Installation

The fastest way to try ContextCake on macOS is the signed, notarized app. ContextCake also runs directly from versioned source. The recommended source route is a verified source archive; shallow Git and GitHub CLI checkouts are available when you already use source-control tooling. The engine is dependency-free: there is no npm install step, no install scripts execute, and the resolver quickstart fetches nothing after the source is on your machine.

If you are still evaluating whether the model fits your team, start with the demo or the docs overview and come back here when you want the local setup path.

macOS app (recommended)

Download the DMG for your Mac from app-v0.10.1. Each file is signed, notarized, and listed in SHA256SUMS.

Mac	Download	Size	SHA-256
Apple silicon	ContextCake-0.10.1-arm64.dmg	119.8 MB	5c37c191b830bce4cdce1ef075585f7abd1f420f5ef44ebbd1f77f821fa30529
Intel	ContextCake-0.10.1-x64.dmg	125.5 MB	dbed7c2f48a612aaa35bb525e21e8ae43df9c26a66fc7728a2f0a974d583c78e

Open the DMG and drag ContextCake to Applications. Open it from Applications; macOS may ask you to confirm the first launch.

The app’s activation path is:

1. Choose Get started, then add a Markdown folder. Repository docs, Obsidian vaults, wiki exports, and other folders containing .md, .mdx, or .txt files work without conversion.
2. Finish source setup. ContextCake resolves the first available concept and confirms that your cascade is live.
3. Choose Connect an agent and select Claude Code, Codex, Cursor, Claude Desktop, or another MCP client. The app prepares the local MCP setup and its verification step.
4. Paste the supplied first-use prompt into your client and check that the answer names its source and keeps any disagreement visible.

Source setup comes before agent connection: an agent needs at least one source to query. The app can also install the optional contextcake command when a client needs it.

Each release page contains the matching ZIP and checksums.

Linux app (.deb)

Download the package from app-v0.10.1. It is not signed; check it against its line in SHA256SUMS.

Linux	Download	Size	SHA-256
Debian and Ubuntu	ContextCake-0.10.1-amd64.deb	99.2 MB	f459a1a4a2bbe0ba4aee8ebf01bb743e93226f7c5b4e1e3523a9c7dc59ad7ef8

The package is for x64 Debian and Ubuntu. Install it with apt, which also installs the libraries it needs:

sudo apt install ./ContextCake-*-amd64.deb

Open ContextCake from your applications menu. The setup steps match the macOS app above. The app lives in /opt/ContextCake and keeps settings and the source list in ~/.config/contextcake (or $XDG_CONFIG_HOME/contextcake), the folder the command-line tool reads. Chromium’s sandbox stays on: on Ubuntu 24.04 and later the package installs an AppArmor profile that allows it.

• Updates: the app checks for new releases and links the download. It never installs one. Install the new .deb the same way.
• Command-line tool: Help → Install Command Line Tool links contextcake into ~/.local/bin, with no sudo. If that folder is not on your PATH yet, log out and back in, or add it to your shell profile.
• Credentials: GitHub tokens are encrypted with your desktop keyring, such as GNOME Keyring or KWallet. Without one, the app keeps tokens in memory until it quits, and Settings → Connections says so.

Other distributions and architectures can use the source route below.

Prerequisites for the source route

• Node.js ≥ 22
• One download route: a browser, curl, GitHub CLI, or Git

Choose a route

Every route below targets the verified app-v0.9.1 coordinated release tag. Use the archive when you want the smallest inspectable download, or a shallow Git checkout when you already work with source-control tools.

Terminal download (recommended)

On macOS, Linux, or WSL:

curl --fail --location https://github.com/ContextCake/context-cake/archive/refs/tags/app-v0.9.1.tar.gz \\
  --output context-cake-app-v0.9.1.tar.gz

You can also download the same archive in your browser.

GitHub CLI

If you already use gh, create a shallow checkout at the same tag:

gh repo clone ContextCake/context-cake contextcake -- \\
  --branch app-v0.9.1 --depth 1
cd contextcake

Git

git clone --branch app-v0.9.1 --depth 1 \\
  https://github.com/ContextCake/context-cake.git contextcake
cd contextcake

Git and GitHub CLI users can skip directly to Verify the resolver.

Verify and unpack the archive

If you downloaded the archive with curl or your browser, verify it before unpacking:

printf '%s  %s\n' 'f5538d20ed5cb5d0503e6624f0f3b94805524526634cc4b22e23b44bcc252201' 'context-cake-app-v0.9.1.tar.gz' | shasum -a 256 --check &&
mkdir contextcake &&
tar -xzf context-cake-app-v0.9.1.tar.gz -C contextcake --strip-components=1 &&
cd contextcake

These commands target the app-v0.9.1 release instead of following the latest source checkout, and stop before extraction if the downloaded bytes do not match the published SHA-256.

Verify the resolver

Resolve a concept from the bundled three-layer demo, where the layers deliberately disagree:

node resolver.mjs --manifest apps/playground/manifest.json --concept decisions/primary-db

The JSON output shows the effective merge: contributors lists each layer with its last-updated date, every section carries the sourceLayer that won it, and sections where layers disagree carry a conflicts array with the dissenting layers’ content and dates, surfaced rather than hidden.

To run the full test suite (requires bash):

npm test

What you just installed

Piece	Run with
Cascade resolver (CLI)	node resolver.mjs --manifest <manifest> --concept <id>
MCP server for agents	node mcp-server.mjs --manifest <manifest>
Interactive playground	npm run playground → http://127.0.0.1:8790
Capture write path	node ingest.mjs / node write.mjs

Source checkout

Use a git checkout when you want to inspect history, contribute changes, or pin your own fork:

git clone https://github.com/ContextCake/context-cake.git
cd context-cake
node resolver.mjs --manifest apps/playground/manifest.json --concept decisions/primary-db

The versioned archive and the current source tree both use apps/playground/manifest.json for the bundled demo.

Why a source archive?

Package registries have repeatedly shipped compromised AI/agent tooling through hijacked maintainer accounts and postinstall payloads. A knowledge engine your agents read from should have a supply chain you can audit: a source archive is small, inspectable, and runnable as plain Node.js.

The signed macOS app is the recommended guided route. When the current release includes the verified Claude Desktop .mcpb bundle, the Install page shows its checksum-pinned download and manifest setup. A Homebrew cask will appear only after the first-party tap has been published and tested.

The npm/npx channel is intentionally held behind npm trusted publishing (OIDC), provenance, two-factor authentication, a script-free package, and an audited file allowlist. It will be documented only after that gate passes. Windows users can use the terminal route in WSL today.

Next

• Your first cascade: build your own layers
• Connect an agent (MCP): wire it into your AI client
• The trust boundary: read this before pointing a manifest at sources you didn’t write