PixelPilot uiux-graphql.instructions.md

Guidance for connecting React or Next.js applications to GraphQL APIs, which let clients request specific data fields. It covers Apollo Client, URQL, generated TypeScript types, and caching approaches.

In plain words
What is it for?
Use it when integrating services such as GitHub, Shopify, or Contentful through GraphQL. It helps set up Apollo Client or URQL and configure code generation and caching.
Why use it?
It helps keep API queries and response types consistent without manually writing matching TypeScript definitions. It also provides choices for handling cached data and application state.

Instructions file for GitHub Copilot

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/dev-lou/pixelpilot/uiux-graphql
Clone the repo
git clone --depth 1 https://github.com/dev-lou/PixelPilot

Made for: GitHub Copilot.

Per session 920 This file is loaded in full into every session.
When invoked 920 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00920 $0.00920
Opus 5 $0.00460 $0.00460
Sonnet 5 $0.00184 $0.00184
Haiku 4.5 $0.00092 $0.00092

Measured yesterday against content hash 9a8475ae9f69, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

PixelPilot uiux-graphql.instructions.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

vscode/.github/instructions/uiux-graphql.instructions.md · 124 lines

How it starts

The opening of the file, as written. The whole thing — 124 lines — stays where its author put it; the contents beside it link to each section on GitHub.

UI/UX GraphQL APIs 2026

Apollo Client (React/Next.js), URQL (lightweight alternative), code generation (GraphQL Code Generator), and caching strategies.


1. GRAPHQL ARCHITECTURE (2026)

GraphQL is the industry standard for 2026 APIs like GitHub, Shopify, and Contentful.

Apollo Client (Enterprise Choice)

Best for: Large React/Next.js apps with complex state and caching needs. Features: Normalized caching, local state management, built-in loading/error states.

URQL (Lightweight Alternative)

Best for: Small to medium apps where bundle size matters. Features: Simple API, modular "exchanges", highly performant.

GraphQL Code Generator (Mandatory)

Rule: Never manually type your GraphQL queries or responses. Use graphql-codegen to generate TypeScript types from your schema and queries.


2. APOLLO CLIENT SETUP (React/Next.js)

import { ApolloClient, InMemoryCache, ApolloProvider } from '@apollo/client';

const client = new ApolloClient({
  uri: 'https://api.shopify.com/api/2024-04/graphql.json',
  cache: new InMemoryCache(),
  headers: {
    'X-Shopify-Storefront-Access-Token': process.env.NEXT_PUBLIC_SHOPIFY_TOKEN,
  },
});

export function AppWrapper({ children }) {
  return <ApolloProvider client={client}>{children}</ApolloProvider>;
}

3. DATA TABLE (Shopify Products Example)

import { useQuery, gql } from '@apollo/client';

const GET_PRODUCTS = gql`
  query GetProducts($first: Int!) {
    products(first: $first) {
      edges {
        node {
          id
          title
          handle
          priceRange {
            minVariantPrice {
              amount
              currencyCode
            }
          }
        }
      }
    }
  }
`;

export function ProductTable() {
  const { loading, error, data } = useQuery(GET_PRODUCTS, {
    variables: { first: 10 },
  });

  if (loading) return <div className="skeleton" style={{ height: 400 }}></div>;
  if (error) return <div className="error-state">Error: {error.message}</div>;

  return (
    <div className="data-table-container">
      <table className="data-table">
        <thead>
          <tr>
            <th>Product</th>
            <th>Price</th>
            <th>Status</th>
          </tr>
        </thead>
        <tbody>
          {data.products.edges.map(({ node }) => (
            <tr key={node.id} data-id={node.id}>
              <td>{node.title}</td>
              <td>{node.priceRange.minVariantPrice.amount} {node.priceRange.minVariantPrice.currencyCode}</td>
              <td><span className="badge badge--success">Active</span></td>
            </tr>
          ))}
        </tbody>
      </table>
    </div>
  );
}

Read the full file on GitHub · 124 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 124 lines · 920 tokens per session scan A 9a8475ae9f69

Subscribe to this mod's changes

PixelPilot uiux-graphql.instructions.md is an instructions file published in the GitHub repository dev-lou/PixelPilot (2 stars, last pushed 4mo ago), licensed MIT. It adds 920 tokens to every session, about $0.0046 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.