bitbox-wallet-app AGENTS.md

bitbox-wallet-app AGENTS.md is an instructions file for Codex, OpenCode from BitBoxSwiss/bitbox-wallet-app. It costs 2,857 tokens per session, scanned A, original, Apache-2.0.

Repository guidance for BitBoxApp, a companion app for the BitBox cryptocurrency hardware wallet. It explains the code layout, architecture, and commands for building and testing the Go backend and React/TypeScript clients.

In plain words
What is it for?
Use it when modifying BitBoxApp, especially when locating modules, understanding backend and frontend responsibilities, or running development and test commands.
Why use it?
It gives coding agents the project context they need before changing code, reducing confusion across backend, web, desktop, Android, and iOS parts.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/bitboxswiss/bitbox-wallet-app/agents-md
Clone the repo
git clone --depth 1 https://github.com/BitBoxSwiss/bitbox-wallet-app

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for bitbox-wallet-app AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/bitboxswiss/bitbox-wallet-app/agents-md.svg)](https://agentmods.dev/instructions/bitboxswiss/bitbox-wallet-app/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/bitboxswiss/bitbox-wallet-app/agents-md"><img src="https://agentmods.dev/badge/instructions/bitboxswiss/bitbox-wallet-app/agents-md.svg" alt="Measured on agentmods" height="20"></a>
Per session 2,857 This file is loaded in full into every session.
When invoked 2,857 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.02857 $0.02857
Opus 5 $0.01429 $0.01429
Sonnet 5 $0.00571 $0.00571
Haiku 4.5 $0.00286 $0.00286

Measured 5d ago against content hash 4ba8548c414d, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

bitbox-wallet-app AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 215 lines

How it starts

The opening of the file, as written. The whole thing — 215 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Repository Guidelines for bitbox-wallet-app

Architecture Overview

BitBoxApp is a cryptocurrency hardware wallet companion app. A Go backend provides an HTTP API consumed by a React/TypeScript single-page app. The same frontend is embedded in desktop (Qt WebEngine), Android, and iOS shells via platform-specific bridges.

Project Structure & Module Organization

The repository powers the BitBoxApp. Core Go services live under backend/ with entrypoints in cmd/ (e.g., cmd/servewallet). Frontend clients reside in frontends/ (web for React, qt for the desktop app, android and ios for mobile artifacts). Shared assets and docs sit in docs/, while automation lives in scripts/. Use vendor/ for pinned Go modules.

Key backend packages:

  • backend/coins/btc/ — Bitcoin (also used for LTC); backend/coins/eth/ — Ethereum + ERC20 tokens
  • backend/coins/btc/handlers/handlers.go — account-level HTTP handlers shared by all account types
  • backend/devices/bitbox02/ — BitBox02 USB/Bluetooth device drivers
  • backend/handlers/handlers.go — top-level HTTP routing (gorilla/mux)

Backend and Frontend Responsibilities

The frontend should ideally concern itself only with presentation and collecting user input. Keep business logic in the backend so that it has one authoritative implementation. This includes generating UUIDs, parsing amounts, and performing arithmetic on amounts. The frontend may format backend-provided values for display, but it should not independently implement domain rules or calculations.

Build, Test, and Development Commands

Requirements

See go.mod and frontends/web/package.json for required Go and Node.js versions. Run make envinit once to install golangci-lint, gomobile, moq, mockery, goimports, and other dev tooling.

Getting Started

Run make buildweb before the first make webdev to install npm dependencies. Then run make servewallet and make webdev in separate terminals.

Key Make Targets

  • make servewallet starts the Go backend (port 8082) in testnet mode by default. Pair with make webdev (port 8080) for live UI development.
  • Backend variants: make servewallet-mainnet, make servewallet-regtest, make servewallet-simulator, make servewallet-prodservers.
  • The Go backend does not hot-reload — restart it after code changes. The Vite frontend hot-reloads automatically.
  • make buildweb performs a clean web build (npm ci --ignore-scripts && npm run build) used by desktop packages.
  • make webtest and make webtestwatch run Vitest unit tests (one-shot and watch mode).
  • make webe2etest runs Playwright E2E tests. make weblint runs ESLint + type-check. make webfix auto-fixes lint issues.
  • make ci (or ./scripts/ci.sh) mirrors CI: Go race tests (with GORACE="halt_on_error=1"), frontend build, linting, and i18n format checks. Use it before large pull requests.
  • make go-vendor re-vendors Go dependencies.
  • All Go commands require -mod=vendor (e.g., go build -mod=vendor ./...).

Read the full file on GitHub · 215 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 5d ago First seen · 215 lines · 2,857 tokens per session scan A 4ba8548c414d

Subscribe to this mod's changes

bitbox-wallet-app AGENTS.md is an instructions file published in the GitHub repository BitBoxSwiss/bitbox-wallet-app (328 stars, last pushed yesterday), licensed Apache-2.0. It adds 2,857 tokens to every session, about $0.0143 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other instructions, from other repositories