mac-shell-mcp: Instructions file for Claude Code

CLAUDE.md

mac-shell-mcp CLAUDE.md is an instructions file for Claude Code from cfdude/mac-shell-mcp. It costs 8,419 tokens per session, scanned A, original, MIT.

Repository instructions for an AI coding agent working with a project-management workflow called PM Conductor. They define how work is split into epics and how blocked tasks are handled.

In plain words
What is it for?
Managing epics and smaller stories, recording minor or substantial detours, resuming interrupted work, and checking project status.
Why use it?
They keep task progress, detours, priorities, and review decisions recorded consistently instead of relying on hand-edited project notes.

Instructions file for Claude Code

Written for Claude Code: PreToolUse hook event. Also seen: reads .claude/ paths; mentions CLAUDE.md; mentions subagents.

This is cfdude/mac-shell-mcp's own configuration. It tells Claude Code how to work on mac-shell-mcp itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything mac-shell-mcp configures →

Reuse

Borrowing it

Nothing to install: this file belongs to cfdude/mac-shell-mcp. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/cfdude/mac-shell-mcp/main/CLAUDE.md
Clone the repo
git clone --depth 1 https://github.com/cfdude/mac-shell-mcp

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for mac-shell-mcp CLAUDE.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/cfdude/mac-shell-mcp/claude-md/github.svg)](https://agentmods.dev/instructions/cfdude/mac-shell-mcp/claude-md)
Your own site
<a href="https://agentmods.dev/instructions/cfdude/mac-shell-mcp/claude-md"><img src="https://agentmods.dev/badge/instructions/cfdude/mac-shell-mcp/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for mac-shell-mcp CLAUDE.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/cfdude/mac-shell-mcp/claude-md"><img src="https://agentmods.dev/badge/instructions/cfdude/mac-shell-mcp/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 8,419 This file is loaded in full into every session.
When invoked 8,419 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.08419 $0.08419
Opus 5.5 $0.03368 $0.03368
Sonnet 5.5 $0.01684 $0.01684
Haiku 4.5 $0.00842 $0.00842

Measured 3d ago against content hash 105b25abfec6, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

mac-shell-mcp CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 463 lines

How it starts

The opening of the file, as written. The whole thing — 463 lines — stays where its author put it; the contents beside it link to each section on GitHub.

CLAUDE.md

PM Conductor — operating rules

This repo is managed by the pm plugin. The conductor sits ABOVE OpenSpec and Superpowers. Epics are lane-agnostic (openspec | superpowers | claude-code | decision | external); OpenSpec is one lane. Stories come from each epic's source (OpenSpec tasks.md, a Superpowers plan, or a manual list). Follow these rules:

