app: Instructions file for Codex

AGENTS.md

app AGENTS.md is an instructions file for Codex, OpenCode from oneworks-ai/app. It costs 6,793 tokens per session, scanned A, original, MIT.

A repository instruction document for oneworks-ai/app that tells coding agents how to work in the project. It includes rules for starting development services, choosing models, and dividing tasks.

In plain words
What is it for?
Use it when working on the repository, especially when starting web or desktop development services, coordinating independent tasks, or deciding which instructions take priority.
Why use it?
It prevents agents from using the wrong startup process or skipping project-specific working rules. The input does not describe application features.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md. Also seen: mentions subagents; reads ~/.codex paths; runs codex exec.

This is oneworks-ai/app's own configuration. It tells Codex and OpenCode how to work on app itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything app configures →

Reuse

Borrowing it

Nothing to install: this file belongs to oneworks-ai/app. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/oneworks-ai/app/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/oneworks-ai/app

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for app AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/oneworks-ai/app/agents-md/github.svg)](https://agentmods.dev/instructions/oneworks-ai/app/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/oneworks-ai/app/agents-md"><img src="https://agentmods.dev/badge/instructions/oneworks-ai/app/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for app AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/oneworks-ai/app/agents-md"><img src="https://agentmods.dev/badge/instructions/oneworks-ai/app/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 6,793 This file is loaded in full into every session.
When invoked 6,793 The same file — it is already loaded in full.
Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.06793 $0.06793
Opus 5.5 $0.02717 $0.02717
Sonnet 5.5 $0.01359 $0.01359
Haiku 4.5 $0.00679 $0.00679

Measured 2mo ago against content hash 69c5bdcb3703, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

app AGENTS.md scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

命令退出 0 且 JSON 中对应服务为 `ready: true` 时,按 target 做最短交付并停止,不要再做 `ps`、`curl` 或读日志等二次验证:
AGENTS.md · 177 lines

How it starts

The opening of the file, as written. The whole thing — 177 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Repo Agent Guide

最高优先级:开发服务 Fast Path

本节优先级高于本文所有后续阅读、规则加载和 worktree 初始化判断。

如果用户意图是“取最新代码并启动 web 服务”“拉取最新代码并启动一个 web 服务”“启动 web 服务”“start web dev server”,唯一动作是在仓库根目录直接执行:

pnpm --silent tools dev-service ensure web --json

此类请求不要做额外预检查或成功后二次验证;dev-service ensure 已经负责 fetch、安全拉取 / 对齐、workspace install 校验、端口避让、后台进程、操作租约、状态写入和探活。相关经验和反例见 .oo/rules/maintenance/common-issues.md 的 “Subagent 启动 Web 服务超过 1 分钟”。

命令退出 0 且 JSON 中对应服务为 ready: true 时,按 target 做最短交付并停止,不要再做 ps、curl 或读日志等二次验证:

  • Web / PWA / homepage / docs 等前端页面服务:用 Browser / browser-use 自动打开状态里的 clientUrl / docsUrl,然后只回复一个可点击前端入口链接;不要在成功消息里展开其他 URL、PID 或日志路径,除非用户明确需要排查信息。
  • Electron / desktop / launcher:直接打开输出对应的开发态应用窗口;成功消息保持简短,不要让用户再手动打开应用。
  • 只有命令失败时才读取同一 target 的有限 events 和已脱敏 logs 并继续排查。

其他开发服务启动意图同样直接走统一 Commander CLI:

用户要求拉取最新代码并启动开发服务时,不要手动推理端口、依赖安装、后台进程或多 worktree 进程;在仓库根目录直接执行统一 Commander CLI:

pnpm --silent tools dev-service ensure <target> --json

意图识别表:

  • 普通 Web UI / “启动一个 web 服务” / “拉取最新代码,并启动一个 web 服务”:pnpm --silent tools dev-service ensure web --json
  • Electron / 桌面端 / launcher:pnpm --silent tools dev-service ensure electron --json
  • Electron 且要打开当前仓库作为 workspace:pnpm --silent tools dev-service ensure electron-workspace --json
  • PWA / 独立前端 / standalone client:pnpm --silent tools dev-service ensure pwa --json
  • 官网首页预览 / homepage preview:pnpm --silent tools dev-service ensure homepage --json
  • 使用文档 / docs 本地预览:pnpm --silent tools dev-service ensure docs --json
  • 独立 management daemon:pnpm --silent tools dev-service ensure daemon --json
  • Relay Server + Relay Admin:pnpm --silent tools dev-service ensure relay --json
  • Electron agent control bridge:pnpm --silent tools dev-service ensure desktop-control --json
  • Android 可见模拟器:pnpm --silent tools dev-service ensure android-emulator --json

pnpm tools 通过 scripts/run-tools.mjs 注册 TS;如果新 worktree 缺少 register 依赖,会先执行 pnpm install。dev-service ensure 会安全执行 git fetch --prune origin,在工作区干净时按当前状态拉取 / 对齐最新代码,按需校验 workspace 安装,后台启动对应开发服务,自动避开已占用端口,并在探活成功后输出机器可读状态。如果当前 worktree 已有同 target 服务且探活成功,会直接复用并返回 URL。

Read the full file on GitHub · 177 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2mo ago First seen · 177 lines · 6,793 tokens per session scan A 69c5bdcb3703

Subscribe to this mod's changes

app AGENTS.md is an instructions file published in the GitHub repository oneworks-ai/app (20 stars, last pushed 2mo ago), licensed MIT. It adds 6,793 tokens to every session, about $0.0272 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other instructions, from other repositories

vscode buildNext.instructions.md

Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).

microsoft/vscode · 9,715 tokens

next.js AGENTS.md

AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.

vercel/next.js · 7,461 tokens

vscode oss-third-party-notices.instructions.md

Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).

microsoft/vscode · 5,262 tokens

langchain AGENTS.md

AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.

langchain-ai/langchain · 4,680 tokens

vscode copilot-instructions.md

Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).

microsoft/vscode · 2,750 tokens

deno copilot-instructions.md

Copilot instructions for denoland/deno, covering deno development guide for github copilot, network access, high level overview, key directories and key files to understand first.

denoland/deno · 3,077 tokens