ninthwave CLAUDE.md

ninthwave CLAUDE.md is an instructions file for coding agents from ninthwave-io/ninthwave. It costs 1,812 tokens per session, scanned A, original, Apache-2.0.

A project guide for ninthwave, a TypeScript and Bun command-line tool that coordinates parallel AI coding work. It records the project’s architecture, conventions, and safety boundaries.

In plain words
What is it for?
Use it when working on ninthwave commands, orchestration, status displays, parsers, or integrations. It also explains how to run unit, system, and pre-commit tests.
Why use it?
It gives coding agents the project context they need before changing code. It also points them to the right tests and safety checks, reducing avoidable mistakes.

Instructions file

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/ninthwave-io/ninthwave/claude-md
Clone the repo
git clone --depth 1 https://github.com/ninthwave-io/ninthwave

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for ninthwave CLAUDE.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/ninthwave-io/ninthwave/claude-md.svg)](https://agentmods.dev/instructions/ninthwave-io/ninthwave/claude-md)
Your own site
<a href="https://agentmods.dev/instructions/ninthwave-io/ninthwave/claude-md"><img src="https://agentmods.dev/badge/instructions/ninthwave-io/ninthwave/claude-md.svg" alt="Measured on agentmods" height="20"></a>
Per session 1,812 This file is loaded in full into every session.
When invoked 1,812 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.01812 $0.01812
Opus 5 $0.00906 $0.00906
Sonnet 5 $0.00362 $0.00362
Haiku 4.5 $0.00181 $0.00181

Measured 5d ago against content hash 78f5db1efd33, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

ninthwave CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 85 lines

How it starts

The opening of the file, as written. The whole thing — 85 lines — stays where its author put it; the contents beside it link to each section on GitHub.

ninthwave

Parallel AI coding orchestration. TypeScript + Bun CLI.

Required reading: ETHOS.md -- core principles and hard boundaries.

Development

task setup            # install git hooks (run once after cloning)
bun run test          # run the full CI-equivalent suite (unit + system)
bun run test:unit     # run unit/contract/scenario/smoke tests only (fast, excludes test/system/)
bun run test:system   # run system integration tests only (test/system/, slow)
bun run test:pre-commit  # run the hook-equivalent safety gate
bun run core/cli.ts   # run CLI directly

No build step -- Bun executes TypeScript directly. Changes take effect immediately.

Architecture

  • core/cli.ts -- CLI entry point and command dispatcher
  • core/commands/ -- one file per command (list, launch, clean, watch, init, etc.)
  • core/commands/orchestrate.ts -- nw orchestration event loop with TUI mode (interactive) and JSON mode (--json for piping/CI)
  • core/parser.ts -- reads .ninthwave/work/ directory and domain normalization
  • core/status-render.ts -- shared status table rendering for ninthwave status --watch and the daemon TUI
  • skills/ -- SKILL.md files for AI tool integration (/decompose, etc.)
  • agents/implementer.md -- implementation agent prompt (copied to all tool directories by init)
  • core/commands/init.ts -- project setup command (seeds config and managed tool copies)

Conventions

  • Filesystem boundary: ninthwave operates within the project directory and ~/.ninthwave/ only. It does not write to ~/.copilot/, ~/.claude/, ~/.config/, or any other tool-specific user config. If a tool requires external setup, document it -- don't automate it.
  • Name casing: use Ninthwave when referring to the product in prose. Use lowercase only for commands, package names, repo names, and filesystem paths such as nw, ninthwave status, ninthwave-io/tap/ninthwave, and .ninthwave/.
  • External project privacy: do not name external projects in durable artifacts such as work items, commit messages, PR titles, PR bodies, friction logs, or decision logs unless the project is public. For private projects, describe them generically.
  • Comments and test names describe behavior, not the work that produced them. Default to no comment; only add one when the WHY is non-obvious (a hidden constraint, a workaround for a specific bug, behavior that would surprise a reader). Comments must not reference the current task, work item, round of review, fix, caller, or ticket -- those rot the moment the work item closes and belong in the PR description, commit message, or .ninthwave/ logs instead. Test names (describe, it, test titles, and test filenames) describe the behavior under test, not the work item that introduced the test. Work item IDs (M-MCX-12, H-MCX-345, round-3, [CHML]-<feature_code>-<seq>) belong in PR title/body, commit subject/body, branch name, and .ninthwave/ files -- never in source code, code comments, or test names.
  • Conventional commits: feat:, fix:, refactor:, test:, docs:, chore:
  • Tests live in test/ using bun's native test runner (vitest-compatible API via import { describe, it, expect, vi } from "vitest")
  • Mock isolation: bun test does not isolate vi.mock between test files -- mocks leak across files and break unrelated tests. Prefer dependency injection (pass collaborators as function arguments) over vi.mock. Only use vi.mock when the mocked module is not imported by any other test file. When in doubt, inject.
  • Always run bun run test for the full suite. If you invoke Bun directly, use bun test test/ (scoped to test/) to avoid picking up tests from .ninthwave/.worktrees/ during orchestration.
  • Convention over configuration -- sensible defaults, minimal config files
  • VISION.md is forward-looking only. Do not add completion markers (*(complete)*, strikethrough ~~done~~, (Shipped.), Decomposed →) to VISION.md. Completed work belongs in CHANGELOG.md. Vision workers should remove or collapse shipped sections, not annotate them.

Read the full file on GitHub · 85 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 5d ago First seen · 85 lines · 1,812 tokens per session scan A 78f5db1efd33

Subscribe to this mod's changes

ninthwave CLAUDE.md is an instructions file published in the GitHub repository ninthwave-io/ninthwave (8 stars, last pushed 2mo ago), licensed Apache-2.0. It adds 1,812 tokens to every session, about $0.0091 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.