xcforge: Instructions file for Claude Code

CLAUDE.md

xcforge CLAUDE.md is an instructions file for Claude Code from justinthevoid/xcforge. It costs 1,093 tokens per session, scanned A, original, MIT.

A set of Claude Code instructions for working on the xcforge Swift project, covering its build, tests, architecture, tools, and web-site commands.

In plain words
What is it for?
Guiding work on xcforge, including Swift builds and tests, the MCP server, diagnostics, formatting, and the separate Bun-based website.
Why use it?
It gives the coding agent the repository-specific commands and rules needed to build, test, format, and run the project correctly.

Instructions file for Claude Code

Written for Claude Code: the file is CLAUDE.md. Also seen: mentions CLAUDE.md; mentions Claude Code.

This is justinthevoid/xcforge's own configuration. It tells Claude Code how to work on xcforge itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything xcforge configures →

Reuse

Borrowing it

Nothing to install: this file belongs to justinthevoid/xcforge. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/justinthevoid/xcforge/main/CLAUDE.md
Clone the repo
git clone --depth 1 https://github.com/justinthevoid/xcforge

Made for: Claude Code.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for xcforge CLAUDE.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/justinthevoid/xcforge/claude-md/github.svg)](https://agentmods.dev/instructions/justinthevoid/xcforge/claude-md)
Your own site
<a href="https://agentmods.dev/instructions/justinthevoid/xcforge/claude-md"><img src="https://agentmods.dev/badge/instructions/justinthevoid/xcforge/claude-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for xcforge CLAUDE.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/justinthevoid/xcforge/claude-md"><img src="https://agentmods.dev/badge/instructions/justinthevoid/xcforge/claude-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 1,093 This file is loaded in full into every session.
When invoked 1,093 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.01093 $0.01093
Opus 5.5 $0.00437 $0.00437
Sonnet 5.5 $0.00219 $0.00219
Haiku 4.5 $0.00109 $0.00109

Measured 21d ago against content hash b4c6af95a71a, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

xcforge CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 21d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 87 lines

How it starts

The opening of the file, as written. The whole thing — 87 lines — stays where its author put it; the contents beside it link to each section on GitHub.

CLAUDE.md

This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.

Build & Test Commands

swift build                  # Debug build
swift build -c release       # Release build (~8 MB stripped)
swift test                   # Run all tests
swift test --filter TestName # Run a single test suite
swift run xcforge             # Start MCP server (stdio JSON-RPC)
swift run xcforge build --help # CLI mode

Test timeout defaults (build-test, test run, test_sim, build_and_test):

  • Default total limit: 1800s (--long / long: true: 7200s). Builds and test runs are also killed after 600s with no output (--idle-timeout / idleTimeoutSeconds, 0 disables).
  • Pass --diagnose / diagnose: true to capture a diagnostic snapshot even on success.
  • On timeout, the result includes a /tmp/xcf-diag-<pid>-<ts>.txt path and a summary line.
  • build_sim and build_run_sim share the same watchdog design. The watchdog samples at 300s and 540s and only reports a snapshot for a timeout or diagnose.

Formatting (CI enforces strict lint):

swift-format format --in-place --recursive Sources/ Tests/  # Fix
swift format lint --strict --recursive Sources/ Tests/       # Check (matches CI)

Web site (separate workspace in Web/, uses Bun — not npm):

cd Web && bun install && bun run build   # Full build with validation
bun run dev                               # Local dev at localhost:4321
bun run lint && bun run format            # Biome lint/format

Architecture

Dual-mode single binary: no args → MCP server (stdio JSON-RPC); with args → CLI (ArgumentParser). Mode detection in Sources/XCForgeCLI/Main.swift.

Two targets (see Package.swift):

  • XCForgeKit — shared library containing all 110+ MCP tools
  • XCForgeCLI — CLI layer wrapping the library with ArgumentParser commands

Tool Provider System

Tools are organized into providers that implement ProviderProtocol and self-register in ProviderRegistry. Each provider owns its tool definitions + dispatch logic. There is no central switch statement.

Read the full file on GitHub · 87 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 21d ago Changed · +2 lines · +60 tokens per session b4c6af95a71a
  2. 2mo ago First seen · 85 lines · 1,033 tokens per session scan A d382cc15ee25

Subscribe to this mod's changes

xcforge CLAUDE.md is an instructions file published in the GitHub repository justinthevoid/xcforge (2 stars, last pushed 20d ago), licensed MIT. It adds 1,093 tokens to every session, about $0.0044 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other instructions, from other repositories

vscode buildNext.instructions.md

Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).

microsoft/vscode · 9,715 tokens

next.js AGENTS.md

AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.

vercel/next.js · 7,461 tokens

vscode oss-third-party-notices.instructions.md

Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).

microsoft/vscode · 5,262 tokens

langchain AGENTS.md

AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.

langchain-ai/langchain · 4,680 tokens

vscode copilot-instructions.md

Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).

microsoft/vscode · 2,750 tokens

deno copilot-instructions.md

Copilot instructions for denoland/deno, covering deno development guide for github copilot, network access, high level overview, key directories and key files to understand first.

denoland/deno · 3,077 tokens