app AGENTS.md

A repository instruction document for oneworks-ai/app that tells coding agents how to work in the project. It includes rules for starting development services, choosing models, and dividing tasks.

In plain words
What is it for?
Use it when working on the repository, especially when starting web or desktop development services, coordinating independent tasks, or deciding which instructions take priority.
Why use it?
It prevents agents from using the wrong startup process or skipping project-specific working rules. The input does not describe application features.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/oneworks-ai/app/agents-md
Clone the repo
git clone --depth 1 https://github.com/oneworks-ai/app

Made for: Codex, OpenCode.

Per session 6,793 This file is loaded in full into every session.
When invoked 6,793 The same file — it is already loaded in full.
Security scan A 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.06793 $0.06793
Opus 5 $0.03397 $0.03397
Sonnet 5 $0.01359 $0.01359
Haiku 4.5 $0.00679 $0.00679

Measured 2d ago against content hash 69c5bdcb3703, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

app AGENTS.md scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

命令退出 0 且 JSON 中对应服务为 `ready: true` 时,按 target 做最短交付并停止,不要再做 `ps`、`curl` 或读日志等二次验证:
AGENTS.md · 177 lines

How it starts

The opening of the file, as written. The whole thing — 177 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Repo Agent Guide

最高优先级:开发服务 Fast Path

本节优先级高于本文所有后续阅读、规则加载和 worktree 初始化判断。

如果用户意图是“取最新代码并启动 web 服务”“拉取最新代码并启动一个 web 服务”“启动 web 服务”“start web dev server”,唯一动作是在仓库根目录直接执行:

pnpm --silent tools dev-service ensure web --json

此类请求不要做额外预检查或成功后二次验证;dev-service ensure 已经负责 fetch、安全拉取 / 对齐、workspace install 校验、端口避让、后台进程、操作租约、状态写入和探活。相关经验和反例见 .oo/rules/maintenance/common-issues.md 的 “Subagent 启动 Web 服务超过 1 分钟”。

命令退出 0 且 JSON 中对应服务为 ready: true 时,按 target 做最短交付并停止,不要再做 pscurl 或读日志等二次验证:

  • Web / PWA / homepage / docs 等前端页面服务:用 Browser / browser-use 自动打开状态里的 clientUrl / docsUrl,然后只回复一个可点击前端入口链接;不要在成功消息里展开其他 URL、PID 或日志路径,除非用户明确需要排查信息。
  • Electron / desktop / launcher:直接打开输出对应的开发态应用窗口;成功消息保持简短,不要让用户再手动打开应用。
  • 只有命令失败时才读取同一 target 的有限 events 和已脱敏 logs 并继续排查。

其他开发服务启动意图同样直接走统一 Commander CLI:

用户要求拉取最新代码并启动开发服务时,不要手动推理端口、依赖安装、后台进程或多 worktree 进程;在仓库根目录直接执行统一 Commander CLI:

pnpm --silent tools dev-service ensure <target> --json

意图识别表:

  • 普通 Web UI / “启动一个 web 服务” / “拉取最新代码,并启动一个 web 服务”:pnpm --silent tools dev-service ensure web --json
  • Electron / 桌面端 / launcher:pnpm --silent tools dev-service ensure electron --json
  • Electron 且要打开当前仓库作为 workspace:pnpm --silent tools dev-service ensure electron-workspace --json
  • PWA / 独立前端 / standalone client:pnpm --silent tools dev-service ensure pwa --json
  • 官网首页预览 / homepage preview:pnpm --silent tools dev-service ensure homepage --json
  • 使用文档 / docs 本地预览:pnpm --silent tools dev-service ensure docs --json
  • 独立 management daemon:pnpm --silent tools dev-service ensure daemon --json
  • Relay Server + Relay Admin:pnpm --silent tools dev-service ensure relay --json
  • Electron agent control bridge:pnpm --silent tools dev-service ensure desktop-control --json
  • Android 可见模拟器:pnpm --silent tools dev-service ensure android-emulator --json

pnpm tools 通过 scripts/run-tools.mjs 注册 TS;如果新 worktree 缺少 register 依赖,会先执行 pnpm installdev-service ensure 会安全执行 git fetch --prune origin,在工作区干净时按当前状态拉取 / 对齐最新代码,按需校验 workspace 安装,后台启动对应开发服务,自动避开已占用端口,并在探活成功后输出机器可读状态。如果当前 worktree 已有同 target 服务且探活成功,会直接复用并返回 URL。

Read the full file on GitHub · 177 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 177 lines · 6,793 tokens per session scan A 69c5bdcb3703

Subscribe to this mod's changes

app AGENTS.md is an instructions file published in the GitHub repository oneworks-ai/app (18 stars, last pushed 2d ago), licensed MIT. It adds 6,793 tokens to every session, about $0.0340 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other instructions, from other repositories

AionUi AGENTS.md

Instructions for iOfficeAI/AionUi, covering aionui - project guide, code conventions, file & directory structure, naming and ui library & icons.

iOfficeAI/AionUi · 1,663 tokens

spec-kitty AGENTS.md

Instructions for Priivacy-ai/spec-kitty, covering spec kitty development guidelines, ⚠️ critical: load the project charter first, ⚠️ critical: template source location, ⚠️ critical: use canonical sources, never improvise and ⚠️ critical: git workflow — no direct pushes to origin/main.

Priivacy-ai/spec-kitty · 9,409 tokens

coral CLAUDE.md

Instructions for cdknorow/coral, covering claude.md - coral go, mission, testing, go unit tests and legacy parity tools (historical reference).

cdknorow/coral · 1,898 tokens

gemini-cli-desktop AGENTS.md

Instructions for Piebald-AI/gemini-cli-desktop, a project described as: Web/desktop UI for Gemini CLI/Qwen Code. Manage projects, switch between tools, search across past conversations, and manage MCP servers, all from one multilingual interface, locally or remotely.

Piebald-AI/gemini-cli-desktop · 6 tokens

sessionview AGENTS.md

Instructions for tyql688/sessionview, covering sessionview, commands, app / frontend, gates must pass under both feature sets: default (gui) and and --no-default-features --features headless.

tyql688/sessionview · 2,099 tokens

SubFrame AGENTS.md

Instructions for Codename-11/SubFrame, covering subframe - subframe project, core working principle, relationship to native ai tools, session start and concurrent work & worktrees.

Codename-11/SubFrame · 3,973 tokens