WhyBuddy: Instructions file for Kiro

.kiro/steering/web-aigc-tools-and-agents-mainline-closure-2026-04-23.md

WhyBuddy web-aigc-tools-and-agents-mainline-closure-2026-04-23.md is an instructions file for Kiro from xiaojilele-glitch/WhyBuddy. It costs 1,056 tokens per session, scanned A, original, MIT.

A closure report for the system's tools-and-agents execution path. It records how different kinds of agents, skills, and internal APIs enter one dispatcher and share basic routing and audit information.

In plain words
What is it for?
Use it to check unified agent dispatch, skill and guest-agent execution routes, reusable internal API targets, and the minimum audit data carried through those calls.
Why use it?
Separate execution paths can drift into different rules and records. This report documents the work that brings them into one dispatch chain without claiming unverified completion.

Instructions file for Kiro

Written for Kiro: installed under .kiro/.

This is xiaojilele-glitch/WhyBuddy's own configuration. It tells Kiro how to work on WhyBuddy itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything WhyBuddy configures →

Reuse

Borrowing it

Nothing to install: this file belongs to xiaojilele-glitch/WhyBuddy. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/xiaojilele-glitch/WhyBuddy/main/.kiro/steering/web-aigc-tools-and-agents-mainline-closure-2026-04-23.md
Clone the repo
git clone --depth 1 https://github.com/xiaojilele-glitch/WhyBuddy

Made for: Kiro.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for WhyBuddy web-aigc-tools-and-agents-mainline-closure-2026-04-23.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/xiaojilele-glitch/whybuddy/web-aigc-tools-and-agents-mainline-closure-2026-04-23/github.svg)](https://agentmods.dev/instructions/xiaojilele-glitch/whybuddy/web-aigc-tools-and-agents-mainline-closure-2026-04-23)
Your own site
<a href="https://agentmods.dev/instructions/xiaojilele-glitch/whybuddy/web-aigc-tools-and-agents-mainline-closure-2026-04-23"><img src="https://agentmods.dev/badge/instructions/xiaojilele-glitch/whybuddy/web-aigc-tools-and-agents-mainline-closure-2026-04-23/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for WhyBuddy web-aigc-tools-and-agents-mainline-closure-2026-04-23.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/xiaojilele-glitch/whybuddy/web-aigc-tools-and-agents-mainline-closure-2026-04-23"><img src="https://agentmods.dev/badge/instructions/xiaojilele-glitch/whybuddy/web-aigc-tools-and-agents-mainline-closure-2026-04-23.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 1,056 This file is loaded in full into every session.
When invoked 1,056 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.01056 $0.01056
Opus 5.5 $0.00422 $0.00422
Sonnet 5.5 $0.00211 $0.00211
Haiku 4.5 $0.00106 $0.00106

Measured 1mo ago against content hash 639b154d87ff, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

WhyBuddy web-aigc-tools-and-agents-mainline-closure-2026-04-23.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.kiro/steering/web-aigc-tools-and-agents-mainline-closure-2026-04-23.md · 90 lines

How it starts

The opening of the file, as written. The whole thing — 90 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Web-AIGC Tools-and-Agents 主线收口纪要

更新时间

  • 日期:2026-04-23
  • 口径:仅记录当前主仓中已确认落地的 tools-and-agents 主线事实
  • 说明:本文不补写未经最终锁版确认的完成数、测试总数或跨车道结论

本轮收口结论

本轮 tools-and-agents 的重点,不是继续增加新的入口数量,而是把已经落地的入口、调度与审计语义收拢到同一条主线。当前可以确认,主仓已经形成“统一执行入口 + 统一路由分发 + 最小审计元数据闭环”的收口状态。

已确认成立的主线能力

1. auto-agent 已成为统一执行入口

/api/a2a/auto-agent 已支持以下执行类型:

