Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/openaec-foundation/openaec-workspace-composer/vite-impl-javascript-apinpx skills add OpenAEC-Foundation/OpenAEC-Workspace-Composer --skill vite-impl-javascript-apigit clone --depth 1 https://github.com/OpenAEC-Foundation/OpenAEC-Workspace-ComposerWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/openaec-foundation/openaec-workspace-composer/vite-impl-javascript-api)<a href="https://agentmods.dev/skills/openaec-foundation/openaec-workspace-composer/vite-impl-javascript-api"><img src="https://agentmods.dev/badge/skills/openaec-foundation/openaec-workspace-composer/vite-impl-javascript-api.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00127 | $0.02071 |
| Opus 5 | $0.00063 | $0.01035 |
| Sonnet 5 | $0.00025 | $0.00414 |
| Haiku 4.5 | $0.00013 | $0.00207 |
Grade A, and why
vite-impl-javascript-api scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 191 lines — stays where its author put it; the contents beside it link to each section on GitHub.
vite-impl-javascript-api
Quick Reference
Core API Functions
| Function | Return Type | Purpose |
|---|---|---|
createServer(inlineConfig?) |
Promise<ViteDevServer> |
Start a programmatic dev server |
build(inlineConfig?) |
Promise<RollupOutput | RollupOutput[]> |
Run a production build |
preview(inlineConfig?) |
Promise<PreviewServer> |
Start a preview server for built output |
resolveConfig(inlineConfig, command, ...) |
Promise<ResolvedConfig> |
Resolve and merge all config sources |
mergeConfig(defaults, overrides, isRoot?) |
Record<string, any> |
Deep-merge two Vite configs |
loadConfigFromFile(configEnv, ...) |
Promise<{path, config, dependencies} | null> |
Load config from a file path |
loadEnv(mode, envDir, prefixes?) |
Record<string, string> |
Load .env files for a given mode |
Utility Functions
| Function | Purpose |
|---|---|
searchForWorkspaceRoot(current, root?) |
Find monorepo workspace root directory |
normalizePath(id) |
Convert Windows backslashes to forward slashes |
createFilter(include, exclude) |
Create a picomatch-based file filter |
transformWithOxc(code, filename, options?, inMap?) |
Transform code with OXC (Vite 8+) |
transformWithEsbuild(code, filename, options?, inMap?) |
Transform code with esbuild (DEPRECATED) |
preprocessCSS(code, filename, config) |
Preprocess CSS (experimental) |
Version Constants
| Constant | Description |
|---|---|
version |
Current Vite version string |
rolldownVersion |
Rolldown version used (Vite 8+) |
esbuildVersion |
Backward compatibility only |
rollupVersion |
Backward compatibility only |
Critical Warnings
NEVER use createServer() and build() in the same Node.js process without setting process.env.NODE_ENV or the mode config option consistently. Inconsistent modes cause unpredictable behavior.
NEVER call mergeConfig() with isRoot=true (the default) when merging nested config subsections like build or server. ALWAYS pass isRoot=false for nested option merging.
What ships with it
3 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago First seen · 191 lines · 127 tokens per session scan A 8d9898fb8396
vite-impl-javascript-api is a skill published in the GitHub repository OpenAEC-Foundation/OpenAEC-Workspace-Composer (5 stars, last pushed 5mo ago), licensed MIT. It adds 127 tokens to every session and 2,071 once invoked, about $0.0006 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
ship-release
The Massing release discipline — how to ship a verified, CI-green version-numbered release direct to main. Invoke whenever finishing a shippable change (feature, fix, doc). Covers version bump (both files), CHANGELOG/roadmap notes, the ruff/lint CI gotchas, tag, push, and CI/CodeQL verification.
security-monitoring
How to monitor and fix security issues in Massing — CodeQL alerts, dependency audits, secret scanning, and ReDoS/XXE fixes. Invoke after a push (standing directive) or when doing a hardening pass. Emphasises that a green CodeQL run != zero alerts.
verify-frontend
How to verify Massing web/viewer UI changes LIVE — full verification works; two historic "stalls" are fixed and neither was the geometry loader. Invoke when you changed apps/web and need to prove it works. Covers typecheck/lint/vitest/build, driving the real app, and honest flagging of flows you genuinely couldn't…
massing-bim
Drive a Massing BIM/AEC project from an AI agent over MCP — read a project's status, records, CDE, KPI and model-quality checks; run standards-compliance, schedule-risk, embodied-carbon, permit- readiness and drawing-QA analyses; author the IFC model with GUID-stable recipes; and draft RFIs. Use when the user asks to…
ara3d-sdk
Use when processing AEC/BIM 3D data in .NET 8 — mesh generation and transformation, SIMD-accelerated math, IFC/STEP/PLY to glTF/GLB/VIM conversion, plugin development. Ara3D-SDK: high-performance .NET 3D geometry and BIM library suite.
master-builder
Reason like a master builder — one mind holding an entire built-asset project from raw land through design, construction, handover, operations, and disposition, anywhere in the world. Use whenever the user touches real estate development, construction, or the built environment: site feasibility, highest-and-best-use…