Borrowing it
Nothing to install: this file belongs to nolindnaidoo/envsync-le. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/nolindnaidoo/envsync-le/main/AGENTS.mdgit clone --depth 1 https://github.com/nolindnaidoo/envsync-leWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/nolindnaidoo/envsync-le/agents-md)<a href="https://agentmods.dev/instructions/nolindnaidoo/envsync-le/agents-md"><img src="https://agentmods.dev/badge/instructions/nolindnaidoo/envsync-le/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/nolindnaidoo/envsync-le/agents-md"><img src="https://agentmods.dev/badge/instructions/nolindnaidoo/envsync-le/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.09209 | $0.09209 |
| Opus 5.5 | $0.03684 | $0.03684 |
| Sonnet 5.5 | $0.01842 | $0.01842 |
| Haiku 4.5 | $0.00921 | $0.00921 |
Grade A, and why
envsync-le AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 370 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md — EnvSync-LE
Technical source of truth for this repo. README.md is the user-facing doc; this file is for anyone (human or agent) changing the code.
This repo hosts two products: the extension at the root (this document's scope) and the Rust CLI in crate/ (its own AGENTS.md + SPEC.md). The shared detection corpus lives at crate/fixtures/; scripts/check-detection-parity.ts fails CI when this extension drifts from it, and it also fails if any answer in the corpus carries a value rather than a key name.
The Rust CLI also ships a second way, through npm: src/cli/ is its terminal surface rebuilt over this extension's detection engine, bundled to cli/cli.js as the npm package envsync-le. Both install a command named envsync-le, so the npm one is held to the crate's surface byte for byte, which is a different contract from the detection parity above. src/cli/ follows crate/src/cli.rs, scan.rs, discover.rs, the template matching in detect/compare.rs and mcp/mod.rs, not the extension's commands, and scripts/check-cli-parity.ts runs both binaries over one generated tree and fails on any difference in stdout, stderr or exit code, and in what envsync-le mcp answers. Nothing is exempt. scripts/check-cli-pipes.ts, shared with every port, closes stdout or stderr before either binary writes and fails on any difference in what follows, on all three operating systems. A change to the crate's surface changes src/cli/ in the same commit.
What this is
A VS Code extension that compares the variable names (keys) across the .env files in a workspace and reports keys missing from some files. Values are never read into comparison output, files are never modified, and there is no network access. Comparison runs automatically on file changes (debounced), on demand (Show Issues, Compare Selected), and against an optional template file.
Architecture
extension.ts activate(): build adapters -> createDetector -> registerAllCommands -> registerVSCodeWatchers -> initial checkSync
adapters/ thin vscode wrappers, deps injected as typed bags:
vscodeConfiguration Configuration (get/has) over workspace.getConfiguration('envsync-le')
vscodeFileSystem findFiles/readFile/stat/asRelativePath
vscodeNotifier window messages, gated by notificationLevel
(all -> missing+extra+errors, important -> missing+errors, silent -> nothing)
vscodeStatusBar one status bar item; re-renders on config change
vscodeTelemetry local OutputChannel, only when telemetryEnabled
vscodeUserInterface quickPick (single + canPickMany), progress, messages
vscodeWatcher FileSystemWatcher per watchPattern; debounced checkSync;
rebuilt when watchPatterns changes
vscodeCommand CommandAdapter for openSettings
commands/ one file per command; registerAllCommands wires the bag
detection/
heuristics.ts THE single place for basename/isEnvFileName/
detectFileType/shouldExcludeFile (glob matching)
parser.ts line-oriented key extraction; multiline quoted values
comparator.ts compareFiles(files, {mode, templatePath, caseSensitive})
-> SyncReport; extras only exist in template mode
detector.ts orchestrates discover -> parse -> compare -> notify/UI
config/config.ts readConfig(configuration) snapshot; CONFIG_DEFAULTS table
utils/errors.ts sanitizeErrorMessage/errorMessage — wired into every
user-facing error
types.ts shared types only — no logic
cli/ the npm command line: args, discover + ignoreRules
(ripgrep's precedence, off by default as in the
crate), scan (the crate's report and template
matching over comparator.ts), run, and checkTool
for `envsync-le mcp`. No `vscode`, ever
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago Changed · +60 tokens per session 732c31cfec1b
- 10d ago Changed · +14 lines · +2,106 tokens per session a5848acee286
- 12d ago Changed · +2 lines · +186 tokens per session 3e46352f9afc
- 19d ago Changed · +49 tokens per session 31ea2aba6c51
- 21d ago Changed · +14 lines · +671 tokens per session e955b661f497
- 23d ago Changed · +54 tokens per session 9a83812f057a
- 29d ago Changed · +1 lines · +354 tokens per session 2129246897bc
- 1mo ago Changed · -6 lines · -182 tokens per session 8bafe51917cf
- 1mo ago Changed · +77 tokens per session b1da95000540
- 1mo ago First seen · 345 lines · 5,834 tokens per session scan A ecba00dcbe0f
envsync-le AGENTS.md is an instructions file published in the GitHub repository nolindnaidoo/envsync-le (1 stars, last pushed 7d ago), licensed MIT. It adds 9,209 tokens to every session, about $0.0368 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
envsync-le AGENTS.md compared with instructions from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| envsync-le AGENTS.mdnolindnaidoo/envsync-le | Instructions file | 1 | 7d ago | MIT | A | 9,209 | Codex, OpenCode |
| vscode buildNext.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 9,719 | GitHub Copilot |
| next.js AGENTS.mdvercel/next.js | Instructions file | 143k | today | MIT | A | 7,461 | Codex, OpenCode |
| langchain AGENTS.mdlangchain-ai/langchain | Instructions file | 149k | yesterday | MIT | A | 4,680 | Codex, OpenCode |
| vscode oss-third-party-notices.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 5,516 | GitHub Copilot |
| vscode copilot-instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 3,093 | GitHub Copilot |
| deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness | Instructions file | 274k | 2d ago | MIT | A | 4,313 | Codex, OpenCode |