Home / iohub / yagent · GitHub

AGENTS.md@internal/agentsA

AGENTS.md@internal/agents from iohub/yagent is an AGENTS.md file: the standing instructions coding agents read in that repo.

Install it, pinned

mdr add iohub/yagent/internal/agents/AGENTS.md@git:20261103.104f21a

Pins git:20261103.104f21a in mdr.lock. Pin the fingerprint instead.

Audit grade: A, 14 of 14 checks passed
Kind: AGENTS.md file
Repository: iohub/yagent
Path: internal/agents/AGENTS.md
Versions recorded: 7
Latest version: git:20261103.104f21a, committed Nov 3, 2026
First version recorded: Oct 21, 2026
Size: 19,549 bytes
Repository stars: 31
License: Apache-2.0

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# internal/agents — 子 Agent 与共享执行循环

> 范围：本目录内不可派生的约束。全局见仓库根 `AGENTS.md`；编排内核见
> `director/AGENTS.md`。模块结构与文件计数由 `internal/blueprint` 每轮派生，不要往这里抄。

## 边界

六个子 Agent 的实现 + 它们共享的 LLM-工具循环 `RunAgentLoop` + 委派结果的分级与采集
（handoff / blueprint / artifact）。**不负责**：装配（`internal/app`）、工具实现与"谁能用什么"
（`internal/tools` + `internal/toolspec`）、Director 的编排逻辑（在 `director/` 子包，
`agents/director.go` 只是门面）。

## 硬约束

**1. `ExecutorConfig.Surface` 是唯一工具来源。** 不许再把 `Adapters` 快照加回来
（`executor.go:29-34`）：并行谓词曾经扫那份列表，而生产只填 Surface，于是**测试全绿、并行一次
都没发生**（根 AGENTS.md §11 坑 33）。并发准入判据只有一份 `toolCallIsParallelizable`，
两个循环共用（`executor.go:182`）——两份同形实现必有一边漂走。

**2. 以 `agent_exit` 收尾的 Agent 必须自己置 `StopOnFinish`，且收尾只认执行成功的那一次。**
判据只有一份：`internal/agents/exitpolicy`（两个循环都调它，谁也不许再写内联的名字比较 —— 闸门
`TestTerminationDecisionIsNotInlinedInLoops` 直接扫源码，改回内联即红）。装配点 `repo.go:165`、`coding.go:370`、`chat.go:85`、`devops.go:94`、`browser_agent.go:128`、`director.go:390`（Custom Agent）。漏设不报错：`agent_exit` 只是"又执行了一次工具"，循环继续烧到
MaxSteps，而 `deliverableText` 取的是最后一条 assistant 消息——便签正文与 artifact 全文存的
都不是那份交付（`repo.go:157-160` 把这段写成了注释）。

**3. 交付全文只经 `deliverableText()` 取**（`result.go:52-60`）。判据是返回 JSON 的**形态**
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint

mdr add iohub/yagent/internal/agents/AGENTS.md@sha256:3ebbbf209f4a3532

The line at the top of this page pins the label git:20261103.104f21a, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

[![mdr](https://markdownregistry.com/badge/art_45ritkwa3b4czdxd.svg)](https://markdownregistry.com/a/art_45ritkwa3b4czdxd)

2 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 7 versions of this file, between Oct 21, 2026 and Nov 3, 2026, about one every 2 days.

version	committed	commit	size	audit
git:20261103.104f21a latest	2026-11-03	104f21a	19,549 B	A	view · diff
git:20261028.4037dfe	2026-10-28	4037dfe	19,275 B	A	view · diff
git:20261027.fce6527	2026-10-27	fce6527	19,131 B	A	view · diff
git:20261025.f70d95c	2026-10-25	f70d95c	19,006 B	A	view · diff
git:20261024.9b44441	2026-10-24	9b44441	19,006 B	A	view · diff
git:20261022.53411ac	2026-10-22	53411ac	7,272 B	A	view · diff
git:20261021.9f5bf87	2026-10-21	9f5bf87	7,275 B	A	view

Audit of the latest version

A 14 of 14 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.

pass: Size between 200 bytes and 200 KB (19549 bytes)
pass: No zero-width or bidi control characters
pass: No instruction hidden inside an HTML comment
pass: No link to an exfiltration or paste host
pass: No credential-shaped string
pass: No instruction to send local credentials anywhere
pass: No text hidden with inline styles
pass: No prompt-injection phrasing
pass: No curl or wget piped into a shell
pass: No recursive delete of root, home or parent
pass: No instruction to read or print local credentials
pass: No base64 blob over 200 characters
pass: No link to a raw IP address
pass: No script tag

Source

GitHub

iohub/yagent · 31 stars · license Apache-2.0 · pushed 2026-11-05 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_45ritkwa3b4czdxd
GET https://markdownregistry.com/api/v1/resolve?ref=iohub/yagent/internal/agents/AGENTS.md
GET https://markdownregistry.com/api/v1/blob/3ebbbf209f4a353210f7d68977347228f210859e8aeb0b8e67febff62965d055

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: how to write a good AGENTS.md · AGENTS.md vs CLAUDE.md · which agent file does what.