auto-mobile: Instructions file for Codex

AGENTS.md

auto-mobile AGENTS.md is an instructions file for Codex, OpenCode from kaeawc/auto-mobile. It costs 4,253 tokens per session, scanned A, original, Apache-2.0.

Project instructions for AutoMobile, a TypeScript server that automates Android and iOS devices through tools. It also includes supporting Kotlin and Swift code for the two mobile platforms.

In plain words
What is it for?
Use them when changing the device-automation server or its Android and iOS support code. They also explain how to write issue references and where to save terminal output.
Why use it?
They keep changes in the correct language and location, preserve the project's communication conventions, and require validation after implementation work.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md. Also seen: mentions Codex.

This is kaeawc/auto-mobile's own configuration. It tells Codex and OpenCode how to work on auto-mobile itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything auto-mobile configures →

Reuse

Borrowing it

Nothing to install: this file belongs to kaeawc/auto-mobile. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/kaeawc/auto-mobile/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/kaeawc/auto-mobile

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for auto-mobile AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/kaeawc/auto-mobile/agents-md/github.svg)](https://agentmods.dev/instructions/kaeawc/auto-mobile/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/kaeawc/auto-mobile/agents-md"><img src="https://agentmods.dev/badge/instructions/kaeawc/auto-mobile/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for auto-mobile AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/kaeawc/auto-mobile/agents-md"><img src="https://agentmods.dev/badge/instructions/kaeawc/auto-mobile/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 4,253 This file is loaded in full into every session.
When invoked 4,253 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.04253 $0.04253
Opus 5.5 $0.01701 $0.01701
Sonnet 5.5 $0.00851 $0.00851
Haiku 4.5 $0.00425 $0.00425

Measured 6d ago against content hash 3b5ec1d6aa33, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

auto-mobile AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 234 lines

How it starts

The opening of the file, as written. The whole thing — 234 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AutoMobile

Bun TypeScript MCP server providing Android & iOS device automation capabilities through its tools and resources. Kotlin & Swift supporting libraries and apps in android/ and ios/ respectively.

