crd-ui AGENTS.md

crd-ui AGENTS.md is an instructions file for Codex, OpenCode from JuandaGarcia/crd-ui. It costs 776 tokens per session, scanned A, original, MIT.

Repository instructions for crd-ui, a framework-independent library that displays credit and debit cards, with React, Vue, and Svelte adapters. A monorepo is one repository containing several related packages or projects.

In plain words
What is it for?
Use them when developing, testing, documenting, or publishing crd-ui and its framework integrations in the pnpm workspace.
Why use it?
They explain the package layout, shared documentation source, testing commands, and rules for changing the library without breaking its adapters or website.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/juandagarcia/crd-ui/agents-md
Clone the repo
git clone --depth 1 https://github.com/JuandaGarcia/crd-ui

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for crd-ui AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/juandagarcia/crd-ui/agents-md.svg)](https://agentmods.dev/instructions/juandagarcia/crd-ui/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/juandagarcia/crd-ui/agents-md"><img src="https://agentmods.dev/badge/instructions/juandagarcia/crd-ui/agents-md.svg" alt="Measured on agentmods" height="20"></a>
Per session 776 This file is loaded in full into every session.
When invoked 776 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00776 $0.00776
Opus 5 $0.00388 $0.00388
Sonnet 5 $0.00155 $0.00155
Haiku 4.5 $0.00078 $0.00078

Measured 5d ago against content hash c09b3ac7b3b1, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

crd-ui AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 63 lines

How it starts

The opening of the file, as written. The whole thing — 63 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Agent guide for crd-ui

crd-ui is a framework-agnostic credit/debit card visualization library: a zero-dependency vanilla core with React, Vue and Svelte adapters published as subpaths of a single npm package. Library docs in markdown: https://crd-ui.juanda.co/llms-full.txt (also in packages/crd-ui/llms.txt).

Monorepo map (pnpm workspaces)

  • packages/crd-ui — the published package.
    • src/brands.ts / src/format.ts — brand detection and number/expiry/cvc formatting.
    • src/card.ts — the core renderer (createCard): owns the DOM, flip choreography, magic focus ring, variant classes.
    • src/react.tsx, src/vue.ts, src/svelte/Card.svelte — framework adapters.
    • styles/crd-ui.css — all visuals: brand themes, variants, animations.
    • tests/ — Vitest (jsdom). Svelte tests use the .svelte.test.ts suffix (runes).
  • website/ — Astro one-pager (crd-ui.juanda.co). Deploys to Vercel on push to main.
    • src/lib/snippets.ts + src/lib/api.ts — single source of truth for docs: both the HTML page and /llms-full.txt (src/lib/docs-md.ts) render from them.
  • examples/playground — Vite+React dev playground.

Commands

pnpm install
pnpm test                    # vitest for packages/crd-ui (59+ tests)
pnpm build                   # tsup: ESM+CJS+d.ts, plus dist/svelte copy
pnpm --filter website dev    # docs site on :4321
pnpm --filter website build

This machine uses pnpm only (npm is disabled and forwards to pnpm).

Architecture rules

  • The core owns the DOM. Adapters are thin controlled wrappers: render an empty container, createCard on mount, forward props with card.update(), destroy() on unmount. Never manipulate card internals from an adapter.
  • placeholders, locale and logos are creation-time options — not updatable.
  • The Svelte adapter ships as source (dist/svelte/Card.svelte with handwritten index.d.ts); its import of the core is relative and extensionless on purpose so it resolves both from src/ (tests) and dist/.
  • React/Vue/Svelte are optional peerDependencies — the core must keep zero runtime dependencies.

Read the full file on GitHub · 63 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 5d ago First seen · 63 lines · 776 tokens per session scan A c09b3ac7b3b1

Subscribe to this mod's changes

crd-ui AGENTS.md is an instructions file published in the GitHub repository JuandaGarcia/crd-ui (22 stars, last pushed 16d ago), licensed MIT. It adds 776 tokens to every session, about $0.0039 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.