Borrowing it
Nothing to install: this file belongs to gybob/aai-gateway. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/gybob/aai-gateway/main/CLAUDE.mdgit clone --depth 1 https://github.com/gybob/aai-gatewayWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/gybob/aai-gateway/claude-md)<a href="https://agentmods.dev/instructions/gybob/aai-gateway/claude-md"><img src="https://agentmods.dev/badge/instructions/gybob/aai-gateway/claude-md.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.01102 | $0.01102 |
| Opus 5 | $0.00551 | $0.00551 |
| Sonnet 5 | $0.00220 | $0.00220 |
| Haiku 4.5 | $0.00110 | $0.00110 |
Grade A, and why
aai-gateway CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 80 lines — stays where its author put it; the contents beside it link to each section on GitHub.
CLAUDE.md
This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
「 以第一性原理!从原始需求和问题本质出发,不从惯例和模板出发。
- 不要假设自己清楚自己想要什么。动机或目标不清晰时,停下来讨论。
- 目标清晰但路径不是最短的,直接告诉我并建议更好的方案。
- 遇到问题追根因,不打补丁。每个决策都要能回答“为什么”。
- 输出说重点,砍掉一切不改变决策的信息。 」
Build & Development Commands
npm run build # tsc + vite build + chmod CLI
npm run dev # vite-node src/index.ts (dev mode)
npx tsc --noEmit # type check only
npm run lint # eslint src --ext .ts
npm run lint:fix # eslint with auto-fix
npm run format # prettier
npm test # vitest run
npm run test:watch # vitest watch mode
npm run test:coverage # vitest with coverage
Architecture
AAI Gateway is a unified MCP gateway that manages Agent Apps (MCP servers, Skills, ACP agents). It runs as a single MCP server (stdio) and routes tool calls to downstream apps, enabling multiple AI agents to share tools with 99% context token savings via two-phase disclosure (one-line summaries → full schemas on demand).
Core Flow
AI Agent (Claude Code / Codex / OpenCode)
↓ MCP protocol (stdio)
Server (src/mcp/server.ts)
↓
Gateway (src/core/gateway.ts) ← orchestrator
↓
ExecutionCoordinator (src/core/execution-coordinator.ts)
├─ MCP Executor → downstream MCP servers (stdio/SSE/HTTP)
├─ Skill Executor → reads SKILL.md files
└─ ACP Executor → spawns agent subprocesses (JSON-RPC)
Key Modules
- Gateway (
src/core/gateway.ts): Main orchestrator. Handlesaai:exec, import flows, enable/disable, search. Protocol-agnostic — delegates execution toExecutionCoordinator. - ExecutionCoordinator (
src/core/execution-coordinator.ts): Routes to the correct executor by protocol. Manages inactivity timeouts. - AppRegistry (
src/core/app-registry.ts): In-memoryMap<appId, RuntimeAppRecord>of all known apps. - Executors (
src/executors/): Each implements theExecutorinterface (interface.ts).acp.tsis the most complex — manages subprocess lifecycle, session/turn state machine, permission requests, and streaming. - Storage (
src/storage/): File-based registries (FileRegistry<T>) persisting MCP configs, skills, and managed apps to~/.local/share/aai-gateway/. - Discovery (
src/discovery/): Auto-discovers preset agents (Claude Code, Codex, OpenCode) via command/file checks. - Tool Definitions (
src/core/tool-definitions.ts): Defines gateway-level MCP tools (aai:exec,mcp:import,skill:import,search:discover, etc.).
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 80 lines · 1,102 tokens per session scan A e428501fbe5f
aai-gateway CLAUDE.md is an instructions file published in the GitHub repository gybob/aai-gateway (99 stars, last pushed 1mo ago), licensed Apache-2.0. It adds 1,102 tokens to every session, about $0.0055 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
vibetags com-example-config-AsyncTestConfig.instructions.md
Instructions for PIsberg/vibetags, covering copilot instructions for asynctestconfig and immutable type.
next.js AGENTS.md
AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.
codex AGENTS.md
AGENTS.md instructions for openai/codex, covering rust/codex-rs, the codex-core crate, code review rules, crate api surface and model visible context.
vscode buildNext.instructions.md
Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).
vscode oss-third-party-notices.instructions.md
Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, applying the notice (cutover) and fallback chain (never fail the build).
langchain AGENTS.md
AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.