ccmux CLAUDE.md

ccmux CLAUDE.md is an instructions file for coding agents from max-listov/ccmux. It costs 3,273 tokens per session, scanned A, original, MIT.

A set of project rules for Claude Code, including a requirement to use Bun, a JavaScript runtime and package manager, instead of Node.js, npm, pnpm, or Vite.

In plain words
What is it for?
Use it when editing code, documentation, tests, comments, backlog notes, or commit messages in the ccmux project.
Why use it?
It keeps commands and code changes consistent with the project and helps prevent private machine or maintainer details from being published in this public repository.

Instructions file

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/max-listov/ccmux/claude-md
Clone the repo
git clone --depth 1 https://github.com/max-listov/ccmux

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for ccmux CLAUDE.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/max-listov/ccmux/claude-md.svg)](https://agentmods.dev/instructions/max-listov/ccmux/claude-md)
Your own site
<a href="https://agentmods.dev/instructions/max-listov/ccmux/claude-md"><img src="https://agentmods.dev/badge/instructions/max-listov/ccmux/claude-md.svg" alt="Measured on agentmods" height="20"></a>
Per session 3,273 This file is loaded in full into every session.
When invoked 3,273 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.03273 $0.03273
Opus 5 $0.01636 $0.01636
Sonnet 5 $0.00655 $0.00655
Haiku 4.5 $0.00327 $0.00327

Measured today against content hash a6257c599896, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

ccmux CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 264 lines

How it starts

The opening of the file, as written. The whole thing — 264 lines — stays where its author put it; the contents beside it link to each section on GitHub.

ccmux — project conventions

🔒 This is a PUBLIC repo — never leak the maintainer's private identifiers

Everything committed here (code, docs, backlog, tests, comments) is published. NEVER write into this repo the maintainer's private fleet/machine names, hostnames, machine rcPrefix values, concrete session names, project names, usernames, email, or absolute home paths. This holds even in examples, motivation text, and backlog notes.

  • Use generic placeholders instead: agent-A/agent-B for sessions, host-A/host-B for machines, <target>/<name> for arguments, /Users/u/... or ~/... for paths, <prefix> for an rcPrefix.
  • Before finishing any edit that touches .md/comments, sweep the changed lines for private tokens.
  • If unsure whether a term is private, treat it as private and use a placeholder.

bun scripts/check-publication.ts checks current tracked/untracked Markdown as part of the full gate. The pre-commit hook uses the same structural rules on staged additions in every file type. It rejects concrete home-path shapes, deployment-machine label shapes, operational frontmatter and UUID-addressed return routes; diagnostics show only file, line and rule. Generic placeholders remain valid. This is not an exhaustive private-name detector or a historical Git/asset scan: review arbitrary prose manually, and never embed private identifiers in the checker itself.

Commit messages carry the same rule — and one leak the list above missed

Claude Code appends Co-Authored-By: Claude … and Claude-Session: https://claude.ai/code/session_… to commit messages by default. That default lives in the agent's environment, not in this repo, so it is not something a session decides to do — it is something a session must be stopped from doing. Claude-Session is a live link to the maintainer's private working session, published in a public repository: more sensitive than any name in the list above, and absent from it. Two commits reached main carrying both before this was written down.

Read the full file on GitHub · 264 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today Changed · +52 lines · +836 tokens per session a6257c599896
  2. 5d ago First seen · 212 lines · 2,437 tokens per session scan A 8a6d67e2f05d

Subscribe to this mod's changes

ccmux CLAUDE.md is an instructions file published in the GitHub repository max-listov/ccmux (2 stars, last pushed today), licensed MIT. It adds 3,273 tokens to every session, about $0.0164 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.