PatchBay: Instructions file for Codex

AGENTS.md

PatchBay AGENTS.md is an instructions file for Codex, OpenCode from velhud/PatchBay. It costs 1,543 tokens per session, scanned A, original, MIT.

A project guide for PatchBay, a service that connects ChatGPT or another compatible client with local Codex workers and workspaces. It explains the product's purpose, supported workflows, and rules for agents.

In plain words
What is it for?
Use it when working on PatchBay's local server, worker delegation, worktrees, handoff files, shared sessions, repository locks, or explicitly enabled editing tools.
Why use it?
It gives agents the context needed to describe and modify PatchBay accurately, including its broader role as a ChatGPT-to-local-Codex platform rather than only a maintainer tool.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md. Also seen: mentions AGENTS.md; mentions Codex.

This is velhud/PatchBay's own configuration. It tells Codex and OpenCode how to work on PatchBay itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything PatchBay configures →

Reuse

Borrowing it

Nothing to install: this file belongs to velhud/PatchBay. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/velhud/PatchBay/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/velhud/PatchBay

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for PatchBay AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/velhud/patchbay/agents-md/github.svg)](https://agentmods.dev/instructions/velhud/patchbay/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/velhud/patchbay/agents-md"><img src="https://agentmods.dev/badge/instructions/velhud/patchbay/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for PatchBay AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/velhud/patchbay/agents-md"><img src="https://agentmods.dev/badge/instructions/velhud/patchbay/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 1,543 This file is loaded in full into every session.
When invoked 1,543 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.01543 $0.01543
Opus 5.5 $0.00617 $0.00617
Sonnet 5.5 $0.00309 $0.00309
Haiku 4.5 $0.00154 $0.00154

Measured 16d ago against content hash 58bf24247ca3, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

PatchBay AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 16d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 98 lines

How it starts

The opening of the file, as written. The whole thing — 98 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md

Repository purpose and scope

PatchBay supports two complementary workflows:

  1. Manager/worker mode — ChatGPT Pro is the manager; local Codex workers investigate, implement, execute, review, and verify.
  2. Author Mode — ChatGPT Pro is the source author; PatchBay deterministically transports packages, validates paths and manifests, materializes isolated candidates, runs authorized checks, and returns evidence. Author Mode must not initialize or delegate to Codex workers.

This root file is manager/worker-first because most of the repository implements the MCP, worker, Hub, and Edge control planes. For all files under src/patchbay/authoring/ and tests/authoring/, the nested src/patchbay/authoring/AGENTS.md contract is authoritative where it is more specific.

Do not collapse the two workflows into one hidden routing layer. Shared Git/process/storage primitives may be reused, but implementation authority, startup, state, tools, and recovery boundaries must remain explicit.

Current model policy

Every delegated worker MUST explicitly use model='gpt-6-luna' with reasoning_effort='high' by default; xhigh or max is allowed. No other model family, older Luna, ambient default, fallback, or escalation is permitted. If Luna is unavailable, report the blocker. Apply this same rule to nested helpers and every handoff. The primary manager is separate from delegated workers; Author Mode has no delegated author or recovery worker.

Core engineering rules

  • Do not add secrets, tokens, private paths, or machine identifiers.
  • Preserve localhost-first and authenticated-public-access defaults.
  • Keep read-only orientation available. Mark every mutating/destructive tool accurately.
  • Validate repository paths, package paths, export destinations, object identities, and manifest inputs before side effects.
  • Do not weaken package-path validation, maintenance locking, lease checks, unknown-execution fencing, supervisor-launch handling, JSON-RPC validation, safe exports, or honest CLI exit codes.
  • Public evidence must stay bounded and sanitized. Private instance identity must not leak through qualification responses.
  • Update code, schemas, tests, prompt surfaces, README/quickstart, and testing instructions together when public behavior changes.

Read the full file on GitHub · 98 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 16d ago Changed · -67 lines · -2,330 tokens per session 58bf24247ca3
  2. 2mo ago First seen · 165 lines · 3,873 tokens per session scan A d36478ba052e

Subscribe to this mod's changes

PatchBay AGENTS.md is an instructions file published in the GitHub repository velhud/PatchBay (5 stars, last pushed 12d ago), licensed MIT. It adds 1,543 tokens to every session, about $0.0062 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

PatchBay AGENTS.md compared with instructions from other repositories

PatchBay AGENTS.md next to 6 instructions from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
PatchBay AGENTS.mdvelhud/PatchBayInstructions file512d agoMITA1,543Codex, OpenCode
vscode buildNext.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA9,719GitHub Copilot
next.js AGENTS.mdvercel/next.jsInstructions file143kyesterdayMITA7,461Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchainInstructions file149kyesterdayMITA4,680Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA5,516GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA3,093GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harnessInstructions file274k2d agoMITA4,313Codex, OpenCode