Ctxfolio v2.8.0

Ctxfolio v2.8.0

Formerly project-context-system. Repository: https://github.com/AnshRoshan/ctxfolio

Skill/CLI 2.8.0 maps to package/plugin 3.8.0. The command ctx remains compatible; ctxfolio is the matching binary for npm/npx.

Completed roadmap

All 34 numbered roadmap units are implemented: source-backed context facts, read-only resume advisories, sanitized shared/private issue queues, hash-bound raw quarantine, declared provenance/validity, Unicode/IDF and symbol-aware budgeted routing, deterministic routing evaluation, actual cold-start evidence, lifecycle-aware ADR/query knowledge, metadata-only governed capture, populated scaffold tiers, project-local skills, declared host destinations, portable checks, delegated symbols, derived search/hierarchy, bounded read-only MCP and scoped team cursors/federation.

Existing authored content and native links are preserved. Stable legacy adapter metadata markers remain compatible across the rename. Skill installs retain the SHIP-only boundary; npm packages explicitly include the CLI, templates, references and user-facing docs, not private wiki, test history, Git metadata or website dependencies.

Verification

• Release CLI suite: 193 passed, 0 failed, 0 skipped.
• Scale/host/MCP/team flows: 18 passed, 0 failed.
• Packed npm installation, both binaries, copied-lite setup, doctor, npm exec and publish dry-run passed.
• Strict context lint, staleness, version mapping, original adapter/config preservation and website build passed.
• Frozen routing result: hit@8 1.0, precision 0.15 (routing metrics, not semantic answer success or measured model tokens).
• Actual cold-start reader, independently graded: 8 correct, 2 partial, one pair only. Usage/cost/time were unavailable; no matched savings baseline or generalized task-success claim.

npm publication

Published to npm as ctxfolio@3.8.0. The registry confirms latest: 3.8.0; packed installation and both binaries were tested. Install:

npx ctxfolio@3.8.0 setup
# or
npm install --global ctxfolio
ctx setup

Limits

Host capabilities are declared; local MCP protocol tests do not prove every host loader. Attribution labels are declarations, not identity authentication. Quarantine is a deterministic instruction-shape heuristic, not universal attack detection. Locks coordinate cooperating writers; install publication is recoverable across two sibling renames, not a crash-atomic directory exchange.