ava AGENTS.md

ava AGENTS.md is an instructions file for Codex, OpenCode from yutakobayashidev/ava. It costs 2,217 tokens per session, scanned A, original, MIT.

Project-specific instructions for working on the Ava codebase, an application that combines task tracking, Slack notifications, authentication, and an API server. It describes the project’s structure, security requirements, and development workflow.

In plain words
What is it for?
Use it when changing Ava’s Next.js, Hono, PostgreSQL, Slack, OAuth, authentication, or MCP server code.
Why use it?
It gives a coding agent the repository context needed to make changes that fit the existing architecture and authorization rules.

Instructions file for CodexOpenCode

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add instructions/yutakobayashidev/ava/agents-md
Clone the repo
git clone --depth 1 https://github.com/yutakobayashidev/ava

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for ava AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/yutakobayashidev/ava/agents-md.svg)](https://agentmods.dev/instructions/yutakobayashidev/ava/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/yutakobayashidev/ava/agents-md"><img src="https://agentmods.dev/badge/instructions/yutakobayashidev/ava/agents-md.svg" alt="Measured on agentmods" height="20"></a>
Per session 2,217 This file is loaded in full into every session.
When invoked 2,217 The same file — it is already loaded in full.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.02217 $0.02217
Opus 5 $0.01108 $0.01108
Sonnet 5 $0.00443 $0.00443
Haiku 4.5 $0.00222 $0.00222

Measured 5d ago against content hash 402270cc68be, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-05, from the pricing page.

Security

Grade A, and why

ava AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 192 lines

How it starts

The opening of the file, as written. The whole thing — 192 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md

作業の開始時にやること

  • ユーザーに新しいタスクを要求されたら、必ずプログレスマネージャーであるavaのスキルをロードすること
  • issue番号が提示されたらGitHub CLIでそれを参照すること

Mission

進捗の共有やチームとのコミュニケーションが苦手な人でも、 AI が自動で外部化と情報共有を手伝ってくれる世界をつくる。

  • ハイパーフォーカスでも黙り込んでも信頼が落ちない
  • プロセスごと公平に評価される
  • チームは透明性に支えられる
  • マイクロマネジメントが不要になる

現在の構成

  • Next.js 16 + Hono でアプリと API を統合。PostgreSQL は Drizzle で管理。
  • Slack OpenID でログイン、別フローでワークスペースにボットをインストールし通知先チャンネルを保存。
  • /mcp に HTTP で公開する MCP サーバ(ava-mcp)。タスク情報は DB に保持し、Slack にはサマリのみ投稿。
  • Slack slash command /daily-report で本日のタスクを LLM 要約し、実行ユーザーのみに ephemeral message で表示(OPENAI_API_KEY が必要)。

MCP サーバ / 認可

  • エンドポイント: POST/GET /mcp(Hono でハンドル、HTTP/SSE)。
  • 認可: OAuth 2.1 + PKCE。Authorization: Bearer <access_token> が必須。
    • 認可エンドポイント: /oauth/authorize(Next.js page)
    • トークンエンドポイント: /api/oauth/token
    • 動的クライアント登録: /api/oauth/register
    • メタデータ: /.well-known/oauth-authorization-server / /.well-known/oauth-protected-resource
  • アクセストークンは DB(access_tokens)に保存し、期限切れは拒否。

ルーティング構成

  • /mcp - MCP サーバー(Hono、単独ルート)
  • /api/* - その他の API エンドポイント(Hono、catch-all ルート)
    • /api/oauth/* - OAuth 関連
    • /api/auth/* - 認証フロー
    • /api/slack/* - Slack 連携
    • /api/health - ヘルスチェック
  • その他 - Next.js App Router(page.tsx、not-found.tsx など)

利用できる MCP Tools

  • start_task
    • 入力: issue.provider ("github" | "manual"), issue.id?, issue.title, initial_summary
    • 動作: task_sessions を作成。Slack 設定済みなら新規スレッドに開始報告を投稿し、スレッド情報を保存。
  • update_task
    • 入力: task_session_id, summary, raw_context?
    • 動作: ステータスを in_progress に戻し、未解決のブロッキング・休止を解消。task_updates に保存し、Slack スレッドへ進捗を投稿。
  • report_blocked
    • 入力: task_session_id, reason, raw_context?
    • 動作: ステータスを blocked に更新し、task_block_reports に保存。Slack スレッドへブロッキングを通知。
  • pause_task
    • 入力: task_session_id, reason, raw_context?
    • 動作: ステータスを paused に更新し、task_pause_reports に保存。Slack スレッドへ休止を通知(⏸️)。
  • resume_task
    • 入力: task_session_id, summary, raw_context?
    • 動作: ステータスを in_progress に戻し、休止レポートの resumed_at を更新。Slack スレッドへ再開を通知(▶️)。
  • complete_task
    • 入力: task_session_id, summary
    • 動作: ステータスを completed にして完了情報を upsert(task_completions)。Slack スレッドへ完了を投稿。
  • list_tasks
    • 入力: status? (in_progress | blocked | paused | completed), limit?
    • 動作: 認証ユーザーのタスク一覧を返す(更新日時降順)。

Read the full file on GitHub · 192 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 5d ago First seen · 192 lines · 2,217 tokens per session scan A 402270cc68be

Subscribe to this mod's changes

ava AGENTS.md is an instructions file published in the GitHub repository yutakobayashidev/ava (9 stars, last pushed 4mo ago), licensed MIT. It adds 2,217 tokens to every session, about $0.0111 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.