prodex: Instructions file for Codex

AGENTS.md

prodex AGENTS.md is an instructions file for Codex, OpenCode from christiandoxa/prodex. It costs 5,845 tokens per session, scanned C, original, Apache-2.0.

Repository-wide instructions for Prodex, a Rust command-line tool that wraps Codex and manages isolated configuration profiles. They define the project's source of truth, code ownership, architecture boundaries, and development rules.

In plain words
What is it for?
Use them when modifying Prodex command-line behavior, gateway or control-plane components, workspace crates, configuration profiles, tests, or documentation.
Why use it?
They help contributors make changes in the correct Rust crate or entry point while following the project's documented safety and testing requirements.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md. Also seen: mentions subagents; mentions AGENTS.md; mentions Codex.

This is christiandoxa/prodex's own configuration. It tells Codex and OpenCode how to work on prodex itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything prodex configures →

Reuse

Borrowing it

Nothing to install: this file belongs to christiandoxa/prodex. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/christiandoxa/prodex/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/christiandoxa/prodex

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for prodex AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/christiandoxa/prodex/agents-md/github.svg)](https://agentmods.dev/instructions/christiandoxa/prodex/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/christiandoxa/prodex/agents-md"><img src="https://agentmods.dev/badge/instructions/christiandoxa/prodex/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for prodex AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/christiandoxa/prodex/agents-md"><img src="https://agentmods.dev/badge/instructions/christiandoxa/prodex/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 5,845 This file is loaded in full into every session.
When invoked 5,845 The same file — it is already loaded in full.
Security scan C 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.05845 $0.05845
Opus 5.5 $0.02338 $0.02338
Sonnet 5.5 $0.01169 $0.01169
Haiku 4.5 $0.00585 $0.00585

Measured 3d ago against content hash 3f53e8937497, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade C, and why

prodex AGENTS.md scanned grade C with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Recursive force deletehighDestructive command

rm -rf with a variable or a broad path is one typo away from removing the wrong tree.

- Use exact targeted cleanup only. Never use broad destructive patterns such as `rm -rf /tmp/prodex-*`,
AGENTS.md · 455 lines

How it starts

The opening of the file, as written. The whole thing — 455 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md

This file applies to the entire repository. Keep agent guidance actionable and repository-specific; the maintained documents linked below own detailed architecture, policy, threat-model, and test contracts.

Scope and source of truth

When rules conflict, use this order:

  1. Current task requirements and safety invariants. Existing behavior is a compatibility baseline; it is not proof that an implementation is correct.
  2. Enforced CI guards, test runners, and package.json scripts.
  3. Maintained Prodex documentation: architecture, testing, runtime policy, and threat model.
  4. This file.
  5. Transferable lessons from upstream Codex guidance.
  6. Generic Rust preferences.

Cargo.toml and each crate manifest define workspace membership and dependency ownership. Do not infer a boundary from a directory name alone. Repository prose, comments, examples, fixtures, and new documentation must be in English.

Project summary and ownership

Prodex is a Rust workspace whose CLI wraps Codex and manages isolated CODEX_HOME profiles. It also builds dedicated gateway and control-plane entrypoints. Keep composition roots thin:

  • src/main.rs, src/bin/, and src/lib.rs wire entrypoints and compatibility facades.
  • prodex-cli owns Clap parsing, help, defaults, and command normalization.
  • prodex-app owns CLI command routing, application composition, profile flows, runtime launch, and live orchestration. It must not become the home for reusable domain, storage, rendering, provider, or transport-neutral logic.
  • prodex-application owns side-effect-free use-case plans and ports. Concrete transports, providers, and storage adapters belong in composition roots.
  • prodex-domain owns pure identifiers, security context, policy, accounting, and governance decisions. It must not depend on HTTP, CLI, database drivers, filesystem/process APIs, providers, or network clients.
  • prodex-runtime-proxy owns proxy boundary types, classifiers, affinity/health/admission helpers, compatibility transforms, and bounded transport executors. Keep it hot-path-safe; live launch and app orchestration remain in prodex-app.
  • prodex-runtime-* crates own focused runtime policy, state, quota, launch, diagnostics, broker, and provider-runtime boundaries; inspect the owning crate before editing.
  • prodex-gateway-core owns HTTP-neutral admission/routing contracts; prodex-gateway-http owns framework-neutral HTTP policy; prodex-gateway-server owns bounded async Hyper/TLS serving. Do not move policy into the server adapter.
  • prodex-storage owns adapter-neutral commands and contracts. Driver-free SQL/plans belong in prodex-storage-postgres, prodex-storage-redis, or prodex-storage-sqlite; async or blocking execution belongs in the matching *-runtime adapter. DDL and migrations stay out of request-serving paths.
  • prodex-terminal-ui stays generic: terminal dimensions, layout, text, and rendering helpers; app- or runtime-specific report models stay in report crates or prodex-app.

Read the full file on GitHub · 455 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 3d ago Changed · -11 lines · -212 tokens per session 3f53e8937497
  2. 1mo ago Changed b86b7e63ad42
  3. 1mo ago Changed · +6 lines · +98 tokens per session e1282eb78d27
  4. 1mo ago First seen · 460 lines · 5,959 tokens per session scan C 22e6d72a721d

Subscribe to this mod's changes

prodex AGENTS.md is an instructions file published in the GitHub repository christiandoxa/prodex (61 stars, last pushed today), licensed Apache-2.0. It adds 5,845 tokens to every session, about $0.0234 per session on Opus 5.5. A static security scan graded it C with 1 finding (recursive force delete). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other instructions, from other repositories