neon-pilot AGENTS.md

neon-pilot AGENTS.md is an instructions file for Codex, OpenCode from patleeman/neon-pilot. It costs 2,753 tokens per session, scanned A, original, MIT.

A set of development instructions for Neon Pilot, an application platform with built-in and extension-based applications. It defines product, architecture, navigation, and implementation rules for the project.

In plain words
What is it for?
Use it when building or changing Neon Pilot features, especially extensions, applications, routing, persistence, security, or shared platform infrastructure.
Why use it?
It keeps new features aligned with the platform’s shared boundaries and avoids reintroducing discarded navigation patterns.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/patleeman/neon-pilot/agents-md
Clone the repo
git clone --depth 1 https://github.com/patleeman/neon-pilot

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for neon-pilot AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/patleeman/neon-pilot/agents-md.svg)](https://agentmods.dev/instructions/patleeman/neon-pilot/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/patleeman/neon-pilot/agents-md"><img src="https://agentmods.dev/badge/instructions/patleeman/neon-pilot/agents-md.svg" alt="Measured on agentmods" height="20"></a>
Per session 2,753 This file is loaded in full into every session.
When invoked 2,753 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.02753 $0.02753
Opus 5 $0.01376 $0.01376
Sonnet 5 $0.00551 $0.00551
Haiku 4.5 $0.00275 $0.00275

Measured 4d ago against content hash 363339b51e87, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

neon-pilot AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 66 lines

How it starts

The opening of the file, as written. The whole thing — 66 lines — stays where its author put it; the contents beside it link to each section on GitHub.

neon-pilot repo instructions

Always-on rules

  • Prefer correct, complete implementations over compatibility shims or narrow safe cuts.
  • If a feature needs a shared boundary — process execution, security policy, persistence, routing, extension APIs — implement the boundary and wire first-class call sites through it.
  • Build product/workflow UX in extensions unless the work is core runtime, security, persistence, extension-host infrastructure, app-shell plumbing, routing, install/update plumbing, or shared UI primitives.
  • Treat Neon Pilot as an application platform, not a fixed chat/sidebar harness. Built-in and extension applications should own the main window below the host top bar; avoid adding permanent left/right sidebar dependencies as default navigation. Use the host top bar and unified Command-K surface for global app navigation, with applications registering their own searchable destinations/actions there when appropriate.
  • Keep the platform model simple: the host launches applications/tabs; avoid reintroducing a separate first-class "page" hierarchy unless Patrick explicitly reopens that product decision. Applications own their internal views, navigation, resources, and singleton-vs-multiple behavior through public extension APIs.
  • Keep the core product focused on chat, application launching, extension creation/management, settings, and a minimal home/start surface. Treat older experiments such as evaluations, channels, routines, model-arena-style duels, and broad dashboards as optional extensions or candidates to cut unless current work explicitly validates their user value.
  • If the extension API is missing a capability, add the smallest general-purpose API surface to core instead of hardcoding a one-off feature.
  • Extension runtime code must not import @neon-pilot/core, @neon-pilot/desktop, packages/desktop/*, or packages/core/* directly. Route host access through @neon-pilot/extensions and narrow @neon-pilot/extensions/backend/* subpaths.
  • Host backend API modules in packages/desktop/server/extensions/backendApi/* are boundary shims. Keep them small, typed from public extension contracts, and lazy-load host/core implementation through serverModuleResolver; do not statically re-export core or desktop internals.
  • Do not introduce environment variables for app/runtime configuration. Pass state explicitly through typed config/context APIs; keep env reads only for unavoidable external-process compatibility with existing legacy variables.
  • For web UI, prefer server-pushed updates over polling when the backend can publish events.
  • Multiple agents may be working here. Do targeted changes and targeted checkpoints; stop if unrelated edits conflict with your work.
  • For the Windowed OS to Agentic OS roadmap, use Codex collaboration subagents for bounded parallel lanes; do not use Pi/Flash delegation unless Patrick explicitly reauthorizes it for that roadmap. Keep the main Codex agent responsible for orchestration, integration, validation, and checkpoints.
  • For desktop app UI, use shared primitives from @neon-pilot/ui/@neon-pilot/ui/shared instead of hand-rolled Tailwind component chrome. For first-party extension UI and settings surfaces, use @neon-pilot/extensions/ui and @neon-pilot/extensions/settings. If a raw HTML/Tailwind pattern is genuinely needed, keep the exception narrow and update the UI-pattern guardrail or docs so future agents do not silently bypass the design system.
  • Treat design-system components as the default implementation path, not an optional polish pass. Before adding local JSX for buttons, toggles, selects, inputs, toolbars, tabs, menus, cards, tables, lists, empty/error/loading states, settings rows, or page chrome, first check whether the needed primitive already exists in @neon-pilot/ui, @neon-pilot/ui/shared, @neon-pilot/extensions/ui, or @neon-pilot/extensions/settings. Local markup is acceptable for product-specific layout and content only after that check; do not create extension-local lookalikes of shared controls.

Read the full file on GitHub · 66 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 4d ago First seen · 66 lines · 2,753 tokens per session scan A 363339b51e87

Subscribe to this mod's changes

neon-pilot AGENTS.md is an instructions file published in the GitHub repository patleeman/neon-pilot (23 stars, last pushed 1mo ago), licensed MIT. It adds 2,753 tokens to every session, about $0.0138 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other instructions, from other repositories

vscode buildNext.instructions.md

Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).

microsoft/vscode · 6,785 tokens

spec-kit AGENTS.md

AGENTS.md instructions for github/spec-kit, covering agents.md, about spec kit and specify, quickstart — add a new integration in 5 steps, integration architecture and integrationmanifest — file tracking.

github/spec-kit · 7,104 tokens

codex AGENTS.md

AGENTS.md instructions for openai/codex, covering rust/codex-rs, the codex-core crate, code review rules, crate api surface and model visible context.

openai/codex · 5,182 tokens

langchain AGENTS.md

AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.

langchain-ai/langchain · 4,345 tokens

vscode oss-third-party-notices.instructions.md

Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, applying the notice (cutover) and fallback chain (never fail the build).

microsoft/vscode · 5,001 tokens

next.js AGENTS.md

Instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.

vercel/next.js · 7,296 tokens