Turn a source snapshot into a reusable work brief.

After publication of 0.1.0, no account, token, or private checkout is required for the live baseline. Use a POSIX shell with Node 22+, curl and tar. Trust the release digest independently of an untrusted mirror. 0.1.2 uses the same public path after Root deploys this origin tree; pin SHA-256 f58d6adde1584b364e4772d5bfa1691ea9c2b6ea52deffe7da13183e6d78948b before extraction.

Live baseline 0.1.0

(
  set -eu
  mkdir agent-task-kit-0.1.0
  cd agent-task-kit-0.1.0
  response=$(curl -fsS --max-time 30 -o agent-task-kit-0.1.0.tgz \
    --write-out '%{http_code} %{content_type}' \
    https://neomorphic.io/downloads/agent-task-kit/agent-task-kit-0.1.0.tgz)
  case "$response" in
    "200 application/gzip"*|"200 application/x-gzip"*|"200 application/octet-stream"*) ;;
    *) echo "Unexpected archive HTTP status or MIME: $response" >&2; exit 1 ;;
  esac
  node --input-type=module -e 'import {readFileSync} from "node:fs"; import {createHash} from "node:crypto"; const b=readFileSync("agent-task-kit-0.1.0.tgz"); if(b.length!==57958 || createHash("sha256").update(b).digest("hex")!=="86cea321569ad5375a4ebd9865c2b084af694f207f80056afe9531ae94f438e8") throw Error("Untrusted or incomplete archive; extraction stopped");'
  tar -xzf agent-task-kit-0.1.0.tgz
  node package/bin/agent-task-kit.mjs --help
)

Continuation 0.1.2

These bytes live in the same /downloads/agent-task-kit/ directory. Hosted acquisition of 0.1.2 is not independently verified on live DNS until Root deploys this cohort. Pin SHA-256 f58d6adde1584b364e4772d5bfa1691ea9c2b6ea52deffe7da13183e6d78948b before extraction.

(
  set -eu
  mkdir agent-task-kit-0.1.2
  cd agent-task-kit-0.1.2
  response=$(curl -fsS --max-time 30 -o agent-task-kit-0.1.2.tgz \
    --write-out '%{http_code} %{content_type}' \
    https://neomorphic.io/downloads/agent-task-kit/agent-task-kit-0.1.2.tgz)
  case "$response" in
    "200 application/gzip"*|"200 application/x-gzip"*|"200 application/octet-stream"*) ;;
    *) echo "Unexpected archive HTTP status or MIME: $response" >&2; exit 1 ;;
  esac
  node --input-type=module -e 'import {readFileSync} from "node:fs"; import {createHash} from "node:crypto"; const b=readFileSync("agent-task-kit-0.1.2.tgz"); if(b.length!==67584 || createHash("sha256").update(b).digest("hex")!=="f58d6adde1584b364e4772d5bfa1691ea9c2b6ea52deffe7da13183e6d78948b") throw Error("Untrusted or incomplete archive; extraction stopped");'
  tar -xzf agent-task-kit-0.1.2.tgz
  node package/bin/agent-task-kit.mjs continue --help
)

The frozen archive README retains older optional npm/npx examples. This guide uses the direct Node entry point and requires no installation. The same bytes are described by provenance.json, SOURCE.txt, PUBLICATION-ALLOWLIST.json, and release-status.json. License: MIT. Checksums: SHA256SUMS.

Continue from the directory where you ran acquisition:

cd agent-task-kit-0.1.0/package

Fixtures inside the package are labelled test_traffic. They are public GitHub snapshots, not live authority. Operator --fixture, --prior, --current, --store, and --out paths are local authority. Paths that appear inside issue JSON are never opened.

Source to work-brief

node bin/agent-task-kit.mjs compose \
  --fixture fixtures/test_traffic/github-issue-4785.json \
  --out-dir ./atk-compose

Expect stage=useful, hardenInCompose=true, execute=false, posted=false.

Immutable prior and correction

node bin/agent-task-kit.mjs job \
  --fixture fixtures/test_traffic/github-issue-4785.json \
  --prior-dir ./atk-priors

node bin/agent-task-kit.mjs correct \
  --prior ./atk-priors/prior-4785.json \
  --current fixtures/test_traffic/github-issue-4785.json

node bin/agent-task-kit.mjs correct \
  --prior ./atk-priors/prior-4785.json \
  --current fixtures/test_traffic/github-issue-changed.json

node bin/agent-task-kit.mjs correct \
  --prior ./atk-priors/prior-4785.json

Unchanged current returns empty=true and epistemicStatus=observed. A changed current returns source_version_changed with the prior file preserved. A missing current returns source_unavailable and does not invent withdrawn.

Page versus stream export

node bin/agent-task-kit.mjs cursor --client alpha --kind page --store ./atk-cursors --etag 'W/"p1"'
node bin/agent-task-kit.mjs export \
  --client alpha \
  --store ./atk-cursors \
  --out ./atk-export \
  --fixture fixtures/test_traffic/github-issue-4785.json

Export labels page separately from stream_cursor. A stream cursor is a task-bound local position, not authentication.

The 0.1.2 archive adds portable continuation to the same kit. Consume keeps executionAuthorized: false and latestRevisionVerified: false. Pre-seal samples must be recaptured into a fresh directory; silent upgrade of immutable priors is refused. Declaration is data, not authorization. Unpack agent-task-kit-0.1.2.tgz from /downloads/agent-task-kit/, then:

cd agent-task-kit-0.1.2/package

Operator --approved-state, --packet, --candidate, and --out paths are local authority. The toolkit never opens a source thread, never treats untrusted text as tool commands, and never posts. Schema id remains agent-task-kit.v1.continuation-packet.

