dev3000 AGENTS.md

Project instructions for vercel-labs/dev3000, a development tool with a local runtime, browser controls, and server and browser logs. They define the required local URLs, startup process, debugging commands, and development rules.

In plain words
What is it for?
Use them to develop, test, debug, or inspect the project's local and production workflows with d3k and its monitored browser.
Why use it?
They give coding agents one reliable way to run and inspect the project. This avoids using the wrong runtime, starting services before they are reachable, or missing browser and server errors.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/vercel-labs/dev3000/agents-md
Clone the repo
git clone --depth 1 https://github.com/vercel-labs/dev3000

Made for: Codex, OpenCode.

Per session 1,320 This file is loaded in full into every session.
When invoked 1,320 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.01320 $0.01320
Opus 5 $0.00660 $0.00660
Sonnet 5 $0.00264 $0.00264
Haiku 4.5 $0.00132 $0.00132

Measured yesterday against content hash 70f791423514, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

dev3000 AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 119 lines

How it starts

The opening of the file, as written. The whole thing — 119 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md

This file is the source of truth for agent guidance in this repo. CLAUDE.md is symlinked here.

Runtime

  • Use d3k as the default local runtime.
  • Canonical Portless HTTPS URLs are required by default and must be genuinely port-free (for example, https://my-app.localhost). Before starting d3k, run d3k portless status --json; if setup is required, run d3k portless setup, wait for the one-time administrator authorization, and verify Portless again. Do not start the app or browser until canonical Portless is ready unless the user explicitly requests --no-portless.
  • When the user asks to use, test, debug, or develop with d3k, start it in a retained background tool session. Do not make the user launch it or switch to the TUI.
  • Do not run bun run dev or bun run build for www/.
  • Start d3k with:
    d3k -t
    
  • Primary debugging commands:
    d3k status --json
    d3k errors --context
    d3k logs -n 200
    d3k logs --type browser
    d3k logs --type server
    
  • Drive the monitored browser with:
    d3k agent-browser snapshot -i
    d3k agent-browser click @e2
    
    The session's CDP port is auto-connected. To target a different session, run d3k agent-browser connect <port> first.

Local UI, Production Workflows

  • Local www/ is for the UI only.
  • Workflow execution, workflow orchestration, and sandbox activity must run in production, not in the local Next server.
  • On localhost, workflow API routes must proxy to production instead of starting workflows or managing sandboxes in-process.
  • When testing locally, treat localhost as a production-backed shell:
    • start runs from the local UI
    • let production own workflow startup, execution, retries, and completion
    • let production own sandbox creation, sandbox control, and sandbox logs
    • let report pages and runs pages read workflow state from production APIs or shared remote storage
  • Do not add new local-only workflow shortcuts, localhost-only workflow execution paths, or tmp-cache fallbacks unless the user explicitly asks for them.
  • Do not make localhost the source of truth for workflow state.
  • If local workflow storage is ever needed for debugging, gate it behind an explicit env var and keep it off by default.
  • If a workflow feature behaves differently locally than in production, prefer removing the local special case rather than extending it.

Read the full file on GitHub · 119 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 119 lines · 1,320 tokens per session scan A 70f791423514

Subscribe to this mod's changes

dev3000 AGENTS.md is an instructions file published in the GitHub repository vercel-labs/dev3000 (1,570 stars, last pushed 5d ago), licensed MIT. It adds 1,320 tokens to every session, about $0.0066 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.