Timoni is a Kubernetes package manager that uses CUE to define, validate, package, and deliver applications to Kubernetes clusters. It is intended for people authoring and deploying Kubernetes applications through reusable modules, bundles, and instances. Its catalogue add-ons include an MCP server, skill, and instruction for working with Timoni.
Borrowing it
Nothing to install: this file belongs to stefanprodan/timoni. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/stefanprodan/timoni/main/AGENTS.mdgit clone --depth 1 https://github.com/stefanprodan/timoniWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/stefanprodan/timoni/agents-md)<a href="https://agentmods.dev/instructions/stefanprodan/timoni/agents-md"><img src="https://agentmods.dev/badge/instructions/stefanprodan/timoni/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/stefanprodan/timoni/agents-md"><img src="https://agentmods.dev/badge/instructions/stefanprodan/timoni/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.03663 | $0.03663 |
| Opus 5.5 | $0.01465 | $0.01465 |
| Sonnet 5.5 | $0.00733 | $0.00733 |
| Haiku 4.5 | $0.00366 | $0.00366 |
Grade A, and why
timoni AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 127 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md
High-signal onboarding for AI coding agents working in Timoni.
What Timoni is
Timoni is a package manager for Kubernetes powered by CUE, inspired by Helm. Apps are defined as Modules (type-safe CUE templates + config schema, distributed as OCI artifacts), deployed as Instances (a module rendered with values and applied to a cluster), and composed via Bundles (multiple instances declared together). Helm analogy: module ≈ chart, bundle ≈ umbrella chart, instance ≈ release. A Runtime is the environment a bundle is applied into: it defines the target clusters and the values fetched live from cluster resources (Secrets/ConfigMaps) for injection into bundles.
Common commands
make build # Build ./bin/timoni (CGO_ENABLED=0)
make test # tidy + generate + fmt + vet + lint + run all Go tests with Kubernetes envtest
make generate # Regenerate api/v1alpha1/zz_generated.deepcopy.go via controller-gen
make cue-vet # cue fmt + cue vet schemas, and `timoni mod vet` the example/blueprint/testdata modules
make docgen # Regenerate docs/cmd/*.mdx from the cobra commands via `timoni docgen`
Run a single test:
go test ./cmd/timoni/... -run TestApply -v
make testis the canonical pre-commit gate; it runsgo mod tidy, code generation, fmt, vet and golangci-lint before testing, so a cleanmake testimplies all of those pass.- Tests in
cmd/timoniand packages that talk to the API server require envtest (make install-envtestdownloads the Kubernetes test binaries into./bin). - After changing CUE schemas or example modules, run
make cue-vet. The blueprint, example and testdata modules vendor the canonicalschemas/timoni.sh/core/v1alpha1package as relative symlinks undercue.mod/pkg, so schema changes propagate without a sync step. After changing types inapi/v1alpha1, runmake generate.
Architecture
The data flow for an apply (install/upgrade) is: fetch module → build CUE → render K8s objects → reconcile onto cluster → record inventory. Trace it through these layers:
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago Changed · +4 lines · +291 tokens per session 26d6d96b00f5
- 2mo ago First seen · 123 lines · 3,372 tokens per session scan A 435fa4242127
timoni AGENTS.md is an instructions file published in the GitHub repository stefanprodan/timoni (2,022 stars, last pushed 7d ago), licensed Apache-2.0. It adds 3,663 tokens to every session, about $0.0147 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
timoni AGENTS.md compared with instructions from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| timoni AGENTS.mdstefanprodan/timoni | Instructions file | 2.0k | 7d ago | Apache-2.0 | A | 3,663 | Codex, OpenCode |
| vscode buildNext.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 9,719 | GitHub Copilot |
| next.js AGENTS.mdvercel/next.js | Instructions file | 143k | today | MIT | A | 7,461 | Codex, OpenCode |
| langchain AGENTS.mdlangchain-ai/langchain | Instructions file | 149k | today | MIT | A | 4,680 | Codex, OpenCode |
| vscode oss-third-party-notices.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 5,516 | GitHub Copilot |
| vscode copilot-instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 3,093 | GitHub Copilot |
| deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness | Instructions file | 274k | 2d ago | MIT | A | 4,313 | Codex, OpenCode |