@maci0/dsh-caveman 0.16.2

package/LICENSE

@@ -0,0 +1,22 @@
+MIT License
+
+Copyright (c) 2026 dsh-caveman contributors
+Copyright (c) 2026 Julius Brussee (https://github.com/JuliusBrussee/caveman)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,192 @@
+# dsh-caveman
+
+Your agent writes three paragraphs where one line would do. This plugin makes it
+talk like a caveman: same meaning, fewer tokens. Code, commands, file paths, and
+exact error strings are never compressed, only the prose around them. Adapted
+from [JuliusBrussee/caveman](https://github.com/JuliusBrussee/caveman) (MIT):
+"why use many token when few do trick".
+
+## What you get
+
+- **A talking style on every request.** While any level except `off` is active,
+  the mode-filtered ruleset joins the system prompt.
+- **Fourteen skills** the `skill` tool can load, so they also appear as
+  `/caveman-review`, `/caveman-commit`, … in the composer: `caveman`, `cavecrew`,
+  `caveman-commit`, `caveman-review`, `caveman-compress`, `caveman-explore`,
+  `caveman-stats`, `caveman-help`, plus six work patterns (`investigate-first`,
+  `lean-build`, `surgical-patch`, `safe-refactor`, `migration`, `verify-and-stop`).
+- **Two ways to switch level.** The model calls the `caveman` tool; you type
+  `/caveman <level>` or just say **stop caveman**.
+- **A settings card and a composer chip**, so the active level is visible without
+  opening Settings.
+- **`/caveman-compress <file>`** shrinks a memory file or todo list with local
+  rules. No model call, original backed up out of tree. A relative path resolves
+  against the session's working directory. The model-facing `caveman-compress`
+  tool only rewrites files inside that workspace (symlinks resolved); the
+  command you type is not confined.
+
+## Install
+
+> **Install it as a bundle.** `dsh plugin add …` mounts the row from the
+> package's own patch layer, which is what the settings editor can write to. A
+> row added with `--patch` is an overlay: it disappears at the next start, and
+> the Plugins card cannot save into it (the editor refuses a write an overlay
+> would win).
+
+```sh
+dsh plugin --profile web add @maci0/dsh-caveman@0.16.2
+```
+
+This installs the public npm package; no GitHub token or `~/.secrets` setup is needed.
+The version is pinned. To upgrade, run the same command with a newer version,
+then restart `dsh web` (bundle layers compose at boot).
+
+## Use it
+
+```
+/caveman ultra     -> Caveman level: ultra (was full).
+/caveman wenyan    -> Caveman level: wenyan-full (was ultra).
+/caveman           -> Caveman level: wenyan-full.
+/caveman off       -> Caveman off (was wenyan-full). Normal behavior.
+```
+
+Typing **stop caveman** or **normal mode** as an ordinary message has the same
+effect as `/caveman off`, and it lands on the turn that carried it. Only the
+human's own words count: injected context riding the same event stream cannot
+toggle the level, and the message must *be* the command, so "add a normal mode
+toggle" is left alone.
+
+Model side, the tool takes `mode` (persist a level), `once` (this call only, not
+persisted), and `usage` (session token totals). `{"usage": true}` appends input,
+output, cache read, and cache write totals from the harness's `tokenUsage`
+projection: counts only, never a saving.
+
+### Levels
+
+| Level | Behavior | Persisted |
+|---|---|---|
+| `lite` | Drop filler. Keep sentence structure. | yes |
+| `full` | Drop articles, filler, pleasantries, hedging. Fragments OK. Default. | yes |
+| `ultra` | Extreme compression. Bare fragments. | yes |
+| `wenyan-lite` | Classical Chinese style, light compression. | yes |
+| `wenyan-full` | Full 文言文. Maximum classical terseness. (`/caveman wenyan` shorthand.) | yes |
+| `wenyan-ultra` | Extreme. Ancient scholar on a budget. | yes |
+| `off` | No injection. Normal behavior. | yes |
+
+Every level persists, so the card, the chip, the tool, and `/caveman` agree and
+the choice survives a restart. The card and the chip show the level the host is
+using: one that came from `CAVEMAN_DEFAULT_MODE` or `~/.config/caveman/config.json`
+is labelled as such (choosing a level on the card overrides it), and so is a level
+held only for this session because the settings write failed. Security warnings, irreversible-action
+confirmations, and anything where compression would change the meaning drop back
+to full sentences.
+
+## Configure
+
+| Field | Default | Meaning |
+|---|---|---|
+| `defaultMode` | unset | Startup level. Absent means "ask the chain below". One of the seven levels when set. |
+| `maxFileSize` | `500000` | Size cap in bytes for `/caveman-compress`. Positive number, editable from the card, and read on every compress call. |
+
+The row schema declares no default for `defaultMode` and the bundle's row sets
+none, so an absent field stays absent and the level resolves in this order: the
+row's `defaultMode`, then `CAVEMAN_DEFAULT_MODE`, then
+`~/.config/caveman/config.json`'s `defaultMode`, then `full`. The env and the
+file are read once at mount; the row is read at every use, so the card's Reset
+falls back to them. An invalid value
+fails while the plugin loads rather than silently doing the wrong thing.
+
+Override the row from your profile's own `cordis.patch.yml` with a
+`- id: caveman` row, which replaces the row's whole `config`. Do **not** paste
+the bundle's `insert` of that row there: `insert` does not dedupe ids, and a
