@krtclcdy/tersio 2.25.6 → 2.25.8

package/dist/extensions/shared/usage-ledger.js

@@ -2,7 +2,8 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { execFileSync } from 'node:child_process';
-import { homeDir, isPiProcess, piAgentDir, resolveRtkBinary, tersioDataPath } from './utils.js';
+import { homeDir, isPiProcess, piAgentDir, resolveRtkBinary, rtkDirs, shimCommand, tersioDataPath } from './utils.js';
+import { eligibleHeads } from './rtk-eligible.js';
 import { sqliteRead } from './sqlite.js';
 export function ledgerPath() {
     const override = process.env.TERSIO_USAGE_FILE;
@@ -196,6 +197,60 @@ export function dayKey(ts) {
     const p = (n) => String(n).padStart(2, '0');
     return `${d.getFullYear()}-${p(d.getMonth() + 1)}-${p(d.getDate())}`;
 }
+// OpenCode tool parts carry the command in the message blob; sqliteRead is line-based, so newlines are flattened in SQL.
+const OC_BASH_CMD = "replace(replace(json_extract(j.value,'$.state.input.command'), char(10), ' '), char(13), ' ')";
+const OC_BASH_TOOL = "json_extract(j.value,'$.type')='tool' AND (json_extract(j.value,'$.name')='bash' OR json_extract(j.value,'$.name')='shell')";
+const ocBashLegacy = `SELECT message.id, json_extract(message.data,'$.sessionID'), ${OC_BASH_CMD} FROM message, json_each(message.data,'$.content') j WHERE json_extract(message.data,'$.role')='assistant' AND ${OC_BASH_TOOL}`;
+const ocBashCurrent = `SELECT session_message.id, session_message.session_id, ${OC_BASH_CMD} FROM session_message, json_each(session_message.data,'$.content') j WHERE session_message.type='assistant' AND ${OC_BASH_TOOL}`;
+/** Every executed bash command in an OpenCode db, v2 first and the legacy table second. */
+export function readOpencodeBashRows(db) {
+    const rows = [];
+    try {
+        if (!fs.existsSync(db))
+            return rows;
+        let out = '';
+        try {
+            out += sqliteRead(db, ocBashCurrent);
+        }
+        catch { /* no v2 table */ }
+        try {
+            out += sqliteRead(db, ocBashLegacy);
+        }
+        catch { /* no legacy table */ }
+        for (const line of out.split('\n')) {
+            if (!line.trim())
+                continue;
+            const [id, sessionId, command] = line.split('\t');
+            if (typeof command !== 'string' || !command.trim())
+                continue;
+            rows.push({ id: id ?? '', sessionId: sessionId ?? '', command });
+        }
+    }
+    catch { /* an unreadable db is a skip, not a failure */ }
+    return rows;
+}
+// Pre-v2 OpenCode stores one message per JSON file; the same tool-part shape holds the command.
+function opencodeFileBash(file) {
+    try {
+        const message = JSON.parse(fs.readFileSync(file, 'utf8'));
+        const parts = Array.isArray(message.content) ? message.content : [];
+        const commands = [];
+        for (const part of parts) {
+            const p = part;
+            if (p?.type !== 'tool')
+                continue;
+            if (p.name !== 'bash' && p.name !== 'shell')
+                continue;
+            const command = p.state?.input?.command;
+            if (typeof command === 'string' && command)
+                commands.push(command);
+        }
+        return { commands, sessionId: typeof message.sessionID === 'string' ? message.sessionID : '' };
+    }
+    catch {
+        return { commands: [], sessionId: '' };
+    }
+}
 export function walkJsonl(dir, out, cap, ext = '.jsonl') {
     let entries;
     try {
@@ -217,11 +272,6 @@ export function walkJsonl(dir, out, cap, ext = '.jsonl') {
 // Recent rows are a newest-first window over lifetime history; aggregates keep everything.
 export const RECENT_LIMIT = 2000;
 const FREE_SUFFIX = /(?::free|-free)$/i;
-const RTK_ELIGIBLE_HEADS = new Set([
-    'rtk', 'git', 'grep', 'rg', 'find', 'cat', 'ls', 'tree', 'diff', 'log',
-    'npm', 'npx', 'pnpm', 'bun', 'bunx', 'cargo', 'go', 'python', 'pytest',
-    'ruff', 'mypy', 'docker', 'kubectl', 'psql', 'aws', 'gh', 'glab', 'wc',
-]);
 export function newSessionAccum() {
     return { byModel: {}, byDay: {}, byDayModel: {}, byTool: {}, byModelMessages: {}, byHost: {}, byAgent: {}, byAgentMessages: {}, byModelMeasured: {}, byModelCostMessages: {}, totals: zeroBreakdown(), messages: 0, costMeasured: 0, recent: [], recentFloor: Number.POSITIVE_INFINITY };
 }
@@ -569,7 +619,17 @@ export function agentOfSessionText(text) {
     return 'main';
 }
 const adoptionFileCache = new Map();
-function parseAdoptionFile(file) {
+function countBashCommands(commands, eligible, counts) {
+    for (const command of commands) {
+        counts.bashCalls += 1;
+        const head = leadBinary(command);
+        if (eligible.has(head))
+            counts.eligibleCalls += 1;
+        if (head === 'rtk')
+            counts.rtkCalls += 1;
+    }
+}
+function parseAdoptionFile(file, eligible) {