Key Rules

  • TypeScript only (no JavaScript)
  • Docs have two audiences, and neither is a changelog. docs/using/ is for end users only: what to call, parameters, results, errors and what to do — no source paths, class names, issue-number rationale, or AutoMobile's own CI/test harness. docs/design-docs/ holds technical internals: architecture, contracts, invariants, failure modes and why a choice was made. Keep both concise and current-state: do not add progress logs, status checklists, dated history, per-PR/issue narration, or pasted run output to either; that belongs in the PR description, commit message, or issue. Update a doc only when the behavior it describes changes, by editing the existing statement in place.
  • Write GitHub issue and pull request references as clickable Markdown links only in AI-authored prose a human reads directly — issue and PR bodies, review comments, commit messages, and assistant chat responses — where a clickable link genuinely aids navigation for the reader. Do NOT require links in checked-in repository content: neither source code comments (bare #NNNN is the established convention — src/ references are bare, never linked) nor Markdown documentation files (under docs/ and elsewhere), where bare #NNNN is likewise fine. Forcing explicit links into committed files renders as noise in an editor and makes the touched file the only inconsistent one. Automated reviewers (e.g. Codex) must NOT flag bare #NNNN references that appear in source-code comments or Markdown files; treat those as compliant.
  • After implementation changes, run relevant validation commands
  • Before pushing shell/scripts changes, run scripts/prepush-shell.sh and bun run format (the formatter catches Fast Validation fan-out); if bun.lock and/or package.json changed in the diff, run bun scripts/release/pin-runtime-deps.ts --write and commit package.json, bun.lock, and scripts/release/runtime-graph.json; otherwise rebase onto current main and do not hand-edit pins to mask a stale base; never run two bats test/bats/ sweeps concurrently on one machine; when an Actions API job log is empty, read the fast-validation-logs workflow artifact's per-check .status/.log files under scratch/fast-validate-*/.
  • Write terminal output to scratch/ when not visible
  • Local validation scripts live under scripts/ and should almost always be written in bash with shellcheck validation
  • Run scripts/prepush-android.sh from the repository root before pushing changes under android/; its scoped Detekt pass is a smoke check, not a substitute for the full-tree CI Detekt job.
  • For Playground/JUnit-runner emulator CI red (on PRs both suites run in the one Run Android Emulator Tests job, scripts/android/run-emulator-suites.sh), inspect .github/actions/android-emulator boot diagnostics first: no runner-health means an infra/runner-health question, while booted tests that fail are a regression.
  • Copy android/local.properties from a working checkout into each new Android worktree; it is gitignored and required for Gradle SDK resolution.
  • Ktfmt normalizes runCatching{}.getOrNull() to runCatching {}.getOrNull() once; write the spaced form and do not mistake that first rewrite for a non-idempotent formatter.
  • Before adding a helper, parser, or dependency, search src/, scripts/lib/, package.json, and the runtime standard library. Prefer the standard library, then an existing direct dependency, then an existing repository helper, then a small tested helper. Do not parse JSON, YAML, XML, or TypeScript with line regexes when a structured parser or typed module contract exists. For new packages, state which built-in and installed alternatives were checked. Preserve injected interfaces/FakeTimer seams where tests need deterministic control.
  • Always use interfaces & fakes & FakeTimer to decouple implementations and keep tests extremely fast and non-flaky
  • Unit tests should pass in 100ms or less. Do not assume that a failing test can be allowed to fail. CI enforces this per test from the JUnit reporter's time (which excludes beforeAll); a test over budget is re-run in isolation and only its MEDIAN is failed, so a genuine breach must be fixed in the test, never by raising BUN_TEST_MAX_MS.
  • For Swift, prefer an existing standard-library or Foundation API before adding an extension, helper, or package. Use URLComponents plus URLQueryItem for query values and Codable for AutoMobile-owned stable schemas. Keep JSONSerialization only at documented dynamic/bridge boundaries. A convenience dependency requires a stated platform-API gap, deployment-target check, and tests using interfaces/fakes.
  • For TypeScript changes, prefer the JavaScript/Node standard library, then an existing AutoMobile seam, before adding a local generic helper or direct dependency. Keep time, randomness, I/O, concurrency, and process access injectable when tests need control; justify any new direct dependency in docs/decisions/.
  • For Kotlin changes, check the Kotlin stdlib, JDK/AndroidX, the module's existing dependencies, and dependency-compatible AutoMobile modules before adding a helper, wrapper, *Util file, or dependency. Prefer the narrowest existing solution; keep one-off helpers private and adjacent to their consumer. Extract shared code only for two or more real consumers, and state any intentional exception (semantics, performance, API level, compatibility, testability, or readability) in the PR summary.

Read the full file on GitHub · 234 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago Changed · +1 lines · +153 tokens per session 3b5ec1d6aa33
  2. 14d ago Changed · -10 lines · +17 tokens per session f79589851d17
  3. 18d ago Changed · +2 lines · +57 tokens per session 1b04423b1530
  4. 20d ago Changed · +1 lines · +54 tokens per session 15b8bf5ffb18
  5. 21d ago Changed · -2 lines · -46 tokens per session 54f1bb8e54c6
  6. 28d ago Changed · +3 lines · +51 tokens per session 4abf3d796783
  7. 1mo ago Changed · +45 lines · +1,137 tokens per session 5dde3c7994c3
  8. 2mo ago First seen · 194 lines · 2,830 tokens per session scan A d80763b574b8

Subscribe to this mod's changes

auto-mobile AGENTS.md is an instructions file published in the GitHub repository kaeawc/auto-mobile (53 stars, last pushed today), licensed Apache-2.0. It adds 4,253 tokens to every session, about $0.0170 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other instructions, from other repositories

vscode buildNext.instructions.md

Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).

microsoft/vscode · 9,715 tokens

next.js AGENTS.md

AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.

vercel/next.js · 7,461 tokens

vscode oss-third-party-notices.instructions.md

Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).

microsoft/vscode · 5,262 tokens

langchain AGENTS.md

AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.

langchain-ai/langchain · 4,680 tokens

vscode copilot-instructions.md

Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).

microsoft/vscode · 2,750 tokens

deno copilot-instructions.md

Copilot instructions for denoland/deno, covering deno development guide for github copilot, network access, high level overview, key directories and key files to understand first.

denoland/deno · 3,077 tokens