StitchAPI CLAUDE.md

StitchAPI CLAUDE.md is an instructions file for coding agents from rejifald/StitchAPI. It costs 738 tokens per session, scanned A, original, Apache-2.0.

A set of working rules for changing the StitchAPI code repository. It requires edits to happen in a separate Git worktree, which is an independent checkout of the code, and explains how dependencies and documentation tools are handled.

In plain words
What is it for?
Use it when working on StitchAPI code, especially before editing files, installing dependencies in a new worktree, or preparing a change for the main branch.
Why use it?
It reduces the risk of changing the main checkout directly. It also gives contributors a consistent process for installing packages and opening changes for review.

Instructions file

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/rejifald/stitchapi/claude-md
Clone the repo
git clone --depth 1 https://github.com/rejifald/StitchAPI

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for StitchAPI CLAUDE.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/rejifald/stitchapi/claude-md.svg)](https://agentmods.dev/instructions/rejifald/stitchapi/claude-md)
Your own site
<a href="https://agentmods.dev/instructions/rejifald/stitchapi/claude-md"><img src="https://agentmods.dev/badge/instructions/rejifald/stitchapi/claude-md.svg" alt="Measured on agentmods" height="20"></a>
Per session 738 This file is loaded in full into every session.
When invoked 738 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00738 $0.00738
Opus 5 $0.00369 $0.00369
Sonnet 5 $0.00148 $0.00148
Haiku 4.5 $0.00074 $0.00074

Measured 5d ago against content hash e459e5575057, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

StitchAPI CLAUDE.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

CLAUDE.md · 60 lines

How it starts

The opening of the file, as written. The whole thing — 60 lines — stays where its author put it; the contents beside it link to each section on GitHub.

StitchAPI — working agreement for Claude

Edit in a fresh worktree off main

Before writing or editing any file in this repository, call EnterWorktree first so the session works in a fresh git worktree branched from main. Do not edit the primary checkout directly.

  • EnterWorktree uses the fresh base ref (configured in .claude/settings.json), so every worktree branches from origin/main — the repository's default branch.
  • Enter the worktree once per session, before the first edit. All edits and the working branch live there.
  • main is the default target branch: open the resulting PR against main.
  • Exception: small edits to repo configuration (.claude/, CLAUDE.md, or memory files) may be made in the primary checkout directly — bootstrapping the worktree rule from inside a worktree isn't worth the friction.

node_modules in a fresh worktree

A fresh worktree has no node_modules (it's gitignored). This is handled automatically: a hook in .claude/settings.json runs pnpm install --frozen-lockfile --prefer-offline the moment an EnterWorktree worktree is created. The global pnpm store (~/Library/pnpm/store) is shared across all checkouts, so it's fully offline and fast (~5–7s — nothing is re-downloaded; file content is hardlinked). It creates the per-package node_modules the pnpm workspace needs and runs lefthook install so the worktree's git hooks are wired up.

If you ever land in a worktree without deps (e.g. the hook was disabled), run that same command by hand. Don't symlink node_modules into the worktree — pnpm would write through the symlink into the primary checkout's store. A real pnpm install is the correct fix.

Using the StitchAPI docs MCP

This repo ships the stitchapi-docs MCP server preconfigured in .mcp.json — the local, offline @stitchapi/docs-mcp package, which answers from a docs bundle on your machine (no per-query network; a one-time embedding-model download on first use). For any question about StitchAPI's own public API, configuration, errors, or runtime behavior, use it before answering:

Read the full file on GitHub · 60 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 5d ago First seen · 60 lines · 738 tokens per session scan A e459e5575057

Subscribe to this mod's changes

StitchAPI CLAUDE.md is an instructions file published in the GitHub repository rejifald/StitchAPI (18 stars, last pushed today), licensed Apache-2.0. It adds 738 tokens to every session, about $0.0037 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.