     const counts = { bashCalls: 0, eligibleCalls: 0, rtkCalls: 0 };
     let text;
     try {
@@ -578,33 +638,87 @@ function parseAdoptionFile(file) {
     catch {
         return { counts, sessions: 0 };
     }
-    let sawBash = false;
+    // omp emits a custom row per tool start; pi records the same call inside the assistant message.
+    // A host that writes both shapes would double every call, so the custom ids gate the message pass.
+    const commands = [];
+    const customIds = new Set();
+    const messageCalls = [];
     for (const line of text.split('\n')) {
-        if (!line.includes('tool_execution_start'))
+        if (!line.includes('tool_execution_start') && !line.includes('"toolCall"'))
             continue;
         try {
             const row = JSON.parse(line);
-            if (row.type !== 'custom' || row.customType !== 'tool_execution_start' || row.data?.toolName !== 'bash')
+            if (row.type === 'custom' && row.customType === 'tool_execution_start' && row.data?.toolName === 'bash') {
+                const command = row.data.args?.command;
+                if (typeof command !== 'string')
+                    continue;
+                if (typeof row.data.toolCallId === 'string')
+                    customIds.add(row.data.toolCallId);
+                commands.push(command);
                 continue;
-            const command = row.data.args?.command;
-            if (typeof command !== 'string')
+            }
+            const content = row.message?.content;
+            if (row.type !== 'message' || !Array.isArray(content))
                 continue;
-            sawBash = true;
-            counts.bashCalls += 1;
-            const head = leadBinary(command);
-            if (RTK_ELIGIBLE_HEADS.has(head))
-                counts.eligibleCalls += 1;
-            if (head === 'rtk')
-                counts.rtkCalls += 1;
+            for (const part of content) {
+                if (typeof part !== 'object' || part === null)
+                    continue;
+                const call = part;
+                if (call.type !== 'toolCall' || call.name !== 'bash')
+                    continue;
+                const args = call.arguments;
+                if (typeof args !== 'object' || args === null || !('command' in args))
+                    continue;
+                const command = args.command;
+                if (typeof command !== 'string')
+                    continue;
+                messageCalls.push({ id: typeof call.id === 'string' ? call.id : undefined, command });
+            }
         }
         catch { /* skip corrupt line */ }
     }
-    return { counts, sessions: sawBash ? 1 : 0 };
+    for (const call of messageCalls) {
+        if (call.id !== undefined && customIds.has(call.id))
+            continue;
+        commands.push(call.command);
+    }
+    countBashCommands(commands, eligible, counts);
+    return { counts, sessions: commands.length > 0 ? 1 : 0 };
 }
 export function clearRtkAdoptionCache() {
     adoptionFileCache.clear();
 }
+/** Rewrites the hook performed on hosts whose transcript records the pre-hook command, by host. */
+function countRtkAuditRows() {
+    const byHost = {};
+    let text;
+    try {
+        text = fs.readFileSync(ledgerPath(), 'utf8');
+    }
+    catch {
+        return byHost;
+    }
+    for (const line of text.split('\n')) {
+        if (!line.includes('rtk-audit'))
+            continue;
+        try {
+            const row = JSON.parse(line);
+            if (row.kind !== 'rtk-audit' || typeof row.detail !== 'string')
+                continue;
+            const host = row.detail.split(' ')[0];
+            if (!host)
+                continue;
+            byHost[host] = (byHost[host] ?? 0) + 1;
+        }
+        catch { /* skip corrupt line */ }
+    }
+    return byHost;
+}
 export function readRtkAdoption() {
+    // The eligible set comes from rtk's rewrite contract, cached per binary version.
+    const eligible = eligibleHeads(resolveRtkBinary());
+    // A cached count is only valid for the head set that produced it.
+    const headsKey = [...eligible].sort().join(',');
     const files = [];
     for (const dir of sessionsDirs())
         walkJsonl(dir, files, 2000);
@@ -617,6 +731,14 @@ export function readRtkAdoption() {
     let eligibleCalls = 0;
     let rtkCalls = 0;
     let sessions = 0;
+    const byHost = {};
+    const hostCounts = (host, counts) => {
+        const into = byHost[host] ?? { bashCalls: 0, eligibleCalls: 0, rtkCalls: 0 };
+        into.bashCalls += counts.bashCalls;
+        into.eligibleCalls += counts.eligibleCalls;
+        into.rtkCalls += counts.rtkCalls;
+        byHost[host] = into;
+    };
     for (const file of files) {
         let stat;
         try {
@@ -626,9 +748,9 @@ export function readRtkAdoption() {
             continue;
         }
         let entry = adoptionFileCache.get(file);