  • agent
  • guest_agent
  • skill
  • internal_api
  • passthrough_api

这意味着 auto-agent 已不再只是单点能力,而是承担统一调度面的角色,用于承接多类 Web-AIGC 执行目标。

2. skills 与 guest-agents 已纳入同一 dispatch 链

当前主仓中的以下入口,均已通过 getAutoAgentExecutor().execute(...) 进入同一执行链路:

  • /api/skills/:id/execute
  • /api/agents/guest/:id/execute
  • /api/a2a/auto-agent

这说明本轮已经把 skills、guest-agents 与统一执行面打通,避免后续继续演化成多套互不对齐的调用模型。

3. internal_api 已形成最小可复用闭环

当前 internal_api 适配层已沉淀出可复用的目标标识与调用边界,至少覆盖以下主线能力:

  • mission.projection.get
  • mission.session.get
  • workflow.graph_instance_snapshot
  • aigc_monitoring.instances
  • aigc_monitoring.instance_detail
  • aigc_monitoring.session_detail
  • web_aigc.risk_action_catalog

这说明 internal_api 不再只是临时桥接,而是已经具备主仓级别的可复用目标目录与最小治理闭环。

Route 入口收紧结果

本轮可以确认的入口收紧重点如下:

  • 多个入口对 context、workflowId、stage、version、delegateAgentId、maxSkills、metadata 的透传口径已经对齐。
  • skills、guest-agents、a2a auto-agent 三条入口不再各自维护完全分裂的执行参数模型。
  • 当前主线重点已经从“再增加多少条 route”转向“已有 route 是否共享同一执行语义和治理语义”。

审计与可观测元数据收紧结果

当前可以保守确认的事实包括:

  • auto-agent 已围绕 kind、targetId、workflowId、delegatedAgent、targetLabel 等关键语义收紧元数据。
  • internal_api 已具备 permissionEngine、auditLogger 与 fallback 的最小闭环。
  • tools-and-agents 主线已经开始以统一元数据而不是零散日志的方式沉淀执行证据。

需要明确保留的边界如下:

  • 现阶段可以确认“最小审计元数据闭环成立”,但不宜表述为“全链路 observability 已一次性统一完成”。
  • 现阶段可以确认“统一执行入口已经收口”,但不宜表述为“所有后续节点都已自动接入同等深度的治理能力”。

本轮中文 docs/specs 同步口径

本轮文档同步建议统一使用以下中文表述:

  • auto-agent 已成为统一执行入口。
  • skills 与 guest-agents 已并入同一 dispatch 链。
  • internal_api 已形成最小可复用闭环。
  • 审计元数据已收紧,但最终完成数、测试总数、整体完成率仍待主线锁版后回填。

仍待后续主线继续推进的尾项

  • 把本轮已收紧的审计元数据进一步并入更统一的 runtime observability 口径。
  • 继续核对 tools-and-agents 相关节点与 platform 治理面的字段一致性。
  • 在最终锁版前统一回填进度 summary、SVG 和测试汇总数字。

Read the full file on GitHub · 90 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago First seen · 90 lines · 1,056 tokens per session scan A 639b154d87ff

Subscribe to this mod's changes

WhyBuddy web-aigc-tools-and-agents-mainline-closure-2026-04-23.md is an instructions file published in the GitHub repository xiaojilele-glitch/WhyBuddy (380 stars, last pushed 1mo ago), licensed MIT. It adds 1,056 tokens to every session, about $0.0042 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-23.

Related

WhyBuddy web-aigc-tools-and-agents-mainline-closure-2026-04-23.md compared with instructions from other repositories

WhyBuddy web-aigc-tools-and-agents-mainline-closure-2026-04-23.md next to 6 instructions from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
WhyBuddy web-aigc-tools-and-agents-mainline-closure-2026-04-23.mdxiaojilele-glitch/WhyBuddyInstructions file3801mo agoMITA1,056Kiro
vscode buildNext.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA9,719GitHub Copilot
next.js AGENTS.mdvercel/next.jsInstructions file143ktodayMITA7,461Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchainInstructions file149kyesterdayMITA4,680Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA5,516GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA3,093GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harnessInstructions file274k2d agoMITA4,313Codex, OpenCode