What is hackbox CLAUDE.md?

A project guide for Hackbox, a real-time multiplayer game platform where a host game sends screens to players' phones and receives their actions. It explains the monorepo, a repository containing several related applications, and the Cloudflare-based system that connects them.

Use it when working on the relay, HTTP API, Cloudflare Workers, Durable Objects for live shared state, or D1 for stored history.

It helps the coding agent understand which application handles each part of the platform and how live messages and saved game history move through the system.

How devanhurst/hackbox configures Claude Code

Reuse

Borrowing it

Nothing to install: this file belongs to devanhurst/hackbox. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/devanhurst/hackbox/main/CLAUDE.md

Clone the repo

git clone --depth 1 https://github.com/devanhurst/hackbox

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/instructions/devanhurst/hackbox/claude-md/github.svg)](https://agentmods.dev/instructions/devanhurst/hackbox/claude-md)

Your own site

<a href="https://agentmods.dev/instructions/devanhurst/hackbox/claude-md"><img src="https://agentmods.dev/badge/instructions/devanhurst/hackbox/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/instructions/devanhurst/hackbox/claude-md"><img src="https://agentmods.dev/badge/instructions/devanhurst/hackbox/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 4,472 This file is loaded in full into every session.

When invoked 4,472 The same file — it is already loaded in full.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.04472	$0.04472
Opus 5.5	$0.01789	$0.01789
Sonnet 5.5	$0.00894	$0.00894
Haiku 4.5	$0.00447	$0.00447

Measured 28d ago against content hash d184cb03319e, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

hackbox CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 28d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 329 lines

How it starts

The opening of the file, as written. The whole thing — 329 lines — stays where its author put it; the contents beside it link to each section on GitHub.

CLAUDE.md

This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.

Project Overview

Hackbox is a real-time multiplayer game platform (think Jackbox): a host (a third-party game, typically a Unity build, not in this repo) drives UI onto players' phones and receives their interactions, all relayed in real time.

The platform runs entirely on Cloudflare — Durable Objects for real-time sync, D1 for durable history, and several Workers. There is no always-on server and (for the live path) no managed database.

History: Hackbox was migrated off a Node/Express/Socket.io + Postgres service (on Render, at app.hackbox.ca) onto Cloudflare. That legacy service has since been shut down and its code removed from this repo — there is no backwards-compatible fallback transport any more. All work goes in the Cloudflare Workers below.

Monorepo layout

Dir	Worker	What it is
`relay/`	`hackbox-relay`	The realtime core: a `Room` Durable Object (partyserver) holding live member state + a replay cache, and writing permanent history to D1.
`api/`	`hackbox-api`	A Hono Worker — the HTTP front door (`POST /api/rooms`, room existence probes).
`client/`	`hackbox-client`	The Vue 3 player SPA, served as a static-assets Worker.
`admin/`	`hackbox-admin`	A Nuxt 3 admin dashboard (Access-protected) reading room/member history from D1 + live presence from the relay.
`db/`	—	The Cloudflare D1 schema (`schema.sql`) — permanent room/member history.
`docs/`	—	The public docs site (Nuxt Content, hackbox.ca/docs). Source under `docs/content/`.

Routing — apex path prefixes, not subdomains

All Workers are served under the apex hackbox.ca via path prefixes rather than api./relay. subdomains (subdomains get reset by some users' SNI-filtering middleboxes; the apex is the durable fix). Order matters — more specific routes win:

Read the full file on GitHub · 329 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

28d ago Changed · +10 lines · +185 tokens per session d184cb03319e
2mo ago First seen · 319 lines · 4,287 tokens per session scan A 0aa7a6d26a39

Subscribe to this mod's changes

hackbox CLAUDE.md is an instructions file published in the GitHub repository devanhurst/hackbox (6 stars, last pushed 29d ago), licensed MIT. It adds 4,472 tokens to every session, about $0.0179 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Game development

hackbox CLAUDE.md next to 6 instructions from other repositories
Mod	Type	Stars	Last push	Licence	Scan	Tokens	Works with
hackbox CLAUDE.mddevanhurst/hackbox	Instructions file	6	29d ago	MIT	A	4,472	Claude Code
vscode buildNext.instructions.mdmicrosoft/vscode	Instructions file	195k	today	MIT	A	9,719	GitHub Copilot
next.js AGENTS.mdvercel/next.js	Instructions file	143k	today	MIT	A	7,461	Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscode	Instructions file	195k	today	MIT	A	5,685	GitHub Copilot
langchain AGENTS.mdlangchain-ai/langchain	Instructions file	149k	today	MIT	A	4,680	Codex, OpenCode
vscode copilot-instructions.mdmicrosoft/vscode	Instructions file	195k	today	MIT	A	3,086	GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness	Instructions file	280k	2d ago	MIT	A	4,325	Codex, OpenCode

hackbox: Instructions file for Claude Code