What is Xapiand AGENTS.md?

Repository instructions for working on Xapiand, including how to distinguish the project’s own code from bundled third-party libraries and how to build and verify changes.

Use it when navigating the Xapiand codebase, choosing where to search, changing build options, or checking documentation and end-to-end results.

It helps developers avoid editing vendored dependencies and follow the project’s expected workflow when investigating bugs or adding features.

How Kronuz/Xapiand configures Codex and OpenCode

Reuse

Borrowing it

Nothing to install: this file belongs to Kronuz/Xapiand. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/Kronuz/Xapiand/master/AGENTS.md

Clone the repo

git clone --depth 1 https://github.com/Kronuz/Xapiand

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/instructions/kronuz/xapiand/agents-md/github.svg)](https://agentmods.dev/instructions/kronuz/xapiand/agents-md)

Your own site

<a href="https://agentmods.dev/instructions/kronuz/xapiand/agents-md"><img src="https://agentmods.dev/badge/instructions/kronuz/xapiand/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/instructions/kronuz/xapiand/agents-md"><img src="https://agentmods.dev/badge/instructions/kronuz/xapiand/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 2,786 This file is loaded in full into every session.

When invoked 2,786 The same file — it is already loaded in full.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.02786	$0.02786
Opus 5.5	$0.01114	$0.01114
Sonnet 5.5	$0.00557	$0.00557
Haiku 4.5	$0.00279	$0.00279

Measured 2d ago against content hash b6163f7e1fc4, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

Xapiand AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 172 lines

How it starts

The opening of the file, as written. The whole thing — 172 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md — working in the Xapiand codebase

Orientation for anyone (human or AI) making changes here. Read ARCHITECTURE.md first for the what; this file is the how.

First, the big split: own code vs. libraries

src/ is Xapiand's own code. Everything that used to be vendored (msgpack-c, fmt, RapidJSON, LZ4, libev, TCLAP, cppcodec, ChaiScript, libyaml) and the utility code that grew here now come from the extracted Kronuz/* libraries via CMake FetchContent. A bug in one of those is fixed in its own repository, not here; src/xapiand_*_trace.h and friends are the seams that wire them to Xapiand's logging. The search engine is the strata library behind the seam in src/engine/; the Xapian fork is gone.

docs/discussions/ is a vendored copy of the complete Kronuz Discussions package. Its tracked files must remain byte-identical with ~/code/KronuzBlog/Kronuz.github.io/discussions and ~/code/KronuzBlog/gmendezb-pages/discussions. It includes an Astro component, browser widget, Cloudflare Worker, D1 migrations, tests, and generic documentation. Xapiand does not currently mount the comments component. Make package changes in one source tree, synchronize the complete directory, and verify all three copies before committing.

Where things live

Documentation outside the root's README, AGENTS, and ARCHITECTURE goes under docs/: designs in docs/design/, their architect reviews in docs/reviews/, and developer guides (testing) in docs/dev/. The user-facing site is docs/src/, and only docs/src/content/docs/ feeds the docs-as-E2E suite.

You're touching…	Start in
On-disk format, durability, volumes	`src/database/{wal,data,shard}.{cc,h}`; the volume engine is the storage library (`src/xapiand_storage_*.h` wire it); the index files are strata's (`src/engine/strata/`)
Schema handling, field types	`src/database/schema*.{cc,h}`, `src/reserved/`
HTTP API / request handling	`src/server/search_{service,views}.*`, `src/server/http_utils.h`; transport is the http library
The event loop / connections	the reactor library; `src/manager.*` owns the services
Query languages	`src/query_dsl.*` (JSON/MsgPack); the string parser is the boolean-parser library
Aggregations	`src/aggregations/`
Geospatial	`src/geospatial/`, `src/multivalue/geospatialrange.*`
Value encoding	`src/sortable_serialise.`, `src/serialise.{cc,h}`, `src/length.*`
Logging	`src/log.h` (category switches); the logger is the logger library
Scripting	`src/lua/`, `src/script.*`
Small utilities	top-level `src/.hh` / `.h` (see the table in ARCHITECTURE.md)

Read the full file on GitHub · 172 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

2d ago Changed · -21 lines · -286 tokens per session b6163f7e1fc4
8d ago Changed · +5 lines · +229 tokens per session 9d34bf19c607
2mo ago First seen · 188 lines · 2,843 tokens per session scan A 61adcef57a38

Subscribe to this mod's changes

Xapiand AGENTS.md is an instructions file published in the GitHub repository Kronuz/Xapiand (363 stars, last pushed 2d ago), licensed MIT. It adds 2,786 tokens to every session, about $0.0111 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

c-plus-plus elasticsearch indexing search search-engine

Xapiand AGENTS.md next to 6 instructions from other repositories
Mod	Type	Stars	Last push	Licence	Scan	Tokens	Works with
Xapiand AGENTS.mdKronuz/Xapiand	Instructions file	363	2d ago	MIT	A	2,786	Codex, OpenCode
vscode buildNext.instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	9,719	GitHub Copilot
next.js AGENTS.mdvercel/next.js	Instructions file	143k	today	MIT	A	7,461	Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchain	Instructions file	149k	yesterday	MIT	A	4,680	Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	5,516	GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	3,093	GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness	Instructions file	274k	2d ago	MIT	A	4,313	Codex, OpenCode

Xapiand: Instructions file for Codex