instructor-php AGENTS.md

Project-specific instructions for working on the cognesy/instructor-php codebase. They describe its monorepo structure, reference documents, coding style, and package-level guidance.

In plain words
What is it for?
Use them when navigating the repository, choosing package documentation, writing typed PHP, structuring conditionals, selecting collections, and following the project's contribution and quality-assurance workflow.
Why use it?
They help an agent find the right documentation and follow the project's conventions instead of applying generic PHP practices.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/cognesy/instructor-php/agents-md
Clone the repo
git clone --depth 1 https://github.com/cognesy/instructor-php

Made for: Codex, OpenCode.

Per session 3,583 This file is loaded in full into every session.
When invoked 3,583 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.03583 $0.03583
Opus 5 $0.01792 $0.01792
Sonnet 5 $0.00717 $0.00717
Haiku 4.5 $0.00358 $0.00358

Measured 2d ago against content hash d597dafda963, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

instructor-php AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 281 lines

How it starts

The opening of the file, as written. The whole thing — 281 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Key Reference Files

Monorepo Root

  • CONTRIBUTING.md - Development workflows, package management, and contribution guidelines
  • CONTENTS.md - Project structure and package overview
  • README.md - Main project documentation
  • HARD REFERENCE - CONTRIBUTING.md is the source of truth for QA execution (composer qa, qa:*) and contribution workflow details.

Individual Subpackages

Each package in packages/ may contain:

  • README.md - Package-specific documentation
  • OVERVIEW.md - Package overview and architecture
  • INTERNALS.md - Implementation details and internal structure
  • CHEATSHEET.md - Quick reference for package usage

Code Style

  • Use strict types and type hints for arguments and return values everywhere
  • Do not nest control structures (if, loops) beyond 1 level, exceptionally 2 levels
  • Use match for complex conditionals - avoid if/else if chains or switch statements; avoid ternary operators
  • Prefer immutable data structures and functional programming paradigms
  • Avoid using arrays as collections - use dedicated collection classes
  • Avoid exceptions for control flow - do not wrap everything in try/catch; either let exceptions bubble up or use monadic Cognesy\Utils\Result\Result for error handling if error needs to be handled on the same level
  • Use namespaces and PSR-4 autoloading

Agents Package Style

  • Data classes are readonly final class — all properties readonly, all mutations return new instances via with*() methods
  • Interfaces use Can- prefix (CanUseTools, CanEmitAgentEvents, CanInterceptAgentLifecycle)
  • Hooks use Hook suffix (StepsLimitHook, ErrorPolicyHook)
  • Accessors have no prefix: state(), execution(), currentStep() — not getState()
  • Mutators use with prefix and return self: withState(), withCurrentStep()
  • Named constructors for defaults: ::empty(), ::fresh(); for hydration: ::fromArray()
  • Minimal docblocks — only on class/interface declarations; methods are self-documenting via types and naming
  • Method order: constructors → lifecycle/transitions → accessors → mutators → private helpers → serialization (toArray/fromArray)
  • Enums are string-backed for serialization; put logic (priority, comparison) as methods on the enum itself
  • Use match(true) { ... } for multi-condition branching
  • Use $this->field ?? Default::empty() pattern ("ensure pattern") to provide defaults instead of null-checking

Read the full file on GitHub · 281 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 281 lines · 3,583 tokens per session scan A d597dafda963

Subscribe to this mod's changes

instructor-php AGENTS.md is an instructions file published in the GitHub repository cognesy/instructor-php (326 stars, last pushed 2d ago), licensed MIT. It adds 3,583 tokens to every session, about $0.0179 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.