envsync-le AGENTS.md

envsync-le AGENTS.md is an instructions file for Codex, OpenCode from nolindnaidoo/envsync-le. It costs 5,457 tokens per session, scanned A, original, MIT.

The main technical guide for envsync-le, a VS Code extension that compares variable names across .env configuration files and reports missing keys.

In plain words
What is it for?
Use it when working on the extension, its Rust command-line tool, shared detection data, or automated checks.
Why use it?
It explains the project structure and rules, so contributors can change the extension without breaking its checks or exposing configuration values.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/nolindnaidoo/envsync-le/agents-md
Clone the repo
git clone --depth 1 https://github.com/nolindnaidoo/envsync-le

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for envsync-le AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/nolindnaidoo/envsync-le/agents-md.svg)](https://agentmods.dev/instructions/nolindnaidoo/envsync-le/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/nolindnaidoo/envsync-le/agents-md"><img src="https://agentmods.dev/badge/instructions/nolindnaidoo/envsync-le/agents-md.svg" alt="Measured on agentmods" height="20"></a>
Per session 5,457 This file is loaded in full into every session.
When invoked 5,457 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.05457 $0.05457
Opus 5 $0.02729 $0.02729
Sonnet 5 $0.01091 $0.01091
Haiku 4.5 $0.00546 $0.00546

Measured 4d ago against content hash 120712460aca, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

envsync-le AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 326 lines

How it starts

The opening of the file, as written. The whole thing — 326 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md — EnvSync-LE

Technical source of truth for this repo. README.md is the user-facing doc; this file is for anyone (human or agent) changing the code.

This repo hosts two products: the extension at the root (this document's scope) and the Rust CLI in crate/ (its own AGENTS.md + SPEC.md). The shared detection corpus lives at crate/fixtures/; scripts/check-detection-parity.ts fails CI when this extension drifts from it, and it also fails if any answer in the corpus carries a value rather than a key name.

What this is

A VS Code extension that compares the variable names (keys) across the .env files in a workspace and reports keys missing from some files. Values are never read into comparison output, files are never modified, and there is no network access. Comparison runs automatically on file changes (debounced), on demand (Show Issues, Compare Selected), and against an optional template file.

Architecture

extension.ts              activate(): build adapters -> createDetector -> registerAllCommands -> registerVSCodeWatchers -> initial checkSync
adapters/                 thin vscode wrappers, deps injected as typed bags:
  vscodeConfiguration     Configuration (get/has) over workspace.getConfiguration('envsync-le')
  vscodeFileSystem        findFiles/readFile/stat/asRelativePath
  vscodeNotifier          window messages, gated by notificationLevel
                          (all -> missing+extra+errors, important -> missing+errors, silent -> nothing)
  vscodeStatusBar         one status bar item; re-renders on config change
  vscodeTelemetry         local OutputChannel, only when telemetryEnabled
  vscodeUserInterface     quickPick (single + canPickMany), progress, messages
  vscodeWatcher           FileSystemWatcher per watchPattern; debounced checkSync;
                          rebuilt when watchPatterns changes
  vscodeCommand           CommandAdapter for openSettings
commands/                 one file per command; registerAllCommands wires the bag
detection/
  heuristics.ts           THE single place for basename/isEnvFileName/
                          detectFileType/shouldExcludeFile (glob matching)
  parser.ts               line-oriented key extraction; multiline quoted values
  comparator.ts           compareFiles(files, {mode, templatePath, caseSensitive})
                          -> SyncReport; extras only exist in template mode
  detector.ts             orchestrates discover -> parse -> compare -> notify/UI
config/config.ts          readConfig(configuration) snapshot; CONFIG_DEFAULTS table
utils/errors.ts           sanitizeErrorMessage/errorMessage — wired into every
                          user-facing error
types.ts                  shared types only — no logic

Read the full file on GitHub · 326 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago First seen · 326 lines · 5,457 tokens per session scan A 120712460aca

Subscribe to this mod's changes

envsync-le AGENTS.md is an instructions file published in the GitHub repository nolindnaidoo/envsync-le (1 stars, last pushed 2d ago), licensed MIT. It adds 5,457 tokens to every session, about $0.0273 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.