+second row mounts the plugin twice.
+
+## How it works
+
+The package declares `dsh.bundle`, so `dsh plugin add` appends it to
+`dsh.profile.bundles` and the row in its own `cordis.patch.yml` applies as a layer.
+
+The host half mounts through public Cordis extension points: `systemPrompt.section`,
+`skills.registerProvider`, `tools.register`, `commands.register`,
+`loader/volatile-update` (the settings document writes the row's volatile
+`defaultMode`), `session/event` for the message switch, and `webServer` for
+`GET /caveman/level`, which answers `{ mode, source }` (`settings`, `env`,
+`config-file`, `default`, or `session`) behind the `connection` trust fence. The
+browser half reads that route on every settings change and every 5 seconds, draws
+its card into the public `plugins.row.config` slot from `configForms`, registers its
+copy through `locale.register`, and draws its chip into `conversation.input.left`, so
+this plugin needs no client change of its own.
+
+The entry point is the built `lib/index.js` (declarations in `lib/types/`); `bun run
+build` regenerates it from `src/`. `lib/client.js` is hand-authored plain JavaScript:
+the client module system serves it as a lazy-CJS factory on `window.__ModuleLoader__`
+because the package exports `./client`, and it is not built. Skills come from
+`skills/<name>/SKILL.md` with frontmatter parsed by `yaml`; the provider takes its rank
+and name grammar from `@deepseek-ai/dsh-skill`, projects `disable-model-invocation`,
+`user-invocable`, and `whenToUse`, and settles on the lookup's abort signal. Tools use
+`defineTool` from `@deepseek-ai/dsh-tools` and forward `exec.signal`. Only
+`skills/caveman/SKILL.md` is the source of truth for the ruleset; this README keeps no
+second copy.
+
+## Limits
+
+- **No proxy, no CLI verbs, no Cloud engine.** Upstream's
+  `caveman-setup/-discover/-learn/-manage/-optimize/-evidence-review` need an
+  external runtime the harness has no extension point for, so they are not bundled.
+- **Savings are not measured.** `/caveman-stats` reports what the provider reported this
+  session, never a percentage, and it says unavailable when the host mounts no token meter.
+- **The level is process-wide.** One prompt section, one namespace value: every
+  agent in the process shares it.
+- **External subagents ignore it.** In-process children inherit the ruleset, but
+  `subagent-claude-code`/`subagent-codex` spawn their own CLI with its own prompt.
+- **Two locales.** The card and the chip ship `en` and `zh`; any other locale
+  falls back through the service's own chain.
+- **Host source edits need `bun run build` and a restart**; browser-half edits need a page refresh.
+
+## Development
+
+```sh
+bun install         # the client packages are optional peers and stay uninstalled
+bun run build       # tsc -p tsconfig.build.json -> lib/index.js + lib/types/
+bun test            # every tests/*.test.ts, no build step
+bun run typecheck   # tsc -p tsconfig.json
+bun run sync:check  # diff bundled files against upstream main (needs network)
+bun run sync        # overwrite stale verbatim files (refuses dirty tree w/o --force)
+```
+
+dsh loads plugins on Node ^22.19.0 || >=24.0.0; development and tests run on bun.
+
+The harness packages this plugin imports at runtime (`@deepseek-ai/dsh-tools`,
+`@deepseek-ai/dsh-skill`, `@deepseek-ai/schemastery`) are **dependencies
+pinned to the harness's own versions**, so the profile resolves one physical
+copy; `yaml` is the only non-harness dependency. The pin is deliberate.
+`@deepseek-ai/dsh-tools` keys its runtime scheduler on a module-level `Symbol`,
+so a second physical copy in the profile hands the tool layer a different
+symbol than the host's and every tool call dies with
+`Cannot read properties of undefined (reading 'prepare')`.
+
+For local development, install the checkout into a profile with
+`dsh plugin --profile <name> add <path-to-checkout>`.
+
+The suite covers level normalization and filtering, the fake-host surface, the skills
+provider, the compress pipeline, and a real Cordis composition mount next to the real
+skill registry. `sync:check` exits 1 and lists stale files (2 on a usage or fetch error); `sync` rewrites verbatim
+copies and leaves adapted ones for manual re-adaptation. Both accept `--ref <tag|sha>`
+(default `main`). The network assertion runs only with `DSH_SYNC_CHECK=1`; plain
+`bun test` stays offline. To uninstall, run `dsh plugin --profile web remove @maci0/dsh-caveman`
+and drop any `id: caveman` override from `~/.dsh/profiles/<profile>/cordis.patch.yml`.
+
+## Attribution and license
+
+MIT. Skill content: © JuliusBrussee
+([caveman](https://github.com/JuliusBrussee/caveman)). DSH port: see `LICENSE`.
+
+The fourteen `skills/*/SKILL.md` files track upstream; nine are verbatim copies
+and five carry small DSH adaptations (`caveman`, `caveman-compress`, `cavecrew`,
+`caveman-stats`, `caveman-help`). The `cavecrew-*.md` prompts are verbatim too.
+The compress pipeline (`src/compress-*.ts`) is a port, not a copy: same behavior,
+local rules instead of a model call, no `python3` needed.
+
+Upstream's numbers (JetBrains: 8.5% fewer output tokens, skill only; Adobe CAVEWOMAN:
+1.4–2.4× output-side cost cut; proxy: −33.2% input tokens) are upstream's, not this
+package's: this port ships the skill half only, so only the skill-side figures apply.

