web: Instructions file for Codex

AGENTS.md

web AGENTS.md is an instructions file for Codex, OpenCode from LumeWeb/web. It costs 1,421 tokens per session, scanned A, original, MIT.

Repository instructions for coding agents working on LumeWeb. They cover agent files, writing, comments, commits, pull-request descriptions, and replies in a pnpm monorepo containing React, TypeScript, and Go code.

In plain words
What is it for?
Use them to guide code comments, commit messages, pull-request text, user replies, and work across the repository's apps, libraries, and Go services.
Why use it?
They give agents shared rules for accurate, plain-language changes and documentation across the repository.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md. Also seen: mentions AGENTS.md.

This is LumeWeb/web's own configuration. It tells Codex and OpenCode how to work on web itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything web configures →

View source ↗ LumeWeb/web
Reuse

Borrowing it

Nothing to install: this file belongs to LumeWeb/web. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/LumeWeb/web/develop/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/LumeWeb/web

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for web AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/lumeweb/web/agents-md/github.svg)](https://agentmods.dev/instructions/lumeweb/web/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/lumeweb/web/agents-md"><img src="https://agentmods.dev/badge/instructions/lumeweb/web/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for web AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/lumeweb/web/agents-md"><img src="https://agentmods.dev/badge/instructions/lumeweb/web/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 1,421 This file is loaded in full into every session.
When invoked 1,421 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.01421 $0.01421
Opus 5.5 $0.00568 $0.00568
Sonnet 5.5 $0.00284 $0.00284
Haiku 4.5 $0.00142 $0.00142

Measured 1mo ago against content hash 4481c822450a, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

web AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 118 lines

How it starts

The opening of the file, as written. The whole thing — 118 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md

Shared rules for every coding agent and PR reviewer in this repo, a pnpm monorepo with React and TypeScript under apps/ and libs/, and Go services under go/. The "Writing" section applies to every kind of prose an agent produces here: code comments, commit bodies, PR descriptions, test names, and replies to users.

Writing

Plain words. Name the real thing: the function, the file, the platform, the failure. Use the word you would say out loud, and prefer a verb to a noun built from one ("validates", not "performs validation of"). No abstract sentence where a fact belongs.

Accuracy. A sentence stating a checkable fact (a field list, a state set, a count, a returned shape, a path, a script name) must match the code. Verify it or leave it out; a reader trusts a comment over the code.

Numbers. A number the code or the contract fixes (a 200ms interval, a retry cap) passes in a comment, and so does one derived from the mechanism. Do not hedge them: a fixed 2x stays "2x", not "~2x". A number someone had to run something to get (a benchmark result, a profile percentage, a measured timing) fails in a comment; it drifts while still reading as fact. State the mechanism in the comment and put the measurement in the PR description, where its conditions live.

Never write: delve, leverage, utilize, robust, seamless, crucial, pivotal, paramount, realm, underscore, foster, elevate, unlock, streamline, boast, landscape, holistic, bespoke, groundbreaking, testament, synergy, endeavor, meticulous, nuanced, notably, importantly, essentially, effectively, simply, basically, additionally, furthermore, moreover, comprehensive, myriad, plethora, facilitate, elegant, load-bearing, slice, gate, seam, or "landed" for shipped or merged. No em-dashes, no arrows, no "not just X, it's Y" pivot, no negative-flip contrast, no rule of three, no over-bolding. Colons, semicolons, and parentheses carry those jobs.

A word on that list is fine where it is the codebase's own term: a function name, an API verb, a field, a character. The list targets filler.

Read the full file on GitHub · 118 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 118 lines · 1,421 tokens per session scan A 4481c822450a

Subscribe to this mod's changes

web AGENTS.md is an instructions file published in the GitHub repository LumeWeb/web (2 stars, last pushed yesterday), licensed MIT. It adds 1,421 tokens to every session, about $0.0057 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-28.

Related

web AGENTS.md compared with instructions from other repositories

web AGENTS.md next to 6 instructions from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
web AGENTS.mdLumeWeb/webInstructions file2yesterdayMITA1,421Codex, OpenCode
vscode buildNext.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA9,719GitHub Copilot
next.js AGENTS.mdvercel/next.jsInstructions file143kyesterdayMITA7,461Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchainInstructions file149kyesterdayMITA4,680Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA5,516GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA3,093GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harnessInstructions file274k2d agoMITA4,313Codex, OpenCode