Repository navigation
[Context Packs] First-party project and runtime catalog #319
Description
Goal
Build a useful small first-party project/runtime catalog after the kernel and surfaces are proven.
Architecture boundary
Shared bounded manifest services and audited core runtime capabilities; no per-module PATH scans.
Canonical design: docs/design/context-engine.md. Continuation protocol: docs/development/context-engine-agent-protocol.md. Program umbrella: #305.
Non-goals
No arbitrary executable modules, marketplace, mass upstream ports, release or terminal-host structural dependency. This issue is a subsystem slice, not one issue per language.
Dependencies
Kernel, pack schema, shared inventory and security fixture architecture.
Program dependency links: #316, #317 and #318; hostile-fixture gates in #321.
Security constraints
Entering an untrusted workspace grants no execution authority. Never source .envrc, shell config, themes/plugins or project scripts; never execute repository-selected or arbitrary discovered binaries; no ordinary-context network or broad secret inspection. Facts are hostile input: central bounded control/bidi sanitization, no shell interpolation. Modules get no unrestricted filesystem/process/environment/network access. Secret/never-store facts must not reach snapshots. Renderers perform no I/O.
Acceptance criteria
- Prioritized catalog chosen by factual value.
- bounded manifest precedence and failures.
- requested-field lazy resolution.
- trusted executable identity.
- synthetic previews.
- themes/safe glyphs.
- version parsing and provenance fixtures.
- measured cold/warm costs..
Major deferred work
Long-tail languages, mass ports of upstream modules, arbitrary project execution.
Validation and checkpoints
Run focused checks and canonical verification; reproduce any claimed base/environment failures at the exact accepted base. Use CONTEXT ENGINE CHECKPOINT comments after accepted checkpoints. Physical terminal validation is distinct and remains pending until actually performed; do not close on automated checks alone.
Activity
raiseCatError commentedon Oct 6, 2026
Complete for the prioritized catalog on master via #326: project package + Node/Python/Go/Rust/Java (
src/context/capabilities/project.ts,runtimes.ts) with bounded manifest precedence and refusal of oversized/malformed/symlinked files; field-level lazy demand; trusted executable identity without execution (resolveTrustedExecutable, install-layout versions); synthetic previews; Theme/Safe-glyph rendering; version/provenance fixtures (tests/contextCapabilities.test.ts); cold/warm costs measured (context/*benchmarks enforced in bench:smoke). Long-tail languages remain deferred per the issue.