-        if (!entry || entry.size !== stat.size || entry.mtimeMs !== stat.mtimeMs) {
-            const parsed = parseAdoptionFile(file);
-            entry = { size: stat.size, mtimeMs: stat.mtimeMs, counts: parsed.counts };
+        if (!entry || entry.size !== stat.size || entry.mtimeMs !== stat.mtimeMs || entry.heads !== headsKey) {
+            const parsed = parseAdoptionFile(file, eligible);
+            entry = { size: stat.size, mtimeMs: stat.mtimeMs, heads: headsKey, counts: parsed.counts };
             adoptionFileCache.set(file, entry);
             sessions += parsed.sessions;
         }
@@ -638,9 +760,56 @@ export function readRtkAdoption() {
         bashCalls += entry.counts.bashCalls;
         eligibleCalls += entry.counts.eligibleCalls;
         rtkCalls += entry.counts.rtkCalls;
+        hostCounts(hostOfSessionFile(file), entry.counts);
+    }
+    // OpenCode keeps its own store: a v2 sqlite db, or one JSON file per message before v2.
+    const opencode = { bashCalls: 0, eligibleCalls: 0, rtkCalls: 0 };
+    const opencodeSessions = new Set();
+    if (process.env.TERSIO_SESSIONS_DIR === undefined || process.env.TERSIO_OPENCODE_DB !== undefined) {
+        for (const row of readOpencodeBashRows(opencodeDbPath())) {
+            countBashCommands([row.command], eligible, opencode);
+            if (row.sessionId)
+                opencodeSessions.add(row.sessionId);
+        }
+    }
+    const ocFiles = [];
+    if (process.env.TERSIO_SESSIONS_DIR === undefined || process.env.TERSIO_OPENCODE_DIR !== undefined) {
+        walkJsonl(opencodeSessionsDir(), ocFiles, 5000, '.json');
+        for (const file of ocFiles) {
+            const parsed = opencodeFileBash(file);
+            countBashCommands(parsed.commands, eligible, opencode);
+            if (parsed.sessionId)
+                opencodeSessions.add(parsed.sessionId);
+        }
+    }
+    bashCalls += opencode.bashCalls;
+    eligibleCalls += opencode.eligibleCalls;
+    rtkCalls += opencode.rtkCalls;
+    sessions += opencodeSessions.size;
+    if (opencode.bashCalls > 0)
+        hostCounts('opencode', opencode);
+    // The hook audit carries rewrites on pi and opencode, whose transcripts record the pre-hook command.
+    for (const [host, rows] of Object.entries(countRtkAuditRows())) {
+        rtkCalls += rows;
+        hostCounts(host, { bashCalls: 0, eligibleCalls: 0, rtkCalls: rows });
     }
     const missedCalls = Math.max(0, eligibleCalls - rtkCalls);
-    return { sessions, bashCalls, eligibleCalls, rtkCalls, missedCalls, adoptionPct: eligibleCalls ? (rtkCalls / eligibleCalls) * 100 : 0 };
+    const host = (counts) => ({
+        bashCalls: counts.bashCalls,
+        eligibleCalls: counts.eligibleCalls,
+        rtkCalls: counts.rtkCalls,
+        missedCalls: Math.max(0, counts.eligibleCalls - counts.rtkCalls),
+        adoptionPct: counts.eligibleCalls ? (counts.rtkCalls / counts.eligibleCalls) * 100 : 0,
+    });
+    return {
+        sessions,
+        bashCalls,
+        eligibleCalls,
+        rtkCalls,
+        missedCalls,
+        adoptionPct: eligibleCalls ? (rtkCalls / eligibleCalls) * 100 : 0,
+        byHost: Object.fromEntries(Object.entries(byHost).map(([name, counts]) => [name, host(counts)])),
+    };
 }
 export function processSessionText(accum, state, text, host, agent) {
     for (const line of text.split('\n')) {
@@ -678,10 +847,7 @@ export function readRtkRecallDiagnostics(binary = resolveRtkBinary()) {
     if (!binary)
         return { mode: 'unknown', entries: 0, available: false };
     try {
-        const configPath = process.env.RTK_CONFIG
-            || (process.platform === 'darwin'
-                ? path.join(homeDir(), 'Library', 'Application Support', 'rtk', 'config.toml')
-                : path.join(process.env.XDG_DATA_HOME || path.join(homeDir(), '.local', 'share'), 'rtk', 'config.toml'));
+        const configPath = process.env.RTK_CONFIG || path.join(rtkDirs().config, 'config.toml');
         let config = '';
         try {
             config = fs.readFileSync(configPath, 'utf8');
@@ -689,7 +855,8 @@ export function readRtkRecallDiagnostics(binary = resolveRtkBinary()) {
         catch { /* use RTK CLI fallback */ }
         const modeMatch = /^\s*mode\s*=\s*"(sqlite|tee|disabled)"/m.exec(config);
         const mode = (modeMatch?.[1] ?? 'unknown');
-        const output = execFileSync(binary, ['recall', '--list'], { encoding: 'utf8', timeout: 5000, windowsHide: true });
+        const shim = shimCommand(binary, ['recall', '--list']);
+        const output = execFileSync(shim.cmd, shim.args, { encoding: 'utf8', timeout: 5000, windowsHide: true });
         const entries = /\((\d+)\s+(?:entries?|stored)\)/i.exec(output)?.[1] ?? /^\s*(\d+)\s+entries?/im.exec(output)?.[1] ?? '0';
         return { mode, entries: Number(entries) || 0, available: true };
     }

