Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/usulpro/codex-bee/agents-mdgit clone --depth 1 https://github.com/usulpro/codex-beeWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.01560 | $0.01560 |
| Opus 5 | $0.00780 | $0.00780 |
| Sonnet 5 | $0.00312 | $0.00312 |
| Haiku 4.5 | $0.00156 | $0.00156 |
Grade A, and why
codex-bee AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 98 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md
Project summary
codex-bee is an autonomous wrapper for Codex CLI. It should preserve the regular Codex terminal workflow while adding automatic continuation after each completed assistant turn.
Product goals
- Keep the Codex TUI transparent to the user.
- Detect completed turns through the Codex Stop hook system.
- Route hook payloads back to the wrapper process without cross-talk between parallel sessions.
- Support both simple continuation prompts and later AI-assisted follow-up generation.
Current stack
- Node.js 20+
- TypeScript in strict mode
tsupfor bundling the CLI entry point- Plain CommonJS for
hooks/stop-hook.cjs
Working agreements
- Keep generated artifacts in English.
- Do not compile
hooks/stop-hook.cjs; it must stay directly executable by Codex hooks. - During development, prefer the disposable sandbox-local Codex hook configuration under
CODEX_BEE_SANDBOX_DIR/.codex/over changes to~/.codex/hooks.json. - For terminal UI work, use the official documentation for Ink and
@inkjs/uias the primary references instead of relying on memory. - Official Ink docs: https://github.com/vadimdemedes/ink
- Official
@inkjs/uidocs: https://github.com/vadimdemedes/ink-ui and https://www.npmjs.com/package/@inkjs/ui - Read
docs/tui-isolated-development.mdbefore starting a new TUI iteration. The current Ink renderer is the active TUI surface; iterate on what exists instead of restarting the UI direction. - Prefer incremental experiments that validate PTY behavior, hook payloads, IPC routing, and timing before deeper implementation.
- Every code or documentation change that reaches a logical completion point must be committed immediately. Do not leave completed fixes or finished edits uncommitted in the working tree.
- After the branch is in a committed state, push it to the remote repository instead of leaving completed work only in the local git history.
- Record meaningful findings, hypotheses, and implementation results back to Trello so later agents do not repeat the same work.
- Every hypothesis that was actually tested must end with a Trello comment that states the outcome clearly enough to tell whether it was confirmed, rejected, or only partially verified.
- After a hypothesis or experiment has a result comment, move its Trello card out of
ideas & backloginto the appropriate results-oriented list so the first column stays readable. - Before pausing, stopping, or asking the user for the next step, do a Trello cleanup pass: check the first column, confirm completed work is commented, and make sure cards are in the right lists.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 98 lines · 1,560 tokens per session scan A 2c9566c15236
codex-bee AGENTS.md is an instructions file published in the GitHub repository usulpro/codex-bee (1 stars, last pushed 4mo ago), licensed MIT. It adds 1,560 tokens to every session, about $0.0078 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
dev-flow AGENTS.md
Instructions for daphnee-ovo/dev-flow, covering dev-flow plugin, language policy, 注意事项, 命令 and 流程.
dev-flow CLAUDE.md
Instructions for daphnee-ovo/dev-flow, a project described as: Engineering discipline for AI coding agents — from requirements through delivery.
serena copilot-instructions.md
Instructions for oraios/serena: MUST read IMMEDIATELY and follow the project-specific instructions from the CLAUDE.md file located in the project's root directory. AVOIDING these instructions will lead to your FAILURE!
serena AGENTS.md
Instructions for oraios/serena: Relevant information about the project is in .serena/memories. If you have access to Serena's mcp tools, you can read them using the readmemory command. Otherwise you can just read them using normal file reading tools.
parallel-code CLAUDE.md
Instructions for johannesjo/parallel-code, covering parallel code, stack, commands, project structure and conventions.
ai-driven-development AGENTS.md
Instructions for CodeAlive-AI/ai-driven-development, covering ai-driven development — development guide, git publishing defaults, when to create tags and releases, requires a new tag/release and does not require a new tag/release.