
  • pnpm run test:unit — Vitest unit tests (depends on tsc), single run, ~2s; coverage is on in the config. Use npx vitest directly for watch mode.
  • pnpm run test:int — Playwright e2e (--project=chromium). Kills any leftover demo servers, starts all eight, and waits for all eight before the first test. To run against a set you started yourself (pnpm run start), call pnpm exec playwright test directly — a partial leftover set is reused as-is by Playwright and never completed, which is the failure the kill avoids.
  • pnpm run tsc — tsc --noEmit typecheck only.
  • pnpm run test:consumers — packs the tarball, installs it into throwaway projects under every available package manager (pnpm, npm, yarn node-modules, yarn PnP, bun; missing ones are skipped and named), and checks every subpath resolves in ESM and in CJS against each supported framework, plus Vitest and Jest runs and a real Next App Router build. Install-bound (~1-2 min), so it is a pre-release gate rather than part of the unit loop. A tarball, not the workspace: workspace:* symlinks the package outside node_modules, which changes both pnpm's peer resolution and Vitest's externalization.
  • pnpm run build — Rollup build of the library into dist/ (ESM .mjs + .d.ts, plus a .cjs build that the exports map deliberately does not point at — see Packaging).
  • pnpm run dev — library in Rollup watch mode + all example apps, each at http://<package-name>.localhost:1355 (see Demo app URLs).
  • pnpm run kill — kill hung Next/Vite/wireit processes (use this if dev/test servers hang).
  • pnpm run cleanup / pnpm run reinstall — nuke build artifacts and node_modules.
  • pnpm run setup — playwright install --with-deps (needed before e2e on a fresh machine).
  • pnpm run test:lighthouse — Lighthouse audits of the demo site (see below). Builds and serves it itself; nothing needs to be running first.
  • pnpm i18n status / pnpm i18n:check — the eight translations: drift from the English source, and README structure/links/anchors. pnpm i18n:toc rebuilds the tables of contents; pnpm i18n:copy:check covers the demo's copy modules.

Read the full file on GitHub · 240 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 23d ago First seen · 240 lines · 6,165 tokens per session scan B ffbf4a334ef2

Subscribe to this mod's changes

state-in-url AGENTS.md is an instructions file published in the GitHub repository asmyshlyaev177/state-in-url (418 stars, last pushed 21d ago), licensed MIT. It adds 6,165 tokens to every session, about $0.0247 per session on Opus 5.5. A static security scan graded it B with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-22.

Related

Other instructions, from other repositories

vscode buildNext.instructions.md

Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).

microsoft/vscode · 9,649 tokens

next.js AGENTS.md

AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.

vercel/next.js · 7,257 tokens

vscode oss-third-party-notices.instructions.md

Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).

microsoft/vscode · 5,262 tokens

langchain AGENTS.md

AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.

langchain-ai/langchain · 4,680 tokens

deepseek-harness AGENTS.md

AGENTS.md instructions for deepseek-ai/deepseek-harness, covering agents.md, pre-stable apis and released session data, repository layout, commands and host sandbox failures.

deepseek-ai/deepseek-harness · 4,159 tokens

vscode copilot-instructions.md

Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).

microsoft/vscode · 2,731 tokens