package/dist/extensions/shared/utils.js

@@ -17,9 +17,31 @@ export function homeDir() {
     const home = process.env.HOME || process.env.USERPROFILE;
     return home && home.trim() !== '' ? home : os.homedir();
 }
+/** Windows cannot run a `.cmd` or `.bat` directly, so a shim path goes through the shell; a real `.exe` or POSIX binary passes through. */
+export function shimCommand(cmd, args) {
+    if (process.platform !== 'win32' || !/\.(?:cmd|bat)$/i.test(cmd))
+        return { cmd, args };
+    return { cmd: process.env.ComSpec || 'cmd.exe', args: ['/d', '/s', '/c', cmd, ...args] };
+}
+/** rtk's own dirs: `config_dir()` for config.toml and `data_local_dir()` for history.db, which differ per platform; a guess here empties the Gain charts. */
+export function rtkDirs() {
+    if (process.platform === 'darwin') {
+        const base = path.join(homeDir(), 'Library', 'Application Support', 'rtk');
+        return { data: base, config: base };
+    }
+    if (process.platform === 'win32') {
+        const local = process.env.LOCALAPPDATA || path.join(homeDir(), 'AppData', 'Local');
+        const roaming = process.env.APPDATA || path.join(homeDir(), 'AppData', 'Roaming');
+        return { data: path.join(local, 'rtk'), config: path.join(roaming, 'rtk') };
+    }
+    const xdgData = process.env.XDG_DATA_HOME || path.join(homeDir(), '.local', 'share');
+    const xdgConfig = process.env.XDG_CONFIG_HOME || path.join(homeDir(), '.config');
+    return { data: path.join(xdgData, 'rtk'), config: path.join(xdgConfig, 'rtk') };
+}
 export const RTK_RELEASE_API = 'https://api.github.com/repos/rtk-ai/rtk/releases/latest';
 export const CAVEMAN_REMOTE_ULTRA = 'https://raw.githubusercontent.com/JuliusBrussee/caveman/main/skills/ultracave/SKILL.md';
 export const CAVEMAN_REMOTE_MEGACAVE = 'https://raw.githubusercontent.com/JuliusBrussee/caveman/main/skills/megacave/SKILL.md';
+export const CAVEMAN_REMOTE_FULL = 'https://raw.githubusercontent.com/JuliusBrussee/caveman/main/skills/caveman/SKILL.md';
 // A fetch that returns an error page or a truncated body must not reach the extension tree.
 export function ruleBodyProblem(text) {
     const trimmed = text.trim();
@@ -80,6 +102,17 @@ export function findPackageRoot(fromDir) {
         dir = parent;
     }
 }
+/** Where a mode's rule bodies sit: beside the module, else the package's own `extensions/<name>`. */
+export function ruleDir(name, ownDir) {
+    if (existsSync(path.join(ownDir, 'rule.md')))
+        return ownDir;
+    try {
+        return path.join(findPackageRoot(ownDir), 'extensions', name);
+    }
+    catch {
+        return ownDir;
+    }
+}
 // The 3xx+location redirect rule shared by httpsGet/httpsDownload.
 function redirectNext(res, url) {
     if (res.statusCode !== undefined && res.statusCode >= 300 && res.statusCode < 400 && res.headers.location) {

