What is toolnet-memory AGENTS.md?

Repository instructions for ToolNet Memory, a project-isolated system that stores and supplies useful context to coding agents. It covers memory filtering, storage providers, startup behavior, and integrations with different agents.

Use it when developing or modifying ToolNet Memory, its storage backends, project isolation, memory promotion, or integrations with Codex, OpenCode, Agy, and Claude-compatible agents.

It sets boundaries that reduce credential leaks, raw transcript exposure, cross-project memory mixing, and unnecessary recovery work during startup.

How LBT-AI/toolnet-memory configures Codex and OpenCode

Reuse

Borrowing it

Nothing to install: this file belongs to LBT-AI/toolnet-memory. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/LBT-AI/toolnet-memory/main/AGENTS.md

Clone the repo

git clone --depth 1 https://github.com/LBT-AI/toolnet-memory

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/instructions/lbt-ai/toolnet-memory/agents-md/github.svg)](https://agentmods.dev/instructions/lbt-ai/toolnet-memory/agents-md)

Your own site

<a href="https://agentmods.dev/instructions/lbt-ai/toolnet-memory/agents-md"><img src="https://agentmods.dev/badge/instructions/lbt-ai/toolnet-memory/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/instructions/lbt-ai/toolnet-memory/agents-md"><img src="https://agentmods.dev/badge/instructions/lbt-ai/toolnet-memory/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 482 This file is loaded in full into every session.

When invoked 482 The same file — it is already loaded in full.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00482	$0.00482
Opus 5.5	$0.00193	$0.00193
Sonnet 5.5	$0.00096	$0.00096
Haiku 4.5	$0.00048	$0.00048

Measured 2mo ago against content hash e5325a84a4fe, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

toolnet-memory AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

Copies of this mod

2 near-identical copies found in the catalogue:

toolnet-memory CLAUDE.md — 100% identical, 0 lines differ
toolnet-memory GEMINI.md — 100% identical, 0 lines differ

AGENTS.md · 92 lines

What it actually says

ToolNet Memory — Repository Instructions

This repository contains the ToolNet Memory CLI and runtime.

Working principles

Read the current source before making changes.
Keep ToolNet Memory project-agnostic. Never hardcode a specific user's project path.
Fast startup context must remain local, small, and bounded.
Do not automatically run deep recovery commands during agent startup.
Do not inject raw transcripts into normal prompts.
Durable memory must be filtered, deduplicated, sanitized, and selectively promoted.
Never expose credentials, API keys, tokens, passwords, or .env values.
Preserve project isolation through .toolnet/project.json.
Storage providers must remain pluggable: R2, generic S3, local, and legacy Hugging Face S3.
Changes to agent integrations must respect the native mechanism of each agent.

Agent integration model

Agy / Antigravity: native hooks and fast context injection.
Codex: MCP and project instructions.
OpenCode: native integration/plugin mechanisms.
Claude-compatible agents: repository instruction files where supported.

All adapters should use the same ToolNet context and memory core rather than duplicating project logic.

Context policy

Normal startup:

minimal context → project rules → current work → small token budget

Do not automatically run:

toolnet-memory session:agy-recover toolnet-memory session:codex-recover toolnet-memory session:opencode-recover toolnet-memory handoff:latest toolnet-memory brief

Those are manual/deep-recovery operations.

Session memory policy

Keep:

project rules,
technical decisions,
architecture decisions,
important files changed,
confirmed fixes,
blockers,
deployment rules,
next actions.

Discard or heavily filter:

system messages,
ephemeral messages,
reasoning/tool logs,
progress output,
npm noise,
repeated terminal output,
duplicate facts,
secrets.

Quality checks

Before committing code changes, run:

npm run lint npm run format:check npm run typecheck npm test npm run build:release

Do not claim completion if these checks fail.

Releases

Never republish an existing npm version.

Before publishing:

npm view toolnet-memory@latest version node -p "require('./package.json').version"

If the version already exists on npm, bump the package version first.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

2mo ago First seen · 92 lines · 482 tokens per session scan A e5325a84a4fe

Subscribe to this mod's changes

toolnet-memory AGENTS.md is an instructions file published in the GitHub repository LBT-AI/toolnet-memory (5 stars, last pushed 1mo ago), licensed MIT. It adds 482 tokens to every session, about $0.0019 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

toolnet-memory AGENTS.md next to 6 instructions from other repositories
Mod	Type	Stars	Last push	Licence	Scan	Tokens	Works with
toolnet-memory AGENTS.mdLBT-AI/toolnet-memory	Instructions file	5	1mo ago	MIT	A	482	Codex, OpenCode
vscode buildNext.instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	9,719	GitHub Copilot
next.js AGENTS.mdvercel/next.js	Instructions file	143k	today	MIT	A	7,461	Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchain	Instructions file	149k	yesterday	MIT	A	4,680	Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	5,516	GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscode	Instructions file	195k	yesterday	MIT	A	3,093	GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness	Instructions file	274k	2d ago	MIT	A	4,313	Codex, OpenCode

toolnet-memory: Instructions file for Codex