Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add rules/usekaneo/kaneo/project-overviewgit clone --depth 1 https://github.com/usekaneo/kaneoWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00677 | $0.00677 |
| Opus 5 | $0.00338 | $0.00338 |
| Sonnet 5 | $0.00135 | $0.00135 |
| Haiku 4.5 | $0.00068 | $0.00068 |
Grade A, and why
project-overview scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 85 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Project Overview
Kaneo is a self-hosted project management platform built with a focus on simplicity and performance. This document provides an overview of the project structure and architecture.
Project Structure
Kaneo is organized as a monorepo using pnpm workspaces:
kaneo/
├── apps/
│ ├── api/ # Backend API (Hono/Node.js)
│ ├── docs/ # Documentation site (Next.js)
│ └── web/ # Frontend app (React/Vite)
├── packages/ # Shared code and configs
│ ├── email/ # Email utilities
│ ├── libs/ # Shared libraries
│ └── typescript-config/ # TypeScript configurations
├── charts/ # Kubernetes Helm charts
├── .cursor/ # Cursor IDE rules
└── compose.yml # Docker Compose configuration
Technology Stack
Backend (API)
- Framework: Hono (lightweight web framework)
- Runtime: Node.js
- Database: PostgreSQL with Drizzle ORM
- Authentication: Better Auth
- Validation: Valibot
- API Documentation: OpenAPI (hono-openapi)
- Build Tool: esbuild
Frontend (Web)
- Framework: React 18+
- Routing: TanStack Router
- Data Fetching: TanStack Query (React Query)
- Build Tool: Vite
- Styling: Tailwind CSS
- UI Components: Custom component library
Development Tools
- Package Manager: pnpm
- Linting/Formatting: Biome
- TypeScript: Strict mode enabled
- Git Hooks: Husky
Key Principles
- Simplicity First: Features exist to solve real problems, not to impress
- Performance: Fast load times and responsive interactions
- Self-Hosted: Your data stays yours
- Open Source: Free forever, MIT licensed
Development Workflow
- Install dependencies:
pnpm install - Start development:
pnpm dev(starts both API and web) - Lint code:
pnpm lint(runs Biome) - Database migrations:
pnpm --filter @kaneo/api db:generateanddb:migrate
Environment Setup
All environment variables are configured in a single .env file at the project root. See ENVIRONMENT_SETUP.md for detailed configuration instructions.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 85 lines · 677 tokens per session scan A b4d1eb552c47
project-overview is a cursor rule published in the GitHub repository usekaneo/kaneo (8,786 stars, last pushed yesterday), licensed MIT. It adds 677 tokens to every session, about $0.0034 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other cursor rules, from other repositories
no-co-author-in-commits
Do not add or keep Co-authored-by trailers in commit messages.
no-mvn-compile
Do not run mvn compile; rely on IDE lint errors.
git-and-monorepo
Commit message convention and pnpm/Nx monorepo rules.
upgrade-tests
// ✅ CORRECT: Upgrade package pattern await using ctx = testReactResource(appRouter, { server: { // server configuration }, client(opts) { return { links: [ httpLink({ url: opts.httpUrl, // client configuration }), ], }; }, }).
clawsweeper
Triage and process the Slate v2 issue ledger with OpenClaw-style sweep discipline: archive-first discovery, duplicate proof, small-fix gates, exact claim rules, maintainer-safe issue output, and gitcrawl API refreshes.
slate-ar-status
Read-only status shortcut for Slate v2 Autoresearch. Shows current session state, dashboard URL, next recommended action, blockers, and latest metric evidence without running packets or editing files.