bitbox-wallet-app: Instructions file for Codex

AGENTS.md

bitbox-wallet-app AGENTS.md is an instructions file for Codex, OpenCode from BitBoxSwiss/bitbox-wallet-app. It costs 2,963 tokens per session, scanned A, original, Apache-2.0.

Repository guidance for BitBoxApp, a companion app for the BitBox cryptocurrency hardware wallet. It explains the code layout, architecture, and commands for building and testing the Go backend and React/TypeScript clients.

In plain words
What is it for?
Use it when modifying BitBoxApp, especially when locating modules, understanding backend and frontend responsibilities, or running development and test commands.
Why use it?
It gives coding agents the project context they need before changing code, reducing confusion across backend, web, desktop, Android, and iOS parts.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md.

This is BitBoxSwiss/bitbox-wallet-app's own configuration. It tells Codex and OpenCode how to work on bitbox-wallet-app itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything bitbox-wallet-app configures →

Reuse

Borrowing it

Nothing to install: this file belongs to BitBoxSwiss/bitbox-wallet-app. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/BitBoxSwiss/bitbox-wallet-app/master/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/BitBoxSwiss/bitbox-wallet-app

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for bitbox-wallet-app AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/bitboxswiss/bitbox-wallet-app/agents-md/github.svg)](https://agentmods.dev/instructions/bitboxswiss/bitbox-wallet-app/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/bitboxswiss/bitbox-wallet-app/agents-md"><img src="https://agentmods.dev/badge/instructions/bitboxswiss/bitbox-wallet-app/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for bitbox-wallet-app AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/bitboxswiss/bitbox-wallet-app/agents-md"><img src="https://agentmods.dev/badge/instructions/bitboxswiss/bitbox-wallet-app/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 2,963 This file is loaded in full into every session.
When invoked 2,963 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.02963 $0.02963
Opus 5.5 $0.01185 $0.01185
Sonnet 5.5 $0.00593 $0.00593
Haiku 4.5 $0.00296 $0.00296

Measured 23d ago against content hash 3747b96b4158, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

bitbox-wallet-app AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 23d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 226 lines

How it starts

The opening of the file, as written. The whole thing — 226 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Repository Guidelines for bitbox-wallet-app

Architecture Overview

BitBoxApp is a cryptocurrency hardware wallet companion app. A Go backend provides an HTTP API consumed by a React/TypeScript single-page app. The same frontend is embedded in desktop (Qt WebEngine), Android, and iOS shells via platform-specific bridges.

Project Structure & Module Organization

The repository powers the BitBoxApp. Core Go services live under backend/ with entrypoints in cmd/ (e.g., cmd/servewallet). Frontend clients reside in frontends/ (web for React, qt for the desktop app, android and ios for mobile artifacts). Shared assets and docs sit in docs/, while automation lives in scripts/. Use vendor/ for pinned Go modules.

Key backend packages:

  • backend/coins/btc/ — Bitcoin (also used for LTC); backend/coins/eth/ — Ethereum + ERC20 tokens
  • backend/coins/btc/handlers/handlers.go — account-level HTTP handlers shared by all account types
  • backend/devices/bitbox02/ — BitBox02 USB/Bluetooth device drivers
  • backend/handlers/handlers.go — top-level HTTP routing (gorilla/mux)

Backend and Frontend Responsibilities

The frontend should ideally concern itself only with presentation and collecting user input. Keep business logic in the backend so that it has one authoritative implementation. This includes generating UUIDs, parsing amounts, and performing arithmetic on amounts. The frontend may format backend-provided values for display, but it should not independently implement domain rules or calculations.

Build, Test, and Development Commands

Requirements

See go.mod and frontends/web/package.json for required Go and Node.js versions. Run make envinit once to install golangci-lint, gomobile, moq, mockery, goimports, and other dev tooling.

Getting Started

Run make buildweb before the first make webdev to install npm dependencies. Then run make servewallet and make webdev in separate terminals.

Key Make Targets

  • make servewallet starts the Go backend (port 8082) in testnet mode by default. Pair with make webdev (port 8080) for live UI development.
  • Backend variants: make servewallet-mainnet, make servewallet-regtest, make servewallet-simulator, make servewallet-prodservers.
  • The Go backend does not hot-reload — restart it after code changes. The Vite frontend hot-reloads automatically.
  • make buildweb performs a clean web build (npm ci --ignore-scripts && npm run build) used by desktop packages.
  • make webtest and make webtestwatch run Vitest unit tests (one-shot and watch mode).
  • make webe2etest runs Playwright E2E tests. make weblint runs ESLint + type-check. make webfix auto-fixes lint issues.
  • make ci (or ./scripts/ci.sh) mirrors CI: Go race tests (with GORACE="halt_on_error=1"), frontend build, linting, and i18n format checks. Use it before large pull requests.
  • make go-vendor re-vendors Go dependencies.
  • All Go commands require -mod=vendor (e.g., go build -mod=vendor ./...).

Read the full file on GitHub · 226 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 23d ago Changed · +5 lines · +56 tokens per session 3747b96b4158
  2. 1mo ago Changed · +6 lines · +50 tokens per session 8796f8769b28
  3. 2mo ago First seen · 215 lines · 2,857 tokens per session scan A 4ba8548c414d

Subscribe to this mod's changes

bitbox-wallet-app AGENTS.md is an instructions file published in the GitHub repository BitBoxSwiss/bitbox-wallet-app (335 stars, last pushed yesterday), licensed Apache-2.0. It adds 2,963 tokens to every session, about $0.0119 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

bitbox-wallet-app AGENTS.md compared with instructions from other repositories

bitbox-wallet-app AGENTS.md next to 6 instructions from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
bitbox-wallet-app AGENTS.mdBitBoxSwiss/bitbox-wallet-appInstructions file335yesterdayApache-2.0A2,963Codex, OpenCode
vscode buildNext.instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA9,719GitHub Copilot
next.js AGENTS.mdvercel/next.jsInstructions file143kyesterdayMITA7,461Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchainInstructions file149ktodayMITA4,680Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA5,516GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA3,093GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harnessInstructions file275k2d agoMITA4,313Codex, OpenCode