agentmods.dev

Wax: Instructions file for Codex

AGENTS.md

Wax AGENTS.md is an instructions file for Codex, OpenCode from christopherkarani/Wax. It costs 1,641 tokens per session, scanned A, original, Apache-2.0.

A set of instructions for AI coding agents working on Wax, including rules for public files, repository navigation, and changes to its public API. Public repository hygiene means keeping private notes, temporary files, and internal planning material out of a public codebase.

In plain words
What is it for?
Use it when editing Wax source code, tests, documentation, examples, release files, or public integrations.
Why use it?
It helps prevent accidental publication of private or irrelevant material and keeps changes reviewable.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md. Also seen: mentions AGENTS.md; mentions OpenCode.

This is christopherkarani/Wax's own configuration. It tells Codex and OpenCode how to work on Wax itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything Wax configures →

not rated 806repo changed 2d ago A scan 1,641 tokens original Apache-2.0
View source ↗ christopherkarani/Wax christopherkarani.github.io
Reuse

Borrowing it

Nothing to install: this file belongs to christopherkarani/Wax. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/christopherkarani/Wax/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/christopherkarani/Wax

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for Wax AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/christopherkarani/wax/agents-md/github.svg)](https://agentmods.dev/instructions/christopherkarani/wax/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/christopherkarani/wax/agents-md"><img src="https://agentmods.dev/badge/instructions/christopherkarani/wax/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for Wax AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/christopherkarani/wax/agents-md"><img src="https://agentmods.dev/badge/instructions/christopherkarani/wax/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 1,641 This file is loaded in full into every session.
When invoked 1,641 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.01641 $0.01641
Opus 5.5 $0.00656 $0.00656
Sonnet 5.5 $0.00328 $0.00328
Haiku 4.5 $0.00164 $0.00164

Measured 2d ago against content hash 86af33410529, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

Wax AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 87 lines

How it starts

The opening of the file, as written. The whole thing — 87 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Wax Agent Instructions

Public Repository Hygiene

This repository is the public, front-facing Wax source tree. Keep it limited to source code, tests, release automation, product documentation, examples, and public integration assets.

Do not commit or track:

  • planning scratchpads, execution ledgers, remediation checklists, or task logs
  • agent lessons, session notes, handoff notes, or private workflow rules
  • marketing drafts for articles, social posts, launch copy, or prompt ideation
  • screenshots, issue snapshots, browser captures, or temporary debugging images
  • loose root-level analysis reports that are not part of the official docs
  • customer, investor, pricing, launch, or unreleased product planning material
  • .grok/, .ryk/, .skynex/, .pi/, .opencode/, agent config dirs
  • spec/, CONTEXT.md, AUDIT_REPORT.md, internal reliability/execution plans
  • Resources/npm/waxmcp/dist/, *.tgz, website/node_modules/, __pycache__/, *.pyc
  • draft marketing banners (wax-banner-*.png, wax-github-*.png); keep the shipping wax-banner.png

Use external/private notes for working plans. If a public plan is genuinely part of the product documentation, place it under an official docs surface and make sure it is written as user-facing documentation, not as an internal task list.

Before committing, run:

bash Resources/scripts/quality/public_repo_hygiene.sh

The command should exit 0. CI runs the same gate on pull requests and main.

Agents.md and AGENTS.md are the same file on this volume (case-insensitive). Edit one path.

Change Discipline

  • Keep changes scoped to the user request.
  • Preserve unrelated local work and generated artifacts.
  • Prefer tests or concrete verification for source changes.
  • Do not stage build output, caches, screenshots, or local tool directories.
  • Text memory facade: Sources/Wax/Memory.swift. Photo/video public facades: Sources/Wax/PhotoRAG/PhotoMemory.swift, Sources/Wax/VideoRAG/VideoMemory.swift.
  • Public re-exports live only in Sources/Wax/PublicAliases.swift. Do not restore @_exported import.
  • Package-only engines — do not generate app or docs samples against them: MemoryOrchestrator, PhotoRAGOrchestrator, VideoRAGOrchestrator, WaxSession, the Wax actor, MiniLMEmbedder. Use Memory / PhotoMemory / VideoMemory and BuiltInEmbeddings.make.
  • Swift public surface source of truth: Resources/skills/public/wax/references/public-api.md. If constraints.md or the wax skill disagree, follow public-api.md and the Swift public types.
  • Hermes native provider (canonical): Resources/hermes/wax-memory-plugin. npm ship copy: Resources/npm/waxmcp/plugins/hermes. Listed runtime files must stay byte-identical.
  • Operator MCP playbook (using Wax, not changing it): Claude.md and Resources/skills/public/wax-mcp. Swift/framework work: Resources/skills/public/wax.
  • Product examples are allowed once reviewed. Until Examples/ is committed, public paste contract is README + public-api.md + DocsPasteHarnessTests.

Read the full file on GitHub · 87 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago Changed · +2 lines · +128 tokens per session 86af33410529
  2. 3d ago Changed · +1 lines · +76 tokens per session ff4a33f9442e
  3. 2mo ago Changed · +2 lines · +34 tokens per session e7189eda5f74
  4. 2mo ago First seen · 82 lines · 1,403 tokens per session scan A 33688989127f

Subscribe to this mod's changes

Wax AGENTS.md is an instructions file published in the GitHub repository christopherkarani/Wax (806 stars, last pushed 2d ago), licensed Apache-2.0. It adds 1,641 tokens to every session, about $0.0066 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Backend and APIsMemory and contextai-agentsdata-sciencemachine-learningmemory-cachememory-hacking
Related

Wax AGENTS.md compared with instructions from other repositories

Wax AGENTS.md next to 6 instructions from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
Wax AGENTS.mdchristopherkarani/WaxInstructions file8062d agoApache-2.0A1,641Codex, OpenCode
vscode buildNext.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA9,719GitHub Copilot
next.js AGENTS.mdvercel/next.jsInstructions file143ktodayMITA7,461Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchainInstructions file149kyesterdayMITA4,680Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA5,516GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA3,093GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harnessInstructions file274k2d agoMITA4,313Codex, OpenCode