package/dist/extensions/updater/index.js

@@ -7,7 +7,7 @@ import os from 'node:os';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { setExtensionLabel } from '../shared/host.js';
-import { CAVEMAN_REMOTE_ULTRA, CAVEMAN_REMOTE_MEGACAVE, RTK_RELEASE_API, fetchJson, findFile, findHoistedPackage, httpsGet, httpsDownload, sha256Hex, parseChecksum, normalizeRtkVersion, readTextIfExists, rtkPlatformSpec, resolveRtkBinary, } from '../shared/utils.js';
+import { CAVEMAN_REMOTE_ULTRA, CAVEMAN_REMOTE_MEGACAVE, CAVEMAN_REMOTE_FULL, RTK_RELEASE_API, fetchJson, findFile, findHoistedPackage, homeDir, httpsGet, httpsDownload, sha256Hex, parseChecksum, normalizeRtkVersion, readTextIfExists, rtkPlatformSpec, resolveRtkBinary, } from '../shared/utils.js';
 const IS_WINDOWS = process.platform === 'win32';
 const EXTENSION_DIR = path.dirname(fileURLToPath(import.meta.url));
 const PONYTAIL_REMOTE = 'https://raw.githubusercontent.com/DietrichGebert/ponytail/main/package.json';
@@ -18,14 +18,18 @@ function cavemanRule(name) {
     const beside = CAVEMAN_SIBLING(name);
     if (fsSync.existsSync(beside))
         return beside;
-    const plugin = path.join(os.homedir(), '.omp', 'plugins', 'node_modules', '@krtclcdy', 'tersio', 'extensions', 'caveman', name);
+    const plugin = path.join(homeDir(), '.omp', 'plugins', 'node_modules', '@krtclcdy', 'tersio', 'extensions', 'caveman', name);
     return fsSync.existsSync(plugin) ? plugin : beside;
 }
 const CAVEMAN_LOCAL = cavemanRule('rule.md');
+// `rule.md` is upstream's body with one adapted line, so a refresh re-applies the adaptation.
+const adaptCavemanFull = (text) => text.replace('`/caveman-compress` exempt.', '`/caveman-compress`, where the host offers it, is exempt.');
 const CAVEMAN_TRACKED = [
+    { file: CAVEMAN_LOCAL, remote: CAVEMAN_REMOTE_FULL, adapt: adaptCavemanFull },
     { file: cavemanRule('rule-ultra.md'), remote: CAVEMAN_REMOTE_ULTRA },
     { file: cavemanRule('rule-megacave.md'), remote: CAVEMAN_REMOTE_MEGACAVE },
 ];
+export { adaptCavemanFull };
 // Host-neutral: this updater runs inside pi, OMP, and OpenCode alike.
 const RELOAD_MSG = 'Reminder: restart your agent (or reload extensions) for updates to take effect.';
 // Ponytail is hoisted, so the installed copy is found by walking up, not by naming a host directory.
@@ -98,11 +102,13 @@ function checkRtk() {
 function checkCaveman() {
     return runCheck('Caveman', async () => {
         const parts = [(await readTextIfExists(CAVEMAN_LOCAL)) ? 'rule.md ok' : 'rule.md missing'];
-        for (const { file, remote } of CAVEMAN_TRACKED) {
+        for (const { file, remote, adapt } of CAVEMAN_TRACKED) {
             const name = path.basename(file);
             try {
                 const [remoteText, localText] = await Promise.all([httpsGet(remote), readTextIfExists(file)]);
-                parts.push(!localText ? `${name} missing` : shortHash(localText) === shortHash(remoteText) ? `${name} up to date` : `${name} update available`);
+                // Compare the text a refresh would write, so the adapted line never reads as drift.
+                const nextHash = shortHash(adapt ? adapt(remoteText) : remoteText);
+                parts.push(!localText ? `${name} missing` : shortHash(localText) === nextHash ? `${name} up to date` : `${name} update available`);
             }
             catch {
                 parts.push(`${name} check skipped`);
@@ -333,7 +339,7 @@ async function updateRtk(ctx, dryRun = false) {
 }
 async function updateCaveman(ctx, dryRun = false) {
     const results = [];
-    for (const { file, remote } of CAVEMAN_TRACKED) {
+    for (const { file, remote, adapt } of CAVEMAN_TRACKED) {
         const name = path.basename(file);
         let remoteText;
         try {
@@ -343,7 +349,9 @@ async function updateCaveman(ctx, dryRun = false) {
             results.push(report(ctx, `Caveman ${name} update failed: ${e.message}`, 'warning'));
             continue;
         }
-        const remoteHash = shortHash(remoteText);
+        // A tracked fork compares against the text it would write, so an adapted body still reads up to date.
+        const nextText = adapt ? adapt(remoteText) : remoteText;
+        const remoteHash = shortHash(nextText);
         const oldLocal = await readTextIfExists(file);
         const oldHash = oldLocal ? shortHash(oldLocal) : null;
         if (oldHash === remoteHash) {
@@ -359,7 +367,7 @@ async function updateCaveman(ctx, dryRun = false) {
             const backupPath = `${file}.bak`;
             if (oldLocal !== null)
                 await fs.writeFile(backupPath, oldLocal, 'utf8');
-            await fs.writeFile(file, remoteText, 'utf8');
+            await fs.writeFile(file, nextText, 'utf8');
             const writtenHash = shortHash(await fs.readFile(file, 'utf8'));
             if (writtenHash !== remoteHash) {
                 if (oldLocal !== null)