  1. Detours — when something blocks the active epic, CLASSIFY before fixing:
    • Minimal (small, self-contained, no design ambiguity): fix → test → commit → push, then run /pm:detour --minimal "<what>" so it is recorded in .conductor/detours.log. Then resume.
    • Substantial (own design / changes shared behavior / multi-step): run /pm:detour. It becomes its own epic in the appropriate lane (OpenSpec proposal, Superpowers plan, etc.). Register that epic FIRST, then PUSH the current one onto the detour stack with push-detour <parent> --detour <new-id> --reason "<why>" (--reconcile | --no-reconcile). NEVER hand-edit .conductor/state.json to push or pop a frame. The verb IS the transition, and it is what supplies the validation, the write-conflict guard, the read-back verification and the Honcho line a hand-edit has none of. Exactly one of the two reconcile flags is REQUIRED and there is no default: whether the detour can invalidate the paused epic's plan is a judgment, and a default makes an absent decision look like a considered one. Say --reconcile unless you are certain the detour touches nothing the paused epic depends on.
  2. State of record is .conductor/state.json. After any change to epics, status, priority, or the detour stack, re-render with /pm:status. Never hand-edit PROJECT.md.
  3. Resuming after a detour — use /pm:resume, which pops the frame with pop-detour [<paused-id>] — again a verb, never a hand-edit. It removes the frame, resumes the epic and writes reconcileNeeded in the SAME write, which is what makes the obligation survive the frame's removal. If the popped frame had reconcileOnResume, run the reconcile gate (reconciler agent) BEFORE writing code, then write its verdict back durably with record-reconcile <id> --detour <detourId> --verdict valid|invalidated --amendments none (the reconciler's AMENDMENTS: none), or one --amendment "<line>" per other AMENDMENTS line — this attaches {verdict, amendments, reconciledAt} to the paused epic's link to that detour, instead of the judgment only ever living in conversation. It is accepted only for a detour pushed --reconcile and already popped, and reconcileNeeded clears only when no such detour is left unanswered; pop-detour names every detour owed. A BASH WRITE IS A WRITE TOO: a heredoc redirection, an in-place sed, a tee, a copier or anything else that puts bytes in a file is forbidden while the reconcile is owed, exactly as Edit is. The PreToolUse guard mechanically blocks a closed list of those shapes, and that list is incomplete BY CONSTRUCTION — a path built from a variable, an eval, a script invoked by name, an interpreter given inline source all pass it. Passing the check is not permission; this line is the obligation and the check is only its backstop.
  4. Honcho — on every PUSH and POP, also write a one-line memory to Honcho ("paused X for Y" / "resumed X, reconciled vs Y") so the relationship survives outside this repo. push-detour prints the PUSH line for you and logs it to .conductor/honcho-memories.log; paste it into your Honcho tool call. pop-detour prints the POP line only when nothing needs reconciling — with a gate armed, "reconciled vs Y" is not yet true, so emit it with honcho-memory pop <id> "<detour>; reconcile = …" after the verdict. The engine formats and logs; it never calls Honcho itself.
  5. Keep tasks.md checkboxes truthful — they are the source of truth for story progress.
  6. Roadmap as backlog — work you intend to do but haven't proposed yet can be registered now with /pm:epic add … --status planned (any lane). Planned epics show as ordered backlog in PROJECT.md and a planned: N count in the briefing, without a "no change on disk" warning; /pm:sync flips an openspec planned epic to untriaged once its change is proposed. Have a roadmap doc? Read it in-session and load each item this way.
  7. Delegate discovery. If you do not already know the file path, do not go looking yourself. A subagent's transcript never enters yours — only its final report does — so an open-ended read costs a conclusion instead of a transcript when it is delegated. "Where is X handled", "does a spec for this already exist", "what does this epic touch", "what did the last three changes here do": dispatch an Explore or general-purpose subagent and use what it concludes. Reserve an INLINE read for the narrow case where you already know the exact file and want one value out of it. This binds the ORCHESTRATING agent, which is the half that has no such rule: a dispatched child is already told to return a fixed report and not to narrate. It binds hardest across a hierarchy run or a multi-epic backlog, where your context survives many epics and is therefore the scarce resource — discovery you perform inline is paid for once per epic and never reclaimed. DELEGATING NEVER WEAKENS A FULL-READ REQUIREMENT. Where this instruction demands the whole document — the epic-level-autonomy preflight scan, and re-reading an epic's source before it becomes the work — the subagent reads the whole document and returns the finding. What is forbidden is substituting a keyword grep for a full read, and that is forbidden whoever performs it.

Read the full file on GitHub · 463 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago Changed · +59 lines · +898 tokens per session 105b25abfec6
  2. 4d ago Changed · +7 lines · +197 tokens per session 82cb947da437
  3. 1mo ago Changed · +30 lines · +649 tokens per session 06d306da37e7
  4. 2mo ago Changed · +129 lines · +2,507 tokens per session 821e3eb84d0f
  5. 2mo ago First seen · 238 lines · 4,168 tokens per session scan A 5e5174933ec4

Subscribe to this mod's changes

mac-shell-mcp CLAUDE.md is an instructions file published in the GitHub repository cfdude/mac-shell-mcp (28 stars, last pushed 4d ago), licensed MIT. It adds 8,419 tokens to every session, about $0.0337 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

mac-shell-mcp CLAUDE.md compared with instructions from other repositories

mac-shell-mcp CLAUDE.md next to 6 instructions from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
mac-shell-mcp CLAUDE.mdcfdude/mac-shell-mcpInstructions file284d agoMITA8,419Claude Code
vscode buildNext.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA9,719GitHub Copilot
next.js AGENTS.mdvercel/next.jsInstructions file143kyesterdayMITA7,461Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchainInstructions file149kyesterdayMITA4,680Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA5,516GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA3,093GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harnessInstructions file274k2d agoMITA4,313Codex, OpenCode