Borrowing it
Nothing to install: this file belongs to edgehero/pi-dispatch. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/edgehero/pi-dispatch/main/AGENTS.mdgit clone --depth 1 https://github.com/edgehero/pi-dispatchWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/edgehero/pi-dispatch/agents-md)<a href="https://agentmods.dev/instructions/edgehero/pi-dispatch/agents-md"><img src="https://agentmods.dev/badge/instructions/edgehero/pi-dispatch/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/edgehero/pi-dispatch/agents-md"><img src="https://agentmods.dev/badge/instructions/edgehero/pi-dispatch/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.10205 | $0.10205 |
| Opus 5.5 | $0.04082 | $0.04082 |
| Sonnet 5.5 | $0.02041 | $0.02041 |
| Haiku 4.5 | $0.01021 | $0.01021 |
Grade A, and why
pi-dispatch AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 432 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Working on pi-dispatch
Notes for an AI agent working in this repository. Short on purpose: specs/ is the authority, and this file
exists to stop you from having to discover the load-bearing parts by breaking them.
What this project is
pi-dispatch runs the pi coding agent as a service. It lives in the background and, on a cron schedule or a forge event (an issue, a comment, a pull request), opens a container that runs a flow against a repository, does the work, and shuts the container down. A panel shows the triggers, the history of every past run and the spend, and can turn the whole thing off.
pi has no queue, no concurrency control, no spend limit and, by its own README, no permission system. This project is exactly that missing operational layer and nothing else. When a change would make pi-dispatch smarter about what the agent does, it probably belongs in a skill or a flow, not here.
Two consequences worth internalising before you design anything:
- The container is the boundary. Isolation is built by the worker's own
docker runargv, so nothing an image contains can weaken it. - Money is the other boundary. Every gate that costs nothing runs before every gate that costs something, and a paid container starts only after all of them pass.
The shape
| Path | What it is |
|---|---|
worker/ |
the queue consumer, the CLI (pi-dispatch), the forge hosts, doctor, service installer |
receiver/ |
the always-on trigger edge (pi-dispatch-receiver): webhook routes and the poller |
admin/ |
the operator console, a pi extension (/dispatch), TypeScript, bundled to dist/ |
gateway/ |
optional sandbox browser attachment, a separately hosted process with local terminal assets |
image/ |
the job image and the in-container runner that implements the exit-code protocol |
deploy/ |
service units, wrappers and the compose file; worker/deploy/ is the published mirror |
specs/ |
constitution, requirements, design, interfaces, open questions. The source of truth |
docs/ |
operator-facing reference, one file per feature or forge |
design/ |
the console's design system (#737): system/ is the published cards, tokens and stylesheet; tools/ the Python generators that build them (design/README.md) |
launch/ |
launch copy, the demo recording recipe and the film's recipe (launch/video/). Maintainer material, deliberately not in docs/ |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed · +1 lines · +26 tokens per session 5b4d5ede741a
- 2d ago Changed · +7 lines · +484 tokens per session cbf6197e1a30
- 3d ago Changed · +98 lines · +2,617 tokens per session 565ab5e68755
- 4d ago Changed · +29 lines · +857 tokens per session 186e2e92fb26
- 7d ago Changed · +5 lines · +112 tokens per session 6de86f81a513
- 9d ago Changed · +15 lines · +314 tokens per session 9140ef7a87b0
- 11d ago Changed · +1 lines · +19 tokens per session 4afb56eb06e5
- 12d ago First seen · 276 lines · 5,776 tokens per session scan A 7bf95226c25f
pi-dispatch AGENTS.md is an instructions file published in the GitHub repository edgehero/pi-dispatch (191 stars, last pushed yesterday), licensed MIT. It adds 10,205 tokens to every session, about $0.0408 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-26.
pi-dispatch AGENTS.md compared with instructions from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| pi-dispatch AGENTS.mdedgehero/pi-dispatch | Instructions file | 191 | yesterday | MIT | A | 10,205 | Codex, OpenCode |
| vscode buildNext.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 9,719 | GitHub Copilot |
| next.js AGENTS.mdvercel/next.js | Instructions file | 143k | yesterday | MIT | A | 7,461 | Codex, OpenCode |
| langchain AGENTS.mdlangchain-ai/langchain | Instructions file | 149k | yesterday | MIT | A | 4,680 | Codex, OpenCode |
| vscode oss-third-party-notices.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 5,516 | GitHub Copilot |
| vscode copilot-instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 3,093 | GitHub Copilot |
| deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness | Instructions file | 274k | 2d ago | MIT | A | 4,313 | Codex, OpenCode |