package/extensions/caveman/index.ts

@@ -5,11 +5,12 @@ import { dirname, join } from 'node:path';
 import { injectPromptText, onHostEvent, setExtensionLabel } from '../shared/host.ts';
 import { announceStatus, formatCavemanStatus } from '../shared/status.ts';
 import { readCavemanDefault } from '../shared/plugin-settings.ts';
+import { ruleDir } from '../shared/utils.ts';
 import type { ExtensionApi, ExtensionCtx, InputEvent, SessionEntry, SystemPromptEvent } from '../shared/types.ts';
 
-const CAVERN_DIR = dirname(fileURLToPath(import.meta.url));
-// Upstream ships one skill per register: default, ultracave, megacave.
-const RULE_FILES = { lite: 'rule.md', full: 'rule.md', ultra: 'rule-ultra.md', 'megacave-lite': 'rule-megacave.md', 'megacave-full': 'rule-megacave.md', 'megacave-ultra': 'rule-megacave.md' };
+const CAVERN_DIR = ruleDir('caveman', dirname(fileURLToPath(import.meta.url)));
+// `rule.md`, `rule-ultra.md`, and `rule-megacave.md` track upstream and are refetched; `lite`, `megacave-lite`, and `megacave-ultra` are our forks and ship bundled.
+const RULE_FILES = { lite: 'rule-lite.md', full: 'rule.md', ultra: 'rule-ultra.md', 'megacave-lite': 'rule-megacave-lite.md', 'megacave-full': 'rule-megacave.md', 'megacave-ultra': 'rule-megacave-ultra.md' };
 
 const DEFAULT_MODE = 'off';
 

