Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add rules/w8123/enterpriseagentframework/reachai-projectgit clone --depth 1 https://github.com/w8123/EnterpriseAgentFrameworkWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00838 | $0.00838 |
| Opus 5 | $0.00419 | $0.00419 |
| Sonnet 5 | $0.00168 | $0.00168 |
| Haiku 4.5 | $0.00084 | $0.00084 |
Grade A, and why
reachai-project scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
ReachAI AI Coding Rules
进入本仓库后,先读根目录 AGENTS.md。它是 Codex、Cursor 和其他 AI 编程工具共享的最高优先级项目规则。
Must Follow
- 以当前仓库为事实源。先查真实代码、SQL、接口、前端页面和文档,再下结论。
- 可以修改前端、后端、SQL、文档和构建配置,但改动必须聚焦当前任务。
- 默认不考虑旧数据兼容;当前正确设计优先。
- 数据库变化必须先检查并修改
sql/initV2.sql;如当前任务需要升级已有开发/测试库,再新增sql/upgrade-YYYYMMDD-short-name.sql。 - 不要使用 service 目录下的历史 SQL 作为活跃迁移入口。
- 不要回滚、格式化或重写与任务无关的用户改动。
- 中文文件统一按 UTF-8 读写。
Project Memory
给 AI 的项目记忆在 docs/ai-memory/:
PROJECT-MEMORY.md: 产品定位、模块地图和当前事实。WORKING-RULES.md: 开发、SQL、验证和协作规则。DECISIONS.md: 架构和命名决策。KNOWN-PITFALLS.md: 以前踩过的坑和诊断顺序。VERIFICATION.md: 常用验证命令。AI-TOOLS.md: Playwright 浏览器调试和 DBHub MySQL 只读查询约定。
Core Architecture
- ReachAI 是面向 Java 企业系统的 AI 能力中台,不只是 Workflow Builder。
- 主线是
reachai-spring-boot2-starter、reachai-capability-sdk、@ReachCapability/@ReachParam注册项目、实例、能力和 SDK 图,平台治理后进入能力资产目录、Workflow Studio 和 Runtime。 - 当前后端主路径是
reachai-control-service、reachai-runtime-service、reachai-capability-service、reachai-knowledge-service、reachai-model-service;旧ai-agent-service不再作为 Maven、IDEA、本地启动或部署单元存在。 GraphSpec是运行语义,canvas_json只是画布布局。AgentRuntimeAdapter是运行时统一执行契约。Capability / 能力是产品默认命名。ReachAI 禁止重新引入自创的 Skill 业务资产模型。Skill 仅用于标准 Agent Skill 包或外部协议字段;Capability 是业务资产,Tool 是调用协议,Workflow 是 GraphSpec 编排。
Validation
- 后端改动跑相关 Maven 模块测试或编译。
- 前端改动在
ai-admin-front跑npm run build,必要时跑npx vue-tsc --noEmit。 - SQL 改动检查
sql/initV2.sql,以及当前任务新增的 upgrade SQL 是否覆盖目标变更。 - 文档/规则改动至少跑
git diff --check。
MCP Tools
- 需要浏览器调试、截图、DOM 快照、console 或 network 观察时,优先使用 Playwright MCP。
- 需要查看实时 MySQL schema 或少量只读数据时,优先使用
dbhub_ai_mysql。 dbhub_ai_mysql只能用于只读诊断,不执行 DDL/DML,不导出批量数据,不读取密钥或无关业务隐私。.cursor/mcp.json和.cursor/dbhub-ai-mysql.toml属于本机 MCP 配置,默认不提交;真实数据库密码必须来自本机环境变量,不要写入仓库。
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 53 lines · 838 tokens per session scan A faa35043deb7
reachai-project is a cursor rule published in the GitHub repository w8123/EnterpriseAgentFramework (618 stars, last pushed 9d ago), licensed MIT. It adds 838 tokens to every session, about $0.0042 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other cursor rules, from other repositories
plugin-development
Plugin Development Standards - Applies to all new wasm and golang-filter plugins.
architecture-vault
Source of truth: this directory lives under private monorepo kimssApi/kimsssdk/. The public kimss-python-sdk repo is a git subtree force-push mirror. Never treat the public main as an editable SSOT.
cursorrules
Follow AIINTEGRATION.md.
angular-20
This rule provides comprehensive best practices and coding standards for Angular development, focusing on modern TypeScript, standalone components, signals, and performance optimizations.
dev-standard
Apache Superset development standards and guidelines for Cursor IDE.
cli-error-handling
CLI command error handling patterns.