temps AGENTS.md

Repository instructions for contributors working on gotempsh/temps, including source-file attribution, generated files, changelogs, and the web API.

In plain words
What is it for?
Use them when creating source files, changing the OpenAPI interface, updating documentation, or preparing changes for commit.
Why use it?
They reduce avoidable contribution errors, such as missing license headers, manually edited generated files, or an outdated server after API changes.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/gotempsh/temps/agents-md
Clone the repo
git clone --depth 1 https://github.com/gotempsh/temps

Made for: Codex, OpenCode.

Per session 3,241 This file is loaded in full into every session.
When invoked 3,241 The same file — it is already loaded in full.
Security scan A 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.03241 $0.03241
Opus 5 $0.01621 $0.01621
Sonnet 5 $0.00648 $0.00648
Haiku 4.5 $0.00324 $0.00324

Measured 2d ago against content hash 41e23c705265, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

temps AGENTS.md scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

So `curl .../openapi.json > apps/temps-cli/openapi.json` turns a
AGENTS.md · 315 lines

How it starts

The opening of the file, as written. The whole thing — 315 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md

Conventions for AI coding agents working on this repo (Claude Code, Codex, aider, etc.). The detailed engineering rules live in CLAUDE.md; this file is the short list of process conventions that go around the code. Read both.

Add attribution to every new source file

Every new first-party source or commentable configuration file must carry the Temps SPDX attribution header, written with the file's comment syntax:

SPDX-FileCopyrightText: 2024-2026 Temps Contributors
SPDX-License-Identifier: MIT OR Apache-2.0

Apply it with:

python3 scripts/source_attribution.py annotate path/to/file

Before every commit that adds or regenerates source files, run the repository-wide check and treat any failure as blocking:

python3 scripts/source_attribution.py check

Generated files must receive the same header from their generator or generation command so regeneration cannot remove it. Do not replace, remove, or misattribute copyright and license notices in third-party files.

Do not hand-edit CHANGELOG.md

CHANGELOG.md is generated from Conventional Commits by git-cliff at release time. PRs must not edit it directly, because concurrent [Unreleased] edits caused constant merge conflicts.

The Changelog workflow validates every non-merge commit in a PR and posts a preview of the generated entry. A non-conventional commit is dropped from the changelog, so use a precise type(scope): description subject and make the user or operator impact clear there.

Preview the generated entry locally with:

scripts/changelog.sh --unreleased

The release process regenerates CHANGELOG.md; the commit history is the source of truth.

Use the generated OpenAPI SDK in web/

The frontend has a generated TypeScript SDK at web/src/api/client/ (types.gen.ts, sdk.gen.ts, @tanstack/react-query.gen.ts) produced by bun run openapi-ts against the running backend. Use it.

Read the full file on GitHub · 315 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 315 lines · 3,241 tokens per session scan A 41e23c705265

Subscribe to this mod's changes

temps AGENTS.md is an instructions file published in the GitHub repository gotempsh/temps (700 stars, last pushed 2d ago), licensed Apache-2.0. It adds 3,241 tokens to every session, about $0.0162 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.