package/extensions/caveman/rule-lite.md

@@ -0,0 +1,77 @@
+---
+name: lightcave
+description: >
+  Caveman at its lightest register: no filler and no hedging, with articles and
+  full sentences kept. Professional but tight. Use for /caveman lite, or the lite
+  part of a Combo preset. Stays on until "stop caveman" or "normal mode".
+source: >
+  Upstream JuliusBrussee/caveman, skills/caveman/SKILL.md at 84cc3c1, the "Intensity" table, row `lite`.
+  The row reads: "No filler/hedging. Keep articles + full sentences. Professional but tight"
+  The worked example under it is this register's model answer. The floor, the break-the-rules list,
+  and the pre-send check come from the same body. Adapted for Tersio's hosts and hook; no rule here
+  is Tersio's own.
+---
+
+# lightcave
+
+Respond terse like smart caveman. All technical substance stay. Only fluff die. This is the light register: sentences stay sentences and articles stay, and the words that carry nothing go.
+
+## Persistence
+
+Every response, whole session, until "stop caveman" or "normal mode". Unsure if still on? It is. `/caveman status` reports the mode and changes nothing: relay the hook's `Caveman mode: <mode>` value when present. With no hook, report the mode you followed, or `off` if caveman was turned off or never active, plus `(not tracked by this host)`.
+
+## What changes at lite
+
+Drop filler, hedging, pleasantries, recap, and closers. Keep articles, keep full sentences, keep punctuation. Professional but tight.
+
+Bad: "Sure! I'd be happy to help. The issue you're experiencing is likely caused by an inline object prop."
+Good: "Your component re-renders because you create a new object reference on each render. Wrap it in `useMemo`."
+
+## Floor
+
+Never cut: code blocks, commands, paths, API names, error strings (verbatim). not/never/no/only/except. Numbers and units. The user's language. One term per thing. No invented abbreviations, no arrows. Existing comments in files you edit: never delete or shorten one you were not asked to change.
+
+## Rules
+
+### 1. Answer first
+
+Answer, then reason, then next step. Pattern: `[thing] [action] [reason]. [next step].`
+
+### 2. Kill ceremony
+
+No greeting, hedging, pleasantries, recap, or closer. No "Sure!", "Let me", "I'll now", "Hope this helps". No just/really/basically/actually/simply.
+
+### 3. Short word
+
+"fix" not "implement a solution for". Standard acronyms fine (DB, API, HTTP). Invented abbreviations not (cfg, impl, fn): same tokens, harder read. No arrows.
+
+### 4. One idea per sentence
+
+20 words max, active voice, imperative for instructions, pronoun only with an obvious referent. Compression and clarity conflict? Clarity wins.
+
+### 5. Payload verbatim
+
+Code blocks unchanged. Commands, paths, API names exact. Errors quoted exact, shortest decisive line only. A code change in chat shows the changed lines plus 1-2 lines of context, not the whole file, unless the user asks for the whole file or most of it changes.
+
+### 6. Tool runs: bounded status
+
+No text between routine calls. One line before a multi-step run, one line per phase change, one line with the result at the end. Otherwise text before a call only to clarify, warn, or disambiguate.
+
+### 7. User's language
+
+Compress the style, not the language. An explicit reply-language instruction wins. Never switch because of quoted text. Technical terms and errors stay verbatim.
+
+### 8. Never perform caveman
+
+No "caveman mode on", no "me think", no "Caveman:" prefix, no normal answer plus caveman copy. No decorative tables or emoji.
+
+## When to break the rules
+
+Plain prose, then resume: security warning. Irreversible action, confirmed first. Step order a sentence could scramble. User confused or repeats the question. Anything persisted outside chat — code, comments, commits, docs, issues, PRs, tickets, memory files, third-party messages — with `/caveman-compress`, where the host offers it, exempt. A status line or confirmation the harness asks for. A question you ask the user, with its options.
+
+## Pre-send check
+
+1. First sentence announces what you will do? Delete.
+2. Last sentence recaps or offers help? Delete.
+3. Any filler or hedging left? Cut it.
+4. Every code span, path, number, and error verbatim? Any sentence with two readings is a full sentence.

package/extensions/caveman/rule-megacave-lite.md

@@ -0,0 +1,59 @@
+---
+name: megacave-lite
+description: >
+  Megacave at its lightest register: semi-classical 文言文 flavour with grammar
+  structure kept, filler and hedging dropped. Use for /caveman megacave-lite. Stays
+  on until "stop caveman" or "normal mode".
+source: >
+  Upstream JuliusBrussee/caveman, skills/caveman/SKILL.md at 84cc3c1, the "Intensity" table, row `wenyan-lite`.
+  The row reads: "Semi-classical. Drop filler/hedging but keep grammar structure, classical register"
+  The worked example under it is this register's model answer. The Floor comes from upstream
+  skills/megacave/SKILL.md at main. Adapted for Tersio's hosts and hook; no rule here is Tersio's own.
+---
+
+# megacave-lite
+
+以文言答，而語法具存。技術之實皆存，唯贅言與游移去之。
+
+Semi-classical register with grammar kept. Drop filler, hedging, pleasantries, recap, and closers. Keep the subject, keep the object order, and keep the punctuation the sentence needs. Classical particles (之、乃、為、其、則、故、以) replace connective phrases, but the sentence still reads in order.
+
+Bad: 「當然，我很樂意協助您。您遇到的問題大概是因為每次渲染都建立了新的物件參照。」
+Good: 「組件頻重繪，以每繪新生對象參照故。以 `useMemo` 包之。」
+
+## Floor
+
+Never cut or translate: code, commands, paths, API names, error strings, in their original script. Negation (不, 非, 勿, 未, 毋). Numbers and units, Arabic numerals. One term per thing. A clause ambiguous in 文言 becomes 白話. Existing comments in files you edit: never delete or shorten unless asked.
+
+## Rules
+
+### 1. Classical flavour, modern grammar
+
+半文言, not 白話. Subject, verb, and object stay where a reader expects them. One particle, one relation.
+
+### 2. Drop filler and hedging only
+
+No 當然, 我想, 可能, 基本上, 其實. No pleasantries, no recap, no closer. Articles and sentence structure stay.
+
+### 3. One idea per sentence
+
+Short sentences, one relation each. Any clause with two readings becomes a full sentence.
+
+### 4. Payload in original script
+
+Code blocks, commands, paths, API names, and error strings stay verbatim, in their original script.
+
+### 5. Tool runs: bounded status
+
+One line in, one out. Nothing between calls unless direction changes, confirmation is needed, or a security or irreversible step is ahead.
+
+### 6. Never perform caveman
+
+No 「文言模式啟」, no modern answer plus classical copy. 半文言 not shorter than 白話 for a sentence? Use 白話.
+
+## When to break the rules
+
+白話 or the user's language, full sentences, then resume: security warning. Irreversible action, confirmed first. Any clause with two readings. User confused. Question to the user, with its options. Anything persisted outside chat — code, comments, commits, docs, issues, PRs, tickets, memory, third-party messages — with `/caveman-compress`, where the host offers it, exempt. A status line or confirmation the harness asks for.
+
+## Pre-send check
+
+Identifiers verbatim, original script? Negations present? Two readings? 白話. Flavour word left? Cut.