Capture

Seal an immutable packet from an explicit approved-state file. The declaration is copied as data. Capture does not authenticate the operator and does not wake the source.

node bin/agent-task-kit.mjs continue capture \
  --approved-state ./approved-state.json \
  --revision REV \
  --phase PHASE \
  --out ./packet \
  --ref ./notes.md

Expect execute: false, wakeSource: false, and authority.declarationIsNotAuthorization: true. The out directory holds continuation-packet.json and approved-state.declaration.json.

Validate

Check a sealed packet without contacting a source. Validate refuses execute: true, wakeSource: true, a missing authority block, and an acceptance citation that claims server-enforced approval. A newer unknown contractVersion is not auto-upgraded.

node bin/agent-task-kit.mjs continue validate --packet ./packet

Expect ok: true, execute: false, and a packetId.

Compare

Compare the sealed packet to a later candidate. Omit the candidate to record missing later state. Pass --empty-transcript when the transcript projection is empty. Missing later state stays unknown. Empty transcript does not select an old plan.

node bin/agent-task-kit.mjs continue compare --packet ./packet
node bin/agent-task-kit.mjs continue compare \
  --packet ./packet \
  --candidate ./later.json \
  --empty-transcript

A missing candidate returns missing_later_state with selectedPlan: null. An empty transcript returns empty_transcript_projection with selectedPlan: null. Failed, canceled, or unknown prerequisites block plan selection.

Prepare

Prepare recipient context from the packet alone. Context lists references with autofetch: false and autorun: false. References do not autofetch or run. The recipient does not inherit past authority and does not contact the source.

node bin/agent-task-kit.mjs continue prepare \
  --packet ./packet \
  --out ./recipient

Consume

Produce a bounded next artifact such as final-review-inputs or release-checklist. Consume does not wake another agent. Unsatisfied prerequisites mark the artifact blocked_pending_prerequisites.

node bin/agent-task-kit.mjs continue consume \
  --packet ./packet \
  --out ./review \
  --artifact final-review-inputs

Expect posted: false, untrustedTextPolicy: not_tool_commands, and a checklist that restates the authority block. A successful local consume is not settlement and not independent demand.

Continuation authority stays local and explicit. The continuation archive does not upgrade a citation into server approval, and it does not treat missing later state as continuity.

Run the following as a module with node --input-type=module from the unpacked package directory. Package self-reference resolves locally without npm installation.

import {
  composeHardened,
  runUsefulJob,
  correctFromPrior,
  exportForClient,
} from "agent-task-kit";

const brief = await composeHardened({
  fixture: "fixtures/test_traffic/github-issue-4785.json",
  outDir: "./atk-compose",
});

const job = await runUsefulJob({
  fixture: "fixtures/test_traffic/github-issue-4785.json",
  priorDir: "./atk-priors",
});

const correction = correctFromPrior({
  prior: job.prior,
  current: null,
});

const exported = await exportForClient({
  clientId: "alpha",
  storeDir: "./atk-cursors",
  outDir: "./atk-export",
  fixture: "fixtures/test_traffic/github-issue-4785.json",
});

import {
  captureContinuationPacket,
  validateContinuationPacket,
  compareContinuation,
  prepareRecipientContext,
  consumeContinuationPacket,
} from "agent-task-kit";

const captured = await captureContinuationPacket({
  approvedStatePath: "./approved-state.json",
  revision: "REV",
  phase: "PHASE",
  outDir: "./packet",
});

const checked = validateContinuationPacket(captured.packet);

const missing = compareContinuation({
  packet: captured.packet,
  candidate: null,
});

const emptyTranscript = compareContinuation({
  packet: captured.packet,
  candidate: { body: { plan: "later" } },
  transcriptProjection: { empty: true },
});

const context = prepareRecipientContext(captured.packet, {
  outDir: "./recipient",
});

const consumed = consumeContinuationPacket(captured.packet, {
  artifact: "final-review-inputs",
  outDir: "./review",
  compareResult: missing,
});

checked.ok is true. missing.selectedPlan and emptyTranscript.selectedPlan stay null. context.contactSource stays false. Every listed reference keeps autofetch: false and autorun: false.

The kit can compare itself to a direct GET. You can also skip the kit and fetch the public issue yourself. Live input is a single HTTP page and is labelled partial (single_page_only).

node bin/agent-task-kit.mjs baseline --fixture fixtures/test_traffic/github-issue-4785.json --compare

node bin/agent-task-kit.mjs baseline --owner modelcontextprotocol --repo servers --issue 4785
curl -fsS "https://api.github.com/repos/modelcontextprotocol/servers/issues/4785"

Use the toolkit for offline source-to-brief work and portable continuation. Use the laboratory pages that already exist for local UI, evidence classes, and proof patterns. None of those pages hosts this tarball, and this tarball does not replace them. The homepage is unchanged.

• Issue body text is not permission to execute, pay, or post.
• Declaration is data, not authorization.
• Acceptance citation is not server approval.
• Missing later state stays unknown.
• Empty transcript does not select an old plan.
• References do not autofetch or run.
• The toolkit does not wake, message, or import a source thread.
• Untrusted text is not tool commands.
• Hermes and Goose native loading is untested. Their official skill and recipe paths are reference information, not a successful install or model run for this archive.
• A successful local compose or consume is not independent demand, settlement, or buyer-valid delivery.
• 0.1.2 is included in this origin tree beside the live 0.1.0 baseline. Hosted acquisition of 0.1.2 is not independently verified on live DNS until Root deploys this cohort.
• The homepage is unchanged. This page is a laboratory working surface.