orm: Instructions file for Codex

AGENTS.md

orm AGENTS.md is an instructions file for Codex, OpenCode from prisma/orm. It costs 2,802 tokens per session, scanned A, original, Apache-2.0.

A set of repository instructions for Prisma Next, a contract-first data access layer that defines database structure before application code uses it.

In plain words
What is it for?
Use it when onboarding to the repository, changing its TypeScript code, running tests, or following its architecture and workflow rules.
Why use it?
It gives coding agents the project background, file map, conventions, testing guidance, and development rules they need to work safely.

Instructions file for CodexOpenCode ✓ vendor

Written for Codex and OpenCode: the file is AGENTS.md. Also seen: reads .claude/ paths; mentions subagents; mentions Claude Code.

This is prisma/orm's own configuration. It tells Codex and OpenCode how to work on orm itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything orm configures →

About the project

Prisma ORM is a Node.js and TypeScript database toolkit that lets applications work with databases through a programming interface instead of writing every query directly in SQL. Developers use it with databases including PostgreSQL, MySQL, MariaDB, SQL Server, SQLite, MongoDB, and CockroachDB. The catalogue add-ons provide agent rules, skills, hooks, agents, and other workflows for using Prisma.

prisma/orm · 47,659 stars · on GitHub · prisma.io

Reuse

Borrowing it

Nothing to install: this file belongs to prisma/orm. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/prisma/orm/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/prisma/orm

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for orm AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/prisma/orm/agents-md/github.svg)](https://agentmods.dev/instructions/prisma/orm/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/prisma/orm/agents-md"><img src="https://agentmods.dev/badge/instructions/prisma/orm/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for orm AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/prisma/orm/agents-md"><img src="https://agentmods.dev/badge/instructions/prisma/orm/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 2,802 This file is loaded in full into every session.
When invoked 2,802 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.02802 $0.02802
Opus 5.5 $0.01121 $0.01121
Sonnet 5.5 $0.00560 $0.00560
Haiku 4.5 $0.00280 $0.00280

Measured 7d ago against content hash b5d8bd34efe5, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

orm AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

Origin

Copies of this mod

1 near-identical copy found in the catalogue:

AGENTS.md · 136 lines

How it starts

The opening of the file, as written. The whole thing — 136 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Agents — Prisma 8

Welcome. This is a contract‑first, agent‑friendly data layer.

Start Here

Modular Onboarding

Project Overview

Prisma 8 is a contract-first data access layer:

  • Contract-first: Emit contract.json + contract.d.ts — no executable runtime code generation
  • Composable DSL: Type-safe query builder (sql().from(...).select(...))
  • Machine-readable: Structured artifacts that agents can understand and manipulate
  • Runtime verification: Contract hashes and guardrails ensure safety before execution

Where skills and rules live

The repo keeps a single canonical home for each kind of agent surface, with presentation symlinks that satisfy the paths each harness expects.

  • Skills — canonical home: skills-contrib/<skill-name>/SKILL.md. These are the tracked, deliverable source-of-truth files.
  • Skills — presentation symlinks: .claude/skills/<skill-name> and .agents/skills/<skill-name> are symlink directories pointing into skills-contrib/. They exist so the various agent harnesses (Cursor, Claude Code, …) can find the skills at the paths they expect. Both symlink trees are gitignored.
  • Skills — wired post-install: the symlink trees (and any tooling-specific copies) are materialized by the prepare script in package.json, which runs skills add ./skills-contrib --skill '*' --agent universal claude-code -y. After pnpm install, .claude/skills/ and .agents/skills/ are populated automatically — no manual setup. If you add a new skill under skills-contrib/, re-run pnpm install (or just the prepare hook) to wire it into the tooling locations. pnpm lint:skills validates skill frontmatter in CI.
  • Drive upstream in ignite: drive-* skills and docs/drive/ live in prisma/ignite (skills/.pilot/); install with npx skills add prisma/ignite/skills/.pilot --skill '*'. This repo keeps only drive/ project-context overlays.
  • Rules — canonical home: .agents/rules/<rule-name>.mdc — the only tracked copy (rule files must use the .mdc extension; a .md rule is never loaded by the harnesses) (a whitelist exception in .gitignore keeps .agents/rules/** tracked even though the rest of .agents/ is ignored). The .cursor/rules/ and .claude/rules/ trees are gitignored presentation mirrors containing only relative symlinks back into .agents/rules/.
  • Rules — wired post-install: like skills, the symlink trees are materialized by prepare (which runs node scripts/sync-agent-rules.mjs after skills add). After pnpm install the trees are regenerated automatically — no manual setup. A rule added only to .cursor/rules is gitignored and silently lost, so always add it under .agents/rules/ and run pnpm rules:sync. pnpm lint:rules:symlinks enforces tree/canonical consistency in CI.
  • Practical implication for editors and sub-agents: when amending or authoring a skill or rule, edit at the canonical path (skills-contrib/ for skills, .agents/rules/ for rules) — not at the symlinked path. An edit through a symlink writes to the canonical file on disk, but git status and git ls-files report against the canonical path; addressing the canonical path keeps diffs legible and avoids surface churn.

Read the full file on GitHub · 136 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 7d ago Changed · +1 lines · +39 tokens per session b5d8bd34efe5
  2. 15d ago Changed · +4 lines · +84 tokens per session 29c0764a0051
  3. 18d ago Changed · +9 tokens per session da94f44ec45d
  4. 1mo ago Changed · +2 tokens per session 44180036712c
  5. 2mo ago First seen · 131 lines · 2,668 tokens per session scan A 90f426479c26

Subscribe to this mod's changes

orm AGENTS.md is an instructions file published in the GitHub repository prisma/orm (47,659 stars, last pushed yesterday), licensed Apache-2.0. It adds 2,802 tokens to every session, about $0.0112 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

Related

orm AGENTS.md compared with instructions from other repositories

orm AGENTS.md next to 6 instructions from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
orm AGENTS.mdprisma/ormInstructions file48kyesterdayApache-2.0A2,802Codex, OpenCode
vscode buildNext.instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA9,719GitHub Copilot
next.js AGENTS.mdvercel/next.jsInstructions file143ktodayMITA7,461Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA5,516GitHub Copilot
langchain AGENTS.mdlangchain-ai/langchainInstructions file149ktodayMITA4,680Codex, OpenCode
vscode copilot-instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA3,093GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harnessInstructions file274k2d agoMITA4,313Codex, OpenCode