summonpot: Instructions file for Codex

AGENTS.md

summonpot AGENTS.md is an instructions file for Codex, OpenCode from tugrulguner/summonpot. It costs 915 tokens per session, scanned A, original, MIT.

A development guide for Summonpot, a contract-first API framework. An endpoint declaration defines the request, intended goal, allowed capabilities, and response, acting as the agreement that implementations must follow.

In plain words
What is it for?
Use it when developing Summonpot itself or installing its endpoint contract for projects that use the framework.
Why use it?
It keeps endpoint behavior and validation in one explicit contract and prevents executors from adding permissions or changing responses.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md. Also seen: mentions AGENTS.md.

This is tugrulguner/summonpot's own configuration. It tells Codex and OpenCode how to work on summonpot itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything summonpot configures →

Reuse

Borrowing it

Nothing to install: this file belongs to tugrulguner/summonpot. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/tugrulguner/summonpot/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/tugrulguner/summonpot

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for summonpot AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/tugrulguner/summonpot/agents-md/github.svg)](https://agentmods.dev/instructions/tugrulguner/summonpot/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/tugrulguner/summonpot/agents-md"><img src="https://agentmods.dev/badge/instructions/tugrulguner/summonpot/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for summonpot AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/tugrulguner/summonpot/agents-md"><img src="https://agentmods.dev/badge/instructions/tugrulguner/summonpot/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 915 This file is loaded in full into every session.
When invoked 915 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00915 $0.00915
Opus 5.5 $0.00366 $0.00366
Sonnet 5.5 $0.00183 $0.00183
Haiku 4.5 $0.00092 $0.00092

Measured 1mo ago against content hash 8313b2fb6323, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

summonpot AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 105 lines

How it starts

The opening of the file, as written. The whole thing — 105 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md

Working notes for anyone — human or agent — changing summonpot.

For using summonpot, run summonpot add skills; that installs the endpoint contract as a skill. This file is about developing the framework itself.

What summonpot is

A contract-first API framework. An endpoint declaration is the executable contract:

request model + docstring goal + declared capabilities + response model

The ellipsis is a complete declaration body, not an unfinished implementation. The decorated declaration rejects direct calls. A Pydantic request endpoint executes directly when its sole operation is Required(..., calls=Exactly(1)), has at least one FromRequest binding, uses only request values or supported immutable callable defaults, and declares exactly the endpoint response model as its output. No model is resolved on that path, and execution never falls back to a model after starting. All other declarations retain the provider-neutral agent runtime; broader deterministic compilation remains planned.

Two invariants govern almost every design argument:

  1. The endpoint declaration is the whole contract. Anything that pushes configuration outside the endpoint declaration is moving in the wrong direction.
  2. No executor may add capabilities, weaken validation, or change the response contract.

Layout

src/summonpot/
  summon.py            @summon, registration and all registration-time guards
  runtime.py        the agent loop, model resolution, usage limits and timeout
  server.py         FastAPI route construction, request schemas, HTTP error mapping
  models.py         EndpointDef, ToolDef, ParamDef
  dependencies.py   Depends / Required
  tools.py          capability construction from callables
  _annotations.py   shared annotation resolution (used by summon.py and tools.py)
  cli.py            the summonpot command
  commands/         CLI subcommands
  skills/           the shipped agent skill, and per-agent formatting
  templates/skills/ the skill body itself

Read the full file on GitHub · 105 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago Changed · +3 lines · +57 tokens per session 8313b2fb6323
  2. 2mo ago First seen · 102 lines · 858 tokens per session scan A ec8b9759874d

Subscribe to this mod's changes

summonpot AGENTS.md is an instructions file published in the GitHub repository tugrulguner/summonpot (5 stars, last pushed today), licensed MIT. It adds 915 tokens to every session, about $0.0037 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other instructions, from other repositories

vscode buildNext.instructions.md

Working notes and architecture documentation for the new esbuild-based build system in build/next. Use when making changes to the new build pipeline (transpile/bundle commands, NLS plugin, source-map handling, resource copying, or self-hosting watch tasks).

microsoft/vscode · 9,715 tokens

next.js AGENTS.md

AGENTS.md instructions for vercel/next.js, covering next.js development guide, codebase structure, monorepo overview, core package: packages/next and other important packages.

vercel/next.js · 7,461 tokens

vscode oss-third-party-notices.instructions.md

Instructions for microsoft/vscode, covering vs code oss third-party-notices pipeline, architecture, pipeline flow in ci, cache eligibility and rollout and applying the notice (cutover).

microsoft/vscode · 5,262 tokens

langchain AGENTS.md

AGENTS.md instructions for langchain-ai/langchain, covering global development guidelines for the langchain monorepo, corridor security analysis, project architecture and context, monorepo structure and development tools & commands.

langchain-ai/langchain · 4,680 tokens

vscode copilot-instructions.md

Copilot instructions for microsoft/vscode, covering vs code copilot instructions, project overview, root folders, core architecture (src/ folder) and built-in extensions (extensions/ folder).

microsoft/vscode · 2,750 tokens

deno copilot-instructions.md

Copilot instructions for denoland/deno, covering deno development guide for github copilot, network access, high level overview, key directories and key files to understand first.

denoland/deno · 3,077 tokens