agentdir: Instructions file for Codex

AGENTS.md

agentdir AGENTS.md is an instructions file for Codex, OpenCode from jstxn/agentdir. It costs 810 tokens per session, scanned A, original, MIT.

Repository instructions for AgentDir, a local record of coding-agent work. It tells the agent how to initialize recording, start work sessions, and retrieve earlier context.

In plain words
What is it for?
Setting up AgentDir in a checkout, recording coding tasks, and finding relevant context from previous work.
Why use it?
It keeps a searchable work history without requiring the engineer to run recording commands during normal coding.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md.

This is jstxn/agentdir's own configuration. It tells Codex and OpenCode how to work on agentdir itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything agentdir configures →

Reuse

Borrowing it

Nothing to install: this file belongs to jstxn/agentdir. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/jstxn/agentdir/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/jstxn/agentdir

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for agentdir AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/jstxn/agentdir/agents-md/github.svg)](https://agentmods.dev/instructions/jstxn/agentdir/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/jstxn/agentdir/agents-md"><img src="https://agentmods.dev/badge/instructions/jstxn/agentdir/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for agentdir AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/jstxn/agentdir/agents-md"><img src="https://agentmods.dev/badge/instructions/jstxn/agentdir/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 810 This file is loaded in full into every session.
When invoked 810 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00810 $0.00810
Opus 5.5 $0.00324 $0.00324
Sonnet 5.5 $0.00162 $0.00162
Haiku 4.5 $0.00081 $0.00081

Measured 1mo ago against content hash 0552094b1da2, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

agentdir AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 60 lines

What it actually says

AgentDir

Use AgentDir as the local flight recorder for coding-agent work in this repository.

The engineer should not have to run AgentDir commands during normal coding work. The agent owns the background recording flow:

  • Before starting work in an unfamiliar checkout, run agentdir root --require --quiet. Exit 0 means an initialized local or shared worktree store is ready; do not decide whether AgentDir is set up from the presence of .agentdir in this checkout.
  • If the probe exits 3, run agentdir adopt --if-needed --gitignore user. If hook installation is blocked in a restricted linked worktree, rerun it with --no-hooks.
  • Then start non-trivial coding work yourself with agentdir work start "<subsystem: distinctive behavior or constraint>". Keep the title concise but retrieval-specific: name the subsystem plus a distinctive behavior or constraint, preserving request terms likely to match prior work.
  • Retrieval is automatic. Configured FastEmbed stores use fused semantic and lexical matching; other stores keep the built-in hybrid path. Use the default invocation without a retrieval flag during normal work.
  • Read the printed context briefing, re-opening it with agentdir work context --show when the original output is unavailable. Treat briefing excerpts as previews. Prefer the printed agentdir work context --pack <pack-id> --expand <number> command before marking a source used when implementation details, prior patterns, or exact evidence matter. Expansion is optional and does not replace the terminal review decision.
  • After reading and any useful expansion, close the review once. Repeat --use in that command for every useful numbered source: agentdir work context --use <number> [--use <number> ...] --reason "<how they help>", or record a reasoned agentdir work context --none-relevant --reason "<why>" decision. Use --skip --reason "<why>" only when review is impossible; no decision is needed when the briefing presents no sources.
  • Run evidence-bearing commands through agentdir run -- <command>.
  • Evidence-bearing commands include tests, lint, typecheck, build, release checks, reproduced failures, and diagnostics that support final claims.
  • Do not wrap routine exploration commands such as rg, sed, nl, cat, ls, find, or quick read-only git status checks.
  • Use agentdir status for a single view of session, evidence, memory, context, registered roots, and doctor health.
  • Use agentdir evidence --brief and agentdir timeline to skim recorded work.
  • Record each verification the final response relies on with agentdir claim <family> --passed|--failed, e.g. agentdir claim test --passed. Families: test, lint, typecheck, build, doctor, release.
  • Record failures as failures. A claim that overstates a result is reported as contradicted; an honest failure claim is acknowledged.
  • Re-recording a family replaces its earlier claim; withdraw one made in error with agentdir claim <family> --retract.
  • Use agentdir audit session and agentdir audit claims before final claims when evidence support matters.
  • Before the final response, run agentdir work finish --json --brief when practical. Use agentdir report final --format json to preview the same agent handoff without ending the session.
  • Read the agent_handoff object before making final verification claims.
  • Do not record secrets, private keys, raw environment dumps, or credential-bearing command output.
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 60 lines · 810 tokens per session scan A 0552094b1da2

Subscribe to this mod's changes

agentdir AGENTS.md is an instructions file published in the GitHub repository jstxn/agentdir (25 stars, last pushed 29d ago), licensed MIT. It adds 810 tokens to every session, about $0.0032 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other instructions, from other repositories