JuliusBrussee/caveman v2.7.0

on GitHub

Caveman 2.7.0 installs natively into more agents, makes uninstall clean up what it wired, stops Codex approval rules from breaking, and ships the hosted proxy mode and framework middleware on the bin-v1.1.7 runtime.

Highlights:

• Install: agents that read physical skill directories now get a native, ownership-tracked copy. --uninstall disables native agent integrations and says when a native route survives. The standalone installer is safe on JSONC and foreign manifests, and caveman-init --force refreshes an installed rule file. The update path is documented.
• Plugin: the Claude Code plugin and Gemini extension manifests declare the release version, so hosts stop showing a commit sha or a years-old 1.0.1 (#321, #403).
• Skill: an explicit reply-language instruction wins over the conversation's dominant language. Level switches carry the right ruleset on both hosts, natural-language activation has fewer false positives, and the fallback ruleset no longer carries a language few-shot.
• Stats: /caveman-stats reports only what the transcript shows; the unmeasured savings claims are retired from docs.
• Codex: the API-key route gets the /v1 prefix Codex appends to, and shell commands are no longer rewritten (that broke saved approval rules). caveman wrap stops registering a Codex shrink hook the README says it skips.
• CLI: new caveman stats command surface; a wrapped host's endpoint is proven before its credentials are rerouted; agent config homes are honored; a loopback gateway stays out of a corporate proxy; think.shrink is honored by the native install.
• opencode: mode changes are recorded.
• Compress / shrink: the compress skill CLI runs as a plain script; shrink leaves mixed CJK strings byte-identical (#575) and escalates to SIGKILL when the upstream ignores the signal.
• Pi: provider routing is gated on the live listener, with per-model originals and compat-mount routing for custom providers (#972).
• Proxy (bin-v1.1.7): hosted mode (inbound token, AWS credential chain, container image at ghcr.io/juliusbrussee/caveman-proxy), framework middleware routes, byte-exact token-counting routes, per-request accounting with a local stats report, tighter secret redaction and SSRF policy, Bedrock SigV4 callers never re-signed as another principal, and recovery-store locking fixes.

Artifacts:

• Signed binaries: bin-v1.1.7
• CLI: npm install -g @caveman-ai/cli@1.3.4 (npm publish pending)
• Pi extension: @caveman-ai/pi@0.1.1 (npm publish pending)
• MCP shrink proxy: caveman-shrink@0.1.1 (npm publish pending)
• SDKs: @caveman-ai/sdk@1.1.0, caveman-sdk==1.1.0
• Middleware (alpha): @caveman-ai/middleware@0.1.0-alpha.2, caveman-middleware==0.1.0a1

Validation:

• Installer suite (node --test tests/installer/*.test.mjs): 322 passed, 0 failed, including the bootstrap pin lockstep and host manifest version guards.
• tests/verify_repo.py: all local verification checks passed.
• CLI suite (94 runtime files): 1052 passed, 0 failed.
• Pi extension suite: 117 passed. caveman-shrink suite: 28 passed.
• bin-v1.1.7: all 38 release assets downloadable anonymously.
• Nightly agent conformance: every pinned profile and the real compression engine green except Hermes, whose upstream package currently refuses to build a wheel.