ai-baton
Portable, auditable, file-first handoff protocol for AI assistants.
Lets you move between AI tools — Claude Code, Codex CLI, Cursor, or
anything else that reads/writes files — on the same long-running project
without re-explaining context every time. State lives in plain Markdown +
YAML files in your own repo: a memory/ for durable facts and decisions,
a status/CURRENT_STATUS.md for what's happening right now, an
append-only evidence/ trail, handover/ snapshots, and archive/ for
superseded plans. No server, no vector DB, no vendor plugin required —
every change is just a git diff.
Requires local filesystem access — this works with tools that run on your
machine or have been given access to a folder (Claude Code, Codex CLI,
Cursor, Windsurf, Claude Desktop with a filesystem connector, etc.). Plain
web ChatGPT or web Claude.ai chat, without file access, can't read
PROTOCOL.md at all, regardless of Agent Skills support.
Not the first system aiming at cross-tool AI memory — Mem0, OpenMemory,
and Letta solve overlapping problems with a vector store and/or an agent
runtime. This makes the opposite trade-off: zero infrastructure and
git-native auditability, at the cost of semantic search and automatic
extraction. See docs/comparison.md.
Status
Pre-alpha. pip install ai-baton-tool (PyPI distribution name differs
from the ai-baton command — an existing unrelated package blocked that
name). Working: the spec (SPEC.md), the init / validate / status /
list / skill install CLI, a default workspace convention
(~/ai-baton-workspace/<project-name>/, discoverable across tools/sessions
via ai-baton list), a full worked example (examples/demo-project/),
and an Agent Skills skill — ai-baton skill install puts it where Claude Code and Codex CLI look for it, triggered
live in Claude Code but not yet in Codex or Cursor. validate also flags
well-known credential formats (AWS/GitHub/Slack keys, private key blocks)
as a heuristic safety net, not a full secrets scanner, and warns (per-
project configurable via .ai-baton.json) when memory/ gets large
enough to be a real token cost every session. 31 tests pass locally. Not
built: semantic search (by design) and any automated measurement of
handoff effectiveness (methodology sketched in
docs/metrics.md, nothing wired up).
Quick orientation
docs/quickstart.md— install and try it.SPEC.md— the protocol.docs/comparison.md— vs. Mem0 / OpenMemory / Letta / Letta Code.docs/metrics.md— how we'd measure handoff quality.examples/demo-project/— worked example..agents/skills/ai-baton/SKILL.md— install once, an AI tool follows the protocol without being reminded.
License
MIT — see LICENSE.
1 maintainer
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file ai_baton_tool-0.0.8.tar.gz.
File metadata
- Download URL: ai_baton_tool-0.0.8.tar.gz
- Upload date:
- Size: 35.8 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
55d4b4152bd85c983380e0f78baa78dbc0e18c273317c14e98d784515062d684
|
|
| MD5 |
b02b7f002c0a060d9498b78a804f0526
|
|
| BLAKE2b-256 |
7757b47b8b5171acb4e5ae12d15e7f3e6cd2535b71fd195008ce5769526545cf
|
Provenance
The following attestation bundles were made for ai_baton_tool-0.0.8.tar.gz:
Publisher:
publish.yml on wszzs/ai-baton
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
ai_baton_tool-0.0.8.tar.gz -
Subject digest:
55d4b4152bd85c983380e0f78baa78dbc0e18c273317c14e98d784515062d684 - Sigstore transparency entry: 2413851473
- Sigstore integration time:
-
Permalink:
wszzs/ai-baton@a9f4f6b910a4ad80af4aba219d966fca4aefe667 -
Branch / Tag:
refs/tags/v0.0.8 - Owner: https://github.com/wszzs
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@a9f4f6b910a4ad80af4aba219d966fca4aefe667 -
Trigger Event:
release
-
Statement type:
File details
Details for the file ai_baton_tool-0.0.8-py3-none-any.whl.
File metadata
- Download URL: ai_baton_tool-0.0.8-py3-none-any.whl
- Upload date:
- Size: 19.9 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via: twine/7.0.0 CPython/3.13.14
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
03fff39017045c3ef78768e8d777a497193727accfc0996ff021bb2fef5139a9
|
|
| MD5 |
ccd3c0822f0d117f669404020dc1f3e7
|
|
| BLAKE2b-256 |
8f1bd45e7d504d4a041335eef57c3b4a9d091c3a361807ea3ae059e183fbfb46
|
Provenance
The following attestation bundles were made for ai_baton_tool-0.0.8-py3-none-any.whl:
Publisher:
publish.yml on wszzs/ai-baton
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
ai_baton_tool-0.0.8-py3-none-any.whl -
Subject digest:
03fff39017045c3ef78768e8d777a497193727accfc0996ff021bb2fef5139a9 - Sigstore transparency entry: 2413851848
- Sigstore integration time:
-
Permalink:
wszzs/ai-baton@a9f4f6b910a4ad80af4aba219d966fca4aefe667 -
Branch / Tag:
refs/tags/v0.0.8 - Owner: https://github.com/wszzs
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@a9f4f6b910a4ad80af4aba219d966fca4aefe667 -
Trigger Event:
release
-
Statement type:
