Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/steipete/codexbar/agents-mdgit clone --depth 1 https://github.com/steipete/CodexBarWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.01449 | $0.01449 |
| Opus 5 | $0.00724 | $0.00724 |
| Sonnet 5 | $0.00290 | $0.00290 |
| Haiku 4.5 | $0.00145 | $0.00145 |
Grade A, and why
CodexBar AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 49 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Repository Guidelines
Project Structure & Modules
Sources/CodexBar: Swift 6 menu bar app (usage/credits probes, icon renderer, settings). Keep changes small and reuse existing helpers.Tests/CodexBarTests: XCTest coverage for usage parsing, status probes, icon patterns; mirror new logic with focused tests.Scripts: build/package helpers (package_app.sh,sign-and-notarize.sh,make_appcast.sh,build_icon.sh,compile_and_run.sh). Release wrappers callScripts/mac-release, which resolvesMAC_RELEASE_TOOLor the sharedagent-scriptscheckout.docs: release notes and process (docs/RELEASING.md, screenshots). Root-level zips/appcast are generated artifacts—avoid editing except during releases.
Build, Test, Run
- Dev loop:
./Scripts/compile_and_run.shkills old instances, builds, packages, relaunchesCodexBar.app, and confirms it stays running; add--testfor the sharded full suite. - Quick build/test:
swift build(debug) orswift build -c release;make testfor the sharded full suite. - Package locally:
./Scripts/package_app.shto refreshCodexBar.app, then restart withpkill -x CodexBar || pkill -f CodexBar.app || true; cd /Users/steipete/Projects/codexbar && open -n /Users/steipete/Projects/codexbar/CodexBar.app. - Release flow:
./Scripts/release.sh; app metadata lives in.mac-release.env, repo build/signing stays inScripts/sign-and-notarize.sh, and validation steps live indocs/RELEASING.md.
Coding Style & Naming
- Enforce SwiftFormat/SwiftLint: run
swiftformat Sources Testsandswiftlint --strict. 4-space indent, 120-char lines, explicitselfis intentional—do not remove. - Favor small, typed structs/enums; maintain existing
MARKorganization. Use descriptive symbols; match current commit tone.
Testing Guidelines
- Add/extend XCTest cases under
Tests/CodexBarTests/*Tests.swift(FeatureNameTestswithtest_caseDescriptionmethods). - Swift Testing: prefer backticked sentence names; no camelCase.
- Model names in tests/code: released models or clearly fictitious names only; never expose unreleased names.
- Always run
make testbefore handoff; add focusedswift test --filter ...runs for parser/provider fixes when possible. - After any code change, run
make checkand fix all reported format/lint issues before handoff. - Prefer CLI/focused tests over app-bundle live tests when behavior can be verified without relaunching CodexBar.
- Never run tests/checks or ad-hoc validation that can display macOS Keychain prompts. Live provider probes, browser-cookie imports,
codexbar usageagainst real accounts, and real SecItem reads must be explicitly requested; otherwise use parser tests, stubs, test stores, orKeychainNoUIQuery. - macOS CI is brittle around headless AppKit status/menu tests. Prefer covering menu behavior through stable state/model seams (
MenuDescriptor,ProvidersPane,CodexAccountsSectionState, etc.) instead of constructing liveNSStatusBar/NSMenuflows unless the AppKit wiring itself is the thing under test.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 49 lines · 1,449 tokens per session scan A 61c870bb0b15
CodexBar AGENTS.md is an instructions file published in the GitHub repository steipete/CodexBar (20,730 stars, last pushed 2d ago), licensed MIT. It adds 1,449 tokens to every session, about $0.0072 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other instructions, from other repositories
Peekaboo AGENTS.md
AGENTS.md instructions for openclaw/Peekaboo, covering repository guidelines, start here, project structure & modules, build, test, and development commands and coding style & naming conventions.
Swift-Concurrency-Agent-Skill copilot-instructions.md
Instructions for AvdLee/Swift-Concurrency-Agent-Skill, covering github copilot instructions: agent skills expert, core agent skills principles, format compliance, skill content organization and review focus areas.
MarkdownView AGENTS.md
Instructions for keitaoouchi/MarkdownView, covering agents, technical components, relationships (data/event flow overview), extension points (overview) and platform / distribution.
liney AGENTS.md
Instructions for everettjf/liney, covering liney repository collaboration guide, 交流语言 / communication language, project overview, repository layout and build and test.
skills-manager CLAUDE.md
Instructions for yibie/skills-manager, covering skills manager - development guide, tui engine: blessed, 核心原则, 参考文档 and 正确的 list 用法.
swift-secp256k1 AGENTS.md
Instructions for 21-DOT-DEV/swift-secp256k1, covering agents.md (swift-secp256k1), commands, non-obvious patterns, code style and boundaries.