veryfront-code: Instructions file for Codex

AGENTS.md

veryfront-code AGENTS.md is an instructions file for Codex, OpenCode from veryfront/veryfront-code. It costs 4,626 tokens per session, scanned A, original, Apache-2.0.

Project instructions for Veryfront Code, a Deno-based framework and runtime for servers, web rendering, agents, workflows, tasks, and MCP support.

In plain words
What is it for?
They guide implementation and maintenance of Veryfront APIs, runtime behavior, server-side rendering, agent and workflow features, MCP support, and command-line tools.
Why use it?
They help keep changes small and compatible by requiring code evidence, focused tests, reuse of existing parts, and updates to public documentation when behavior changes.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md. Also seen: reads .claude/ paths; mentions AGENTS.md.

This is veryfront/veryfront-code's own configuration. It tells Codex and OpenCode how to work on veryfront-code itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything veryfront-code configures →

Reuse

Borrowing it

Nothing to install: this file belongs to veryfront/veryfront-code. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/veryfront/veryfront-code/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/veryfront/veryfront-code

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for veryfront-code AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/veryfront/veryfront-code/agents-md/github.svg)](https://agentmods.dev/instructions/veryfront/veryfront-code/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/veryfront/veryfront-code/agents-md"><img src="https://agentmods.dev/badge/instructions/veryfront/veryfront-code/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for veryfront-code AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/veryfront/veryfront-code/agents-md"><img src="https://agentmods.dev/badge/instructions/veryfront/veryfront-code/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 4,626 This file is loaded in full into every session.
When invoked 4,626 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.04626 $0.04626
Opus 5.5 $0.01850 $0.01850
Sonnet 5.5 $0.00925 $0.00925
Haiku 4.5 $0.00463 $0.00463

Measured 22d ago against content hash bbae83a27727, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

veryfront-code AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 22d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 410 lines

How it starts

The opening of the file, as written. The whole thing — 410 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Veryfront code agent guide

This guide governs veryfront-code/. Deeper AGENTS.md files override it for their subtrees. The cli/ subtree has its own guide at cli/AGENTS.md and that guide is the narrower authority for CLI command work.

Veryfront Code is the Deno-first framework and runtime package for Veryfront. It contains the public veryfront/* APIs, the runtime server, SSR/RSC support, agent and workflow primitives, runs, tasks, MCP support, and CLI entrypoints.

Default working style

  • Prefer the smallest viable diff.
  • Preserve public API compatibility unless the task explicitly asks for a breaking change.
  • For behavior changes, add or update a focused failing test before changing implementation.
  • Reuse existing modules, schemas, adapters, and error patterns before adding new abstractions.
  • Keep public behavior grounded in code evidence, generated types, and tests.
  • Update docs, examples, generated references, and command help when public behavior changes.
  • Do not rename, move, or refactor unrelated code.
  • Do not add dependencies unless the task explicitly requires them.

Code Review Rules

  • Review the complete branch diff against its base. Identify the changed invariants, then inspect every affected caller and sibling path, including failure paths, cache readers/writers and invalidation. Use rg to check coverage beyond the changed lines.
  • Before reporting a defect, check other occurrences of the same root cause. Group those occurrences in one finding with the affected paths, a concrete trigger and consequence, and regression evidence where available. Do not stop investigating after the first occurrence.
  • Distinguish actionable regressions and merge blockers from optional improvements. When revisiting feedback, verify the fix across its affected paths; report a recurring defect only with concrete evidence that it remains or a distinct path that the fix missed.

Fixing Review Findings

  • Diagnose the violated invariant before patching a reported line. Search all callers and sibling paths and fix the same root cause throughout the affected area in one batch.
  • Add or update regression tests for the affected behavior, including existing callers and failure paths. Demonstrate that a regression test fails without the fix and passes with it.
  • Keep pull requests draft while implementing a feedback batch. Complete the related fixes, run the repository's narrow affected checks (such as deno task test:file), and satisfy the required local reviews before pushing the batch and requesting the next GitHub review. Use a local command wrapper when the workspace requires one. Preserve all required review and CI gates.
  • If another review finds the same violated invariant on a sibling path, reassess its ownership boundary and complete the caller sweep before requesting another review.

Read the full file on GitHub · 410 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 22d ago Changed · +25 lines · +343 tokens per session bbae83a27727
  2. 1mo ago Changed · +2 lines · +68 tokens per session ff420ecf3ae2
  3. 1mo ago Changed · +28 lines · +316 tokens per session a8803209685d
  4. 1mo ago Changed · +10 lines · +152 tokens per session 548780d8ebeb
  5. 2mo ago Changed · +3 lines · +55 tokens per session 75c5fe96e35f
  6. 2mo ago First seen · 342 lines · 3,692 tokens per session scan A 64ca2357cf7e

Subscribe to this mod's changes

veryfront-code AGENTS.md is an instructions file published in the GitHub repository veryfront/veryfront-code (20 stars, last pushed yesterday), licensed Apache-2.0. It adds 4,626 tokens to every session, about $0.0185 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

veryfront-code AGENTS.md compared with instructions from other repositories

veryfront-code AGENTS.md next to 6 instructions from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
veryfront-code AGENTS.mdveryfront/veryfront-codeInstructions file20yesterdayApache-2.0A4,626Codex, OpenCode
vscode buildNext.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA9,719GitHub Copilot
next.js AGENTS.mdvercel/next.jsInstructions file143ktodayMITA7,461Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchainInstructions file149kyesterdayMITA4,680Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA5,516GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA3,093GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harnessInstructions file274k2d agoMITA4,313Codex, OpenCode