ZenCODE AGENTS.md

Repository instructions for ZenCODE, a Swift package whose command-line program runs on macOS, Linux, and WSL. They describe the project structure, compatibility rules, build commands, and testing conventions.

In plain words
What is it for?
Use them when building, testing, documenting, or modifying ZenCODE and its Swift modules.
Why use it?
They help an AI assistant change the code without breaking public interfaces, saved data formats, dependencies, or platform support.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/gerardogrisolini/zencode/agents-md
Clone the repo
git clone --depth 1 https://github.com/gerardogrisolini/ZenCODE

Made for: Codex, OpenCode.

Per session 1,084 This file is loaded in full into every session.
When invoked 1,084 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.01084 $0.01084
Opus 5 $0.00542 $0.00542
Sonnet 5 $0.00217 $0.00217
Haiku 4.5 $0.00108 $0.00108

Measured 2d ago against content hash fd01e6e7cde7, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

ZenCODE AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 42 lines

How it starts

The opening of the file, as written. The whole thing — 42 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md

Project

  • ZenCODE is a Swift 6.3 package whose main executable is zen; it runs on macOS, Linux, and WSL with remote model providers.
  • Package.swift is authoritative for the root products, target dependencies, platforms, and build settings. The packages under Sources/Features have their own manifests and are outside the root graph.
  • Docs/architecture.md is the compatibility and dependency-direction contract. Preserve public modules, executable names, wire formats, persisted formats, feature identities, and task-graph ownership unless an explicit migration changes them.
  • Update CHANGELOG.md whenever a change is user-visible or otherwise warrants a release note.
  • Composition starts at Sources/zen/CLI/ZenCODEMain.swift; shared session coordination is centered on AgentCoreSessionRunner, backend state is behind AgentCoreBackend, and direct-tool dispatch is behind DirectToolExecutor.

Build and Validation

  • Every root Swift target enables MemberImportVisibility; source files must import the modules that define the members they use.
  • Fast shared-runtime compile: swift build --target ZenCODECore.
  • Use swift test --filter with the affected Swift Testing suite or test name. The full non-live suite is swift test; the CI and release gates use swift test --no-parallel for process-global lifecycle coverage. Validate Linux behaviour in the container machine described under Linux Validation.
  • For memory-engine changes, run swift test --filter MemoryEngineTests; memory-facade changes additionally exercise swift test --filter MemoryServiceTests and swift test --filter MemoryEnhancementTests in ZenCODECoreTests.
  • Main release product: swift build -c release --product zen.
  • Root commands intentionally do not build optional feature executables. For an optional-feature change, run swift test --filter BundledFeatureCatalogParityTests, validate the package from its own directory according to its Package.swift, and check its installed executable's --list-tools output.
  • For sensitive-manifest changes, run swift test --filter SensitiveManifestPermissionsTests; add the affected provider or setup suites when their persistence flows change.
  • Package.resolved is tracked and pins CI/release dependencies. Do not update it incidentally; for an intentional dependency change, run swift package resolve, review the exact pins, and include the lockfile.
  • Finish source changes with git diff --check. Validate script edits with bash -n Scripts/*.sh; network, provider, and installer executions are dedicated checks rather than routine validation.
  • Release tags follow Docs/release.md: strict vX.Y.Z, matching ZenPackageMetadata.version, with the same immutable tag or full commit SHA passed through --ref.

Read the full file on GitHub · 42 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 42 lines · 1,084 tokens per session scan A fd01e6e7cde7

Subscribe to this mod's changes

ZenCODE AGENTS.md is an instructions file published in the GitHub repository gerardogrisolini/ZenCODE (5 stars, last pushed 2d ago), licensed MIT. It adds 1,084 tokens to every session, about $0.0054 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other instructions, from other repositories