envsync-le: Instructions file for Codex

AGENTS.md

envsync-le AGENTS.md is an instructions file for Codex, OpenCode from nolindnaidoo/envsync-le. It costs 9,209 tokens per session, scanned A, original, MIT.

The main technical guide for envsync-le, a VS Code extension that compares variable names across .env configuration files and reports missing keys.

In plain words
What is it for?
Use it when working on the extension, its Rust command-line tool, shared detection data, or automated checks.
Why use it?
It explains the project structure and rules, so contributors can change the extension without breaking its checks or exposing configuration values.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md. Also seen: mentions CLAUDE.md; mentions Claude Code; mentions AGENTS.md.

This is nolindnaidoo/envsync-le's own configuration. It tells Codex and OpenCode how to work on envsync-le itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything envsync-le configures →

Reuse

Borrowing it

Nothing to install: this file belongs to nolindnaidoo/envsync-le. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/nolindnaidoo/envsync-le/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/nolindnaidoo/envsync-le

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for envsync-le AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/nolindnaidoo/envsync-le/agents-md/github.svg)](https://agentmods.dev/instructions/nolindnaidoo/envsync-le/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/nolindnaidoo/envsync-le/agents-md"><img src="https://agentmods.dev/badge/instructions/nolindnaidoo/envsync-le/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for envsync-le AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/nolindnaidoo/envsync-le/agents-md"><img src="https://agentmods.dev/badge/instructions/nolindnaidoo/envsync-le/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 9,209 This file is loaded in full into every session.
When invoked 9,209 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.09209 $0.09209
Opus 5.5 $0.03684 $0.03684
Sonnet 5.5 $0.01842 $0.01842
Haiku 4.5 $0.00921 $0.00921

Measured 9d ago against content hash 732c31cfec1b, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

envsync-le AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 370 lines

How it starts

The opening of the file, as written. The whole thing — 370 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md — EnvSync-LE

Technical source of truth for this repo. README.md is the user-facing doc; this file is for anyone (human or agent) changing the code.

This repo hosts two products: the extension at the root (this document's scope) and the Rust CLI in crate/ (its own AGENTS.md + SPEC.md). The shared detection corpus lives at crate/fixtures/; scripts/check-detection-parity.ts fails CI when this extension drifts from it, and it also fails if any answer in the corpus carries a value rather than a key name.

The Rust CLI also ships a second way, through npm: src/cli/ is its terminal surface rebuilt over this extension's detection engine, bundled to cli/cli.js as the npm package envsync-le. Both install a command named envsync-le, so the npm one is held to the crate's surface byte for byte, which is a different contract from the detection parity above. src/cli/ follows crate/src/cli.rs, scan.rs, discover.rs, the template matching in detect/compare.rs and mcp/mod.rs, not the extension's commands, and scripts/check-cli-parity.ts runs both binaries over one generated tree and fails on any difference in stdout, stderr or exit code, and in what envsync-le mcp answers. Nothing is exempt. scripts/check-cli-pipes.ts, shared with every port, closes stdout or stderr before either binary writes and fails on any difference in what follows, on all three operating systems. A change to the crate's surface changes src/cli/ in the same commit.

What this is

A VS Code extension that compares the variable names (keys) across the .env files in a workspace and reports keys missing from some files. Values are never read into comparison output, files are never modified, and there is no network access. Comparison runs automatically on file changes (debounced), on demand (Show Issues, Compare Selected), and against an optional template file.

Architecture

extension.ts              activate(): build adapters -> createDetector -> registerAllCommands -> registerVSCodeWatchers -> initial checkSync
adapters/                 thin vscode wrappers, deps injected as typed bags:
  vscodeConfiguration     Configuration (get/has) over workspace.getConfiguration('envsync-le')
  vscodeFileSystem        findFiles/readFile/stat/asRelativePath
  vscodeNotifier          window messages, gated by notificationLevel
                          (all -> missing+extra+errors, important -> missing+errors, silent -> nothing)
  vscodeStatusBar         one status bar item; re-renders on config change
  vscodeTelemetry         local OutputChannel, only when telemetryEnabled
  vscodeUserInterface     quickPick (single + canPickMany), progress, messages
  vscodeWatcher           FileSystemWatcher per watchPattern; debounced checkSync;
                          rebuilt when watchPatterns changes
  vscodeCommand           CommandAdapter for openSettings
commands/                 one file per command; registerAllCommands wires the bag
detection/
  heuristics.ts           THE single place for basename/isEnvFileName/
                          detectFileType/shouldExcludeFile (glob matching)
  parser.ts               line-oriented key extraction; multiline quoted values
  comparator.ts           compareFiles(files, {mode, templatePath, caseSensitive})
                          -> SyncReport; extras only exist in template mode
  detector.ts             orchestrates discover -> parse -> compare -> notify/UI
config/config.ts          readConfig(configuration) snapshot; CONFIG_DEFAULTS table
utils/errors.ts           sanitizeErrorMessage/errorMessage — wired into every
                          user-facing error
types.ts                  shared types only — no logic
cli/                      the npm command line: args, discover + ignoreRules
                          (ripgrep's precedence, off by default as in the
                          crate), scan (the crate's report and template
                          matching over comparator.ts), run, and checkTool
                          for `envsync-le mcp`. No `vscode`, ever

Read the full file on GitHub · 370 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 9d ago Changed · +60 tokens per session 732c31cfec1b
  2. 10d ago Changed · +14 lines · +2,106 tokens per session a5848acee286
  3. 12d ago Changed · +2 lines · +186 tokens per session 3e46352f9afc
  4. 19d ago Changed · +49 tokens per session 31ea2aba6c51
  5. 21d ago Changed · +14 lines · +671 tokens per session e955b661f497
  6. 23d ago Changed · +54 tokens per session 9a83812f057a
  7. 29d ago Changed · +1 lines · +354 tokens per session 2129246897bc
  8. 1mo ago Changed · -6 lines · -182 tokens per session 8bafe51917cf
  9. 1mo ago Changed · +77 tokens per session b1da95000540
  10. 1mo ago First seen · 345 lines · 5,834 tokens per session scan A ecba00dcbe0f

Subscribe to this mod's changes

envsync-le AGENTS.md is an instructions file published in the GitHub repository nolindnaidoo/envsync-le (1 stars, last pushed 7d ago), licensed MIT. It adds 9,209 tokens to every session, about $0.0368 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

envsync-le AGENTS.md compared with instructions from other repositories

envsync-le AGENTS.md next to 6 instructions from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
envsync-le AGENTS.mdnolindnaidoo/envsync-leInstructions file17d agoMITA9,209Codex, OpenCode
vscode buildNext.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA9,719GitHub Copilot
next.js AGENTS.mdvercel/next.jsInstructions file143ktodayMITA7,461Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchainInstructions file149kyesterdayMITA4,680Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA5,516GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA3,093GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harnessInstructions file274k2d agoMITA4,313Codex, OpenCode