package/cordis.patch.yml

@@ -0,0 +1,13 @@
+# The dsh-caveman bundle patch: applied automatically when a profile lists
+# this bundle (`dsh plugin add`/`update` appends the package to
+# dsh.profile.bundles). Users override this row from their profile's own
+# cordis.patch.yml (live-watched; dsh.profile.bundles is frozen at boot) with a
+# `- id: caveman` row, which replaces the row's whole `config`.
+# `name` stays a bare package specifier: the browser half is served by the
+# client module system, which resolves the Loader entry's package, reads its
+# `dsh.client` manifest, and serves `exports["./client"]`.
+# Do not also insert this same row into the profile patch: insert does not
+# dedupe ids, and a second row would register the plugin twice.
+- insert:
+    - id: caveman
+      name: '@maci0/dsh-caveman'

package/icon.svg

@@ -0,0 +1,6 @@
+<svg width="36" height="36" viewBox="0 0 36 36" fill="none" xmlns="http://www.w3.org/2000/svg">
+  <path d="M8 22.5c1.2-6.2 5.4-10 10-10 3.2 0 5.6 1.6 7.2 4.2" stroke="#8C6239" stroke-width="2.2" stroke-linecap="round"/>
+  <circle cx="23.5" cy="13.2" r="5.4" fill="#C4A574"/>
+  <circle cx="23.5" cy="13.2" r="5.4" stroke="#8C6239" stroke-width="1.5"/>
+  <path d="M10 24.5h9.5" stroke="#8C6239" stroke-width="2.2" stroke-linecap="round"/>
+</svg>