xcodeinstrumentmcp AGENTS.md

Repository instructions for an Xcode-related TypeScript project, including required documents, package rules, architecture limits, and verification steps. It also says the project should remain a single package rather than a monorepo, which is one repository containing multiple packages.

In plain words
What is it for?
Use it when planning or implementing changes in the repository, especially architectural work, dependency changes, documentation updates, and verification.
Why use it?
It gives coding agents the project rules they must follow before changing code and defines how to check that changes are acceptable.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/eksdev007/xcodeinstrumentmcp/agents-md
Clone the repo
git clone --depth 1 https://github.com/eksdev007/xcodeinstrumentmcp

Made for: Codex, OpenCode.

Per session 622 This file is loaded in full into every session.
When invoked 622 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00622 $0.00622
Opus 5 $0.00311 $0.00311
Sonnet 5 $0.00124 $0.00124
Haiku 4.5 $0.00062 $0.00062

Measured yesterday against content hash c9570b70d001, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

xcodeinstrumentmcp AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 60 lines

How it starts

The opening of the file, as written. The whole thing — 60 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md

Repository expectations

  • Read docs/task-definition.md before editing code.
  • Treat docs/spec.md and docs/appendix.md as normative requirements, not suggestions.
  • The first public release is the feature set formerly discussed as v1.1; ship tag remains v1.0.0.
  • This repository is a single package implementation target. Do not convert it into a monorepo.
  • Prefer pnpm for all package operations.
  • Keep the implementation ESM-only TypeScript on Node.js 22+.
  • Do not add production dependencies unless required by the specs or documented in docs/architecture-decisions.md.

Execution loop

  • Before making broad architectural changes, re-read docs/architecture-decisions.md.
  • After each meaningful change, run bash scripts/verify.sh.
  • Do not mark any requirement complete unless verification evidence exists in tests, fixtures, or a documented manual validation note.
  • When a behavior changes, update docs, fixtures, and snapshots in the same change.
  • Prefer small validated diffs over speculative large rewrites.

Priority order

  1. failing verification script outputs
  2. missing required public surface from the specs
  3. fixture coverage gaps
  4. docs drift
  5. convenience improvements

Guardrails

  • Never expose raw low-level xctrace passthrough tools in the public MCP surface unless the specs explicitly require them.
  • Never implement signpost rewriting with regex. Use the SwiftSyntax helper path described in docs/appendix.md.
  • Never claim metric precision that is unsupported by the exported evidence.
  • Keep outputs bounded by default.
  • Preserve privacy-first local behavior.

Audit Answer Expectations

  • Do not turn sparse or low-signal traces into broad performance narratives.
  • Lead with the strongest defensible conclusion, not a tour of every instrument result.
  • Separate app-owned evidence from SDK, wrapper, analytics, and framework noise.
  • If the trace is weak, say so explicitly: no actionable app bottleneck isolated is better than generic advice.
  • Prefer one concrete suspect path, symbol, or subsystem over a long generic hotspot list.
  • State confidence and limits in plain language when the capture window is too quiet, too broad, or dominated by vendor code.
  • End with the next targeted recording step needed to answer the unresolved human question.
  • When summarizing for humans, answer these four questions directly:
    1. What is the most likely real issue?
    2. How confident is that conclusion?
    3. What specific code or subsystem should be inspected next?
    4. What capture should be rerun if the evidence is still weak?

Read the full file on GitHub · 60 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 60 lines · 622 tokens per session scan A c9570b70d001

Subscribe to this mod's changes

xcodeinstrumentmcp AGENTS.md is an instructions file published in the GitHub repository eksdev007/xcodeinstrumentmcp (2 stars, last pushed 4mo ago), licensed MIT. It adds 622 tokens to every session, about $0.0031 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.