node-sdk: Instructions file for Codex

AGENTS.md

node-sdk AGENTS.md is an instructions file for Codex, OpenCode from transloadit/node-sdk. It costs 3,418 tokens per session, scanned A, original, MIT.

Repository guidance for the Transloadit Node SDK, covering JavaScript and TypeScript style, general practices, Playwright and related code choices.

In plain words
What is it for?
Use it when writing or reviewing code in the Transloadit Node SDK, particularly its TypeScript, JavaScript and browser-testing code.
Why use it?
It gives contributors consistent rules for imports, exports, asynchronous methods, error handling, file paths and lint exceptions.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md. Also seen: mentions CLAUDE.md; mentions Claude Code; mentions AGENTS.md.

This is transloadit/node-sdk's own configuration. It tells Codex and OpenCode how to work on node-sdk itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything node-sdk configures →

Reuse

Borrowing it

Nothing to install: this file belongs to transloadit/node-sdk. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/transloadit/node-sdk/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/transloadit/node-sdk

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for node-sdk AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/transloadit/node-sdk/agents-md/github.svg)](https://agentmods.dev/instructions/transloadit/node-sdk/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/transloadit/node-sdk/agents-md"><img src="https://agentmods.dev/badge/instructions/transloadit/node-sdk/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for node-sdk AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/transloadit/node-sdk/agents-md"><img src="https://agentmods.dev/badge/instructions/transloadit/node-sdk/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 3,418 This file is loaded in full into every session.
When invoked 3,418 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.03418 $0.03418
Opus 5.5 $0.01367 $0.01367
Sonnet 5.5 $0.00684 $0.00684
Haiku 4.5 $0.00342 $0.00342

Measured 9d ago against content hash c5a47bd611f1, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

node-sdk AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 199 lines

How it starts

The opening of the file, as written. The whole thing — 199 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Transloadit Repository Guide

coding style

Coding style:

  • Favor async run() { over run = async () => { inside ES6 classes
  • Favor if (!(err instanceof Error)) { throw new Error(Was thrown a non-error: ${err}) } inside catch blocks to ensure the error is always an instance of Error
  • Favor using real paths (../lib/schemas.ts) over aliases (@/app/lib/schemas).
  • Favor for (const comment of comments) { over comments.forEach((comment) => {
  • Favor named exports over default exports, with the exception of Next.js pages
  • Avoid namespace * imports unless the API is intentionally consumed as a namespace. Prefer named imports so usage is explicit and bundlers can optimize.
  • Avoid broad file-level lint suppressions. Prefer the narrowest scoped suppression on the exact line, with a reason when the exception is not obvious.
  • Preserve existing dependency import paths and module-system interop unless the change is required and explained. Do not rewrite package imports to node_modules/..., switch ESM/CJS shapes, or add duplicate export styles just to satisfy local tooling.
  • Do not wrap each function body and function call in try/catch blocks. It pollutes the code. Assume we will always have an e.g. main().catch((err) => { console.error(err); process.exit(1) }) to catch us. I repeat: Avoid over-use of try-catch such as try { // foo } catch (err) { console.error('error while foo'); throw err }, assume we catch errors on a higher level and do not need the extra explananation.
  • If you must use try/catch, for simple cases, favor alphalib/tryCatch.ts (const [err, data] = await tryCatch(promise)) over let data; try { data = await promise } catch (err) { }
  • Before creating new files and new code, see if we can leverage existing work, maybe slighty adapt that without breaking BC, to keep things DRY.
  • Favor early exits, so quickly continue, return false (or throw if needed), over nesting everything in positive conditions, creating christmas trees.
  • Use Prettier with 100 char line width, single quotes for JS/TS, semi: false
  • Use descriptive names: PascalCase for components/types, camelCase for variables/methods/schemas
  • Alphabetize imports, group by source type (built-in/external/internal)
  • Preserve existing sorted lists and config ordering unless intentionally changing the order.
  • Write code in English: identifiers, file names, comments, log and error messages, and operator-facing CLI output. Text written for a specific audience, such as customer messages, templates and translated UI copy, stays in that audience's language. Existing non-English code needs no rename for its own sake, but new code and comments are English, and code is translated before it moves into shared code such as alphalib.
  • Favor US English over UK English, so summarizeError over summarise Error
  • Favor .replaceAll('a', 'b) over .replace(/a/g, 'b') or .replace(new RegExp('a', 'g'), 'b') when the only need for regeses was replacing all strings. That's usually both easier to read and more performant.
  • Use typographic characters: ellipsis (…) instead of ..., curly quotes (' ") instead of straight quotes in user-facing text
  • Generated text files should end with a trailing newline. Do not trim serializer output when the serializer intentionally emits POSIX-style text.
  • Comments should explain why code exists or why an exception is needed, not narrate what the next line already says.
  • Use JSDoc block comments for exported constants, functions, classes, and types when documenting their purpose or contract. Use regular line comments for local quirks, reasoning, or exceptions.
  • Do not put TODOs, internal implementation notes, or future-work placeholders in user-facing text or schema descriptions. Put those in code comments, issues, or docs for maintainers instead.
  • Put API keys and secrets in .env files, not hardcoded in components
  • Do not return raw errors, stack traces, third-party responses, payment objects, database errors, or credential data to clients. Show sanitized user-facing messages and log only redacted diagnostic details server-side.
  • When wrapping or rethrowing an error, preserve the original value with new Error(message, { cause: error }) when possible instead of stringifying it away.
  • Remove temporary debug logging/instrumentation before merge. Keep new logs only when they are intentional, useful in production, and do not expose sensitive data.
  • Check for existing hooks before creating new ones (e.g., useUppy() for Uppy functionality)

Read the full file on GitHub · 199 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 9d ago Changed · +3 lines · +51 tokens per session c5a47bd611f1
  2. 21d ago Changed · +5 lines · +86 tokens per session a3e8da7c9161
  3. 1mo ago Changed · +6 lines · +67 tokens per session ea85aa84fb47
  4. 1mo ago Changed · +22 lines · +321 tokens per session 06ca6822ee46
  5. 2mo ago First seen · 163 lines · 2,893 tokens per session scan A 43f465cb2f49

Subscribe to this mod's changes

node-sdk AGENTS.md is an instructions file published in the GitHub repository transloadit/node-sdk (73 stars, last pushed 2d ago), licensed MIT. It adds 3,418 tokens to every session, about $0.0137 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

Other instructions, from other repositories

vscode buildNext.instructions.md

Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).

microsoft/vscode · 9,715 tokens

next.js AGENTS.md

AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.

vercel/next.js · 7,461 tokens

vscode oss-third-party-notices.instructions.md

Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).

microsoft/vscode · 5,262 tokens

langchain AGENTS.md

AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.

langchain-ai/langchain · 4,680 tokens

vscode copilot-instructions.md

Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).

microsoft/vscode · 2,750 tokens

deno copilot-instructions.md

Copilot instructions for denoland/deno, covering deno development guide for github copilot, network access, high level overview, key directories and key files to understand first.

denoland/deno · 3,077 tokens