codex-sidecar: Instructions file for Codex

AGENTS.md

codex-sidecar AGENTS.md is an instructions file for Codex, OpenCode from kitepon/codex-sidecar. It costs 4,879 tokens per session, scanned A, original, MIT.

Repository instructions for Codex agents working on codex-sidecar, a shared execution layer that lets other tools call Codex safely.

In plain words
What is it for?
Use it to guide work on the sidecar’s CLI, MCP tools, integrations, safety behavior, and development workflow.
Why use it?
It gives agents the project’s purpose, repository structure, language rules, and engineering constraints in one place.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md. Also seen: reads .claude/ paths; mentions Claude Code; reads ~/.codex paths.

This is kitepon/codex-sidecar's own configuration. It tells Codex and OpenCode how to work on codex-sidecar itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything codex-sidecar configures →

Reuse

Borrowing it

Nothing to install: this file belongs to kitepon/codex-sidecar. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/kitepon/codex-sidecar/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/kitepon/codex-sidecar

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for codex-sidecar AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/kitepon/codex-sidecar/agents-md/github.svg)](https://agentmods.dev/instructions/kitepon/codex-sidecar/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/kitepon/codex-sidecar/agents-md"><img src="https://agentmods.dev/badge/instructions/kitepon/codex-sidecar/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for codex-sidecar AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/kitepon/codex-sidecar/agents-md"><img src="https://agentmods.dev/badge/instructions/kitepon/codex-sidecar/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 4,879 This file is loaded in full into every session.
When invoked 4,879 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.04879 $0.04879
Opus 5.5 $0.01952 $0.01952
Sonnet 5.5 $0.00976 $0.00976
Haiku 4.5 $0.00488 $0.00488

Measured 1mo ago against content hash 2772577d5224, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

codex-sidecar AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 267 lines

How it starts

The opening of the file, as written. The whole thing — 267 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md

この製品は退役作業中。 新規連携・機能追加は行わない。Kikoeruのcodex_generate実行時依存が残るため、その移行完了までは既存サービスを維持する。

このリポジトリで作業する Codex / エージェント向けの入口メモ。

ユーザーとの会話は日本語で行う。

このリポジトリ固有の判断は本ファイルとdocs/README.mdだけで完結させる。 特定hostのglobal instructionや別repositoryを、製品開発の必須正本にしない。

Project Purpose

codex-sidecar は、kitepon.dev の AI 開発基盤群から Codex を sidecar agent として安全に呼び出すための共通実行レイヤー。

単なる codex review CLI ではなく、Throughline / Caveat / Latticeなどの 現役プロジェクトと接続できる「AI 作業OS」の部品として設計する。Claude Code が主で動く環境に、 Codex の別視点、反対意見、レビュー、調査、限定的な修正能力を差し込む。

同時に、汎用ツールとしても成立させる。設計は「generic core」と 「kitepon.dev ecosystem overlay」の二層に分ける。generic core は他の リポジトリでも単体で使える CLI/MCP/安全実行基盤、overlay はユーザーの MCP/OAuth/hook/memory/cost 系プロジェクトに強く刺さる preset / safety profile / context adapter とする。

重要な前提:

  • Claude が主導し、Codex は sidecar / second opinion として呼ばれる。
  • 呼び出し元は人間だけでなく、MCP server、hook、memory tool、cost optimizer になり得る。
  • 結果は人間向け文章だけでなく、他ツールが再利用できる machine-readable JSON として返す。
  • このrepoは単独でinstall、設定、診断、復旧、更新、releaseできる。dotagentsは 公開contractを統合するが、製品内部の状態や運用判断を所有しない。

対象 workflow と MCP tool:

  • CLI workflow review / MCP tool codex_review: diff / branch / patch の読み取り専用レビュー
  • CLI workflow explore / MCP tool codex_explore: コードベース調査とファイル参照つき回答
  • CLI workflow work / MCP tool codex_work: isolated git worktree 上での小さな修正
  • CLI workflow opinion / MCP tool codex_opinion: 設計案への反対意見、見落とし、代替案の提示
  • CLI workflow risk-check / MCP tool codex_risk_check: OAuth / MCP / secrets / Docker / hooks / CI などの重点リスク確認
  • CLI workflow auditor / MCP tool codex_auditor: primary tool-use auditor 用の pass / missingTools 判定
  • CLI workflow generate / MCP tool codex_generate: caller所有schemaによる任意の構造化JSON生成

製品管理用CLIはsetup、diagnostics、factory-diagnostics、factory-errors、 auth-status、auth-recoverと、耐久work用のwork-start / work-result / work-cancel / work-recover / work-auth-recoverを持つ。現在の全入口は docs/USAGE.mdを正とする。

非目的:

  • 画像生成 API 課金の回避
  • Codex App Server を一般 OpenAI API gateway として使うこと
  • active working tree を Codex に自由編集させること
  • approval prompt や危険操作を隠すこと

Read the full file on GitHub · 267 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago Changed · +119 lines · +2,675 tokens per session 2772577d5224
  2. 1mo ago Changed · +1 lines · +55 tokens per session 6b3c7b06d850
  3. 2mo ago First seen · 147 lines · 2,149 tokens per session scan A b0e9a64a80f3

Subscribe to this mod's changes

codex-sidecar AGENTS.md is an instructions file published in the GitHub repository kitepon/codex-sidecar (1 stars, last pushed 1mo ago), licensed MIT. It adds 4,879 tokens to every session, about $0.0195 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other instructions, from other repositories

vscode buildNext.instructions.md

Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).

microsoft/vscode · 9,715 tokens

next.js AGENTS.md

AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.

vercel/next.js · 7,461 tokens

vscode oss-third-party-notices.instructions.md

Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).

microsoft/vscode · 5,262 tokens

langchain AGENTS.md

AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.

langchain-ai/langchain · 4,680 tokens

vscode copilot-instructions.md

Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).

microsoft/vscode · 2,750 tokens

deepseek-harness AGENTS.md

AGENTS.md instructions for deepseek-ai/deepseek-harness, covering agents.md, pre-stable apis and released session data, repository layout, commands and host sandbox failures.

deepseek-ai/deepseek-harness · 4,261 tokens