package/extensions/caveman/rule-megacave-ultra.md

@@ -0,0 +1,59 @@
+---
+name: megacave-ultra
+description: >
+  Megacave at maximum compression: extreme abbreviation while keeping the
+  classical Chinese feel. Use for /caveman megacave-ultra. Stays on until
+  "stop caveman" or "normal mode".
+source: >
+  Upstream JuliusBrussee/caveman, skills/caveman/SKILL.md at 84cc3c1, the "Intensity" table, row `wenyan-ultra`.
+  The row reads: "Extreme abbreviation while keeping classical Chinese feel. Maximum compression, ultra terse"
+  The worked example under it is this register's model answer. The Floor comes from upstream
+  skills/megacave/SKILL.md at main. Adapted for Tersio's hosts and hook; no rule here is Tersio's own.
+---
+
+# megacave-ultra
+
+以文言答，極簡其辭。技術之實皆存，唯字去之。
+
+Extreme abbreviation, classical feel. Subjects, copulas, and connectives all go; one mark carries one relation. Arrows for causality. Maximum compression, ultra terse.
+
+Bad: 「因為每次渲染都建立了新的物件參照，所以組件會重新渲染。請用 useMemo 包起來。」
+Good: 「新參照→重繪。`useMemo` Wrap。」
+
+## Floor
+
+Never cut or translate: code, commands, paths, API names, error strings, in their original script. Negation (不, 非, 勿, 未, 毋). Numbers and units, Arabic numerals. One term per thing. A clause ambiguous in 文言 becomes 白話. Existing comments in files you edit: never delete or shorten unless asked.
+
+## Rules
+
+### 1. Extreme abbreviation
+
+Drop subjects, copulas, connectives, and any word the sentence survives without. One mark per relation: → for cause, 、 for a list, 。 to stop.
+
+### 2. Classical feel
+
+Terse noun phrases and classical word order wherever a shorter form exists. A particle only when no shorter mark can carry the relation.
+
+### 3. Each fact once
+
+No restating, no summary after a list. Code change: changed lines plus context, not the whole file.
+
+### 4. Payload in original script
+
+Never abbreviate an identifier to save characters. Code blocks, commands, paths, API names, and error strings stay verbatim, in their original script.
+
+### 5. Tool runs
+
+One line in, one out. Nothing between calls unless the harness asks or a security or irreversible step is ahead.
+
+### 6. Never perform caveman
+
+No announcement, no mangled characters for flavour. Abbreviation not shorter than the sentence? Use the sentence.
+
+## When to break the rules
+
+白話 or the user's language, full sentences, then resume: security warning. Irreversible action, confirmed first. Any clause with two readings. User confused. Question to the user, with its options. Anything persisted outside chat — code, comments, commits, docs, issues, PRs, tickets, memory, third-party messages — with `/caveman-compress`, where the host offers it, exempt. A status line or confirmation the harness asks for.
+
+## Pre-send check
+
+Identifiers verbatim, original script? Negations present? Two readings? 白話. Flavour character? Cut.

package/extensions/caveman/rule.md

@@ -77,7 +77,7 @@ Plain prose, then resume:
 2. Irreversible action. Confirm in full sentences first.
 3. Step order a fragment could scramble.
 4. User confused or repeats the question.
-5. Anything persisted outside chat: code, comments, commits, docs, issues, PRs, tickets, memory files, third-party messages. `/caveman-compress` exempt.
+5. Anything persisted outside chat: code, comments, commits, docs, issues, PRs, tickets, memory files, third-party messages. `/caveman-compress`, where the host offers it, is exempt.
 6. Harness asks for a status line or confirmation. Give it. Harness decides *when* you speak, caveman decides *how*.
 7. You ask the user a question or offer options. Full sentences, so the answer comes back right first time.