agentmods.dev

google-play-cli: Instructions file for Codex

AGENTS.md

google-play-cli AGENTS.md is an instructions file for Codex, OpenCode from PollyGlot/google-play-cli. It costs 1,244 tokens per session, scanned A, original, MIT.

Repository instructions for gplay, a Go command-line tool for managing Google Play developer data and releases.

In plain words
What is it for?
Use them when changing the CLI, checking API commands, managing store listings, or preparing app releases.
Why use it?
They define the project’s exact terms and workflow, helping agents avoid confusing accounts, projects, listings, tracks, and releases.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md. Also seen: mentions AGENTS.md.

This is PollyGlot/google-play-cli's own configuration. It tells Codex and OpenCode how to work on google-play-cli itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything google-play-cli configures →

not rated 18repo +3 changed 21d ago A scan 1,244 tokens original MIT
View source ↗ PollyGlot/google-play-cli gplay.sh
Reuse

Borrowing it

Nothing to install: this file belongs to PollyGlot/google-play-cli. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/PollyGlot/google-play-cli/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/PollyGlot/google-play-cli

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for google-play-cli AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/pollyglot/google-play-cli/agents-md/github.svg)](https://agentmods.dev/instructions/pollyglot/google-play-cli/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/pollyglot/google-play-cli/agents-md"><img src="https://agentmods.dev/badge/instructions/pollyglot/google-play-cli/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for google-play-cli AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/pollyglot/google-play-cli/agents-md"><img src="https://agentmods.dev/badge/instructions/pollyglot/google-play-cli/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 1,244 This file is loaded in full into every session.
When invoked 1,244 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.01244 $0.01244
Opus 5.5 $0.00498 $0.00498
Sonnet 5.5 $0.00249 $0.00249
Haiku 4.5 $0.00124 $0.00124

Measured 21d ago against content hash c01f147edb81, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

google-play-cli AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 21d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 50 lines

How it starts

The opening of the file, as written. The whole thing — 50 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md : gplay

Public Go CLI for the Google Play Developer API: one static binary for CI and AI agents, replacing Fastlane supply. Distributed via Homebrew (PollyGlot/homebrew-tap) and releases; agent skills live in the sibling repo PollyGlot/google-play-cli-skills.

Glossary

Canonical terms live in GLOSSARY.md; use them verbatim, no synonyms. The core five:

  • Edit: the API's transactional unit; implicit (per-command) by default, explicit via gplay edits begin/commit, pinned in .gplay/edit-<package>.json.
  • Account: a locally registered service-account credential; exactly one active at a time.
  • Project: repo-local package pin in .gplay/config.json (package only, never an Account).
  • Listing: per-locale store text (title/descriptions/video); release notes and images are separate resources.
  • Track / release: where a build ships; production releases default to draft unless --complete/--staged (ADR-0002).

Commandes

  • The CLI is self-documenting: run gplay <cmd> --help to confirm the interface before coding.
  • To check an API method's shape, grep docs/discovery/paths.txt or jq the snapshot; query it, it is too large to read whole.
  • Design authority: docs/DESIGN.md (auth precedence, exit codes, output, edit lifecycle); scope authority is the GitHub issue tracker (type:prd / type:slice for planned work, type:parking for deferred, queried with gh issue list), with docs/COVERAGE.md as the method-level view (generated by make coverage-update from internal/apiregistry, never hand-edited); surprising decisions: docs/adr/.

Issues and tickets

Issue tracker, triage labels and domain docs: docs/agents/. to-tickets, triage, to-spec and implement-spec read their config there.

Vérifier

  • Gate before every PR: make check, the required CI checks run locally (make format fixes what its format step rejects; make install-hooks runs it on pre-push).
  • Tests stay offline: use internal/testkit (Play transport fake, shared RSA key) injected as &http.Client{Transport: ...}; a hand-rolled RoundTripper fails the ratchet (internal/ratchet), and a test that reaches the network is wrong.
  • New leaf command: classify it. Unlabelled means frozen Public contract (ADR-0010/0042); mark kernel.Experimental(...) at registration if its flags may still change. The registry test in cmd/gplay fails on unclassified leaves.
  • To prove a command behaves as advertised, build this worktree and drive the offline path: b=$(mktemp -d)/gplay && go build -o "$b" ./cmd/gplay && "$b" schema --list (then auth list, <cmd> --help). Two traps: --version does not exist (it is the version subcommand), and a pipe masks the exit code (gplay tracks list returns 2 alone, 0 when piped into head). The local verify skill, when present, adds evidence capture.

Read the full file on GitHub · 50 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 21d ago Changed · -4 tokens per session c01f147edb81
  2. 1mo ago Changed · +2 tokens per session 982c94585575
  3. 1mo ago Changed · +5 lines · +48 tokens per session c2c8ea6d5b43
  4. 1mo ago Changed · +1 lines · +138 tokens per session b5b88d505bb0
  5. 2mo ago Changed · +1 lines · +143 tokens per session 8fef4a8ec6dd
  6. 2mo ago First seen · 43 lines · 917 tokens per session scan A 266fee8ebc37

Subscribe to this mod's changes

google-play-cli AGENTS.md is an instructions file published in the GitHub repository PollyGlot/google-play-cli (18 stars, last pushed 3d ago), licensed MIT. It adds 1,244 tokens to every session, about $0.0050 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

CI and CDGit and workflowReleasesandroidclifastlane-alternativegogoogle-play
Related

google-play-cli AGENTS.md compared with instructions from other repositories

google-play-cli AGENTS.md next to 6 instructions from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
google-play-cli AGENTS.mdPollyGlot/google-play-cliInstructions file183d agoMITA1,244Codex, OpenCode
vscode buildNext.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA9,719GitHub Copilot
next.js AGENTS.mdvercel/next.jsInstructions file143kyesterdayMITA7,461Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchainInstructions file149kyesterdayMITA4,680Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA5,516GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA3,093GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harnessInstructions file274k2d agoMITA4,313Codex, OpenCode