jev-layer 0.1.0 → 0.2.0

package/docs/SCHEMA-VERSIONING.md

@@ -1,94 +1,96 @@
-# Schema and compatibility policy
-
-[English](../README.md) | [Русский](../README.ru.md) | [简体中文](../README.zh-CN.md)
-
-The current public contracts are **schema version 1**. The implementation already emits `schema_version: 1` for route requests, decision envelopes, routing cases, execution receipts, and supervision cases. A new public release must not silently change the meaning of those v1 fields.
-
-## Version rules
-
-- **Patch release:** bug fixes and documentation changes; v1 meanings remain unchanged.
-- **Minor release:** additive optional fields, new providers, new adapters, or new capability kinds that v1 consumers can ignore.
-- **Major release:** removed/renamed required fields, changed field types or meanings, changed correlation semantics, or a host-approval contract change.
-- Unknown fields must be ignored by readers. Writers must not emit a required field unless it is part of the declared schema version.
-- New runtime behavior must remain opt-in and fail open unless the existing contract explicitly requires it.
-
-A breaking schema requires a new schema version, migration notes, fixtures for both versions, and an adapter compatibility decision. Do not change v1 to avoid writing a migration.
-
-## MCP tools
-
-The MCP server currently exposes these stable tool names:
-
-- `jev_route`
-- `jev_browser_step` (experimental, opt-in)
-- `jev_supervise` (experimental, opt-in)
-- `jev_record_execution`
-
-Their input and structured output are v1. Additive optional properties are compatible. Renaming a tool, changing a required property, changing the meaning of a status, or changing who owns execution requires a new tool/schema version and adapter migration. Keep `tools/list`, `initialize`, and stdio JSON-RPC behavior backward compatible for v1 clients.
-
-## Routing decision schema
-
-A v1 decision includes at least:
-
-- `schema_version`
-- `correlation_id`
-- `status`
-- `selected`
-- `confidence`
-- `probabilities`
-- `reason`
-- `candidates`
-- `fallback`
-- `execution` with host execution initially `not_started`
-- `receipt`
-
-The selected id is advisory until the host resolves it against its own capability registry and permissions. `correlation_id` is the join key for routing and execution records.
-
-## Execution receipts
-
-A v1 `execution_receipt` is append-only JSONL data with:
-
-- `record_type: "execution_receipt"`
-- `schema_version: 1`
-- `receipt_id`
-- `correlation_id`
-- `harness`
-- the selected/candidate decision summary;
-- Jev provider, latency, cost, and status;
-- bounded host status/result/error plus optional exit and timing metadata.
-
-The host must record `completed`, `failed`, or `not_started`. Receipts must not contain unbounded prompts, secrets, or raw credentials. Receipts are evidence of what the host reported; they do not grant permission or prove that Jev executed anything.
-
-## Replay cases
-
-A v1 replay file is JSONL. Supported records include:
-
-- `record_type: "routing_case"`
-- `record_type: "execution_receipt"`
-- `record_type: "supervision_case"`
-
-Routing cases retain a sanitized request and a decision summary. Replay reads cases without calling host tools. New optional record fields are compatible; changing record type, correlation semantics, or the meaning of a recorded status requires a new replay schema and migration.
-
-## Adapter contract
-
-The adapter contract is currently **v1** and is intentionally separate from provider/model versions. A v1 adapter must:
-
-1. submit a bounded candidate set;
-2. call `jev_route` or the equivalent CLI contract;
-3. preserve `correlation_id`;
-4. keep native execution and permissions in the host;
-5. preserve approval decisions;
-6. call `jev_record_execution` after host execution or denial;
-7. fail open to the native path when Jev is unavailable or inconclusive.
-
-An adapter that cannot preserve these invariants is not v1-compatible. Record supported adapter versions in integration documentation and release checklists.
-
-## Compatibility review
-
-For every release, review:
-
-- v1 request/decision fixtures;
-- MCP `tools/list` and `tools/call` smoke cases;
-- receipt/replay round trips;
-- all supported adapter examples;
-- fail-open and approval-denial paths;
-- package contents and translated documentation.
+# Schema and compatibility policy
+
+[English](../README.md) | [Русский](../README.ru.md) | [简体中文](../README.zh-CN.md)
+
+The current public contracts are **schema version 1**. The implementation already emits `schema_version: 1` for route requests, decision envelopes, routing cases, execution receipts, and supervision cases. A new public release must not silently change the meaning of those v1 fields.
+
+## Version rules
+
+- **Patch release:** bug fixes and documentation changes; v1 meanings remain unchanged.
+- **Minor release:** additive optional fields, new providers, new adapters, or new capability kinds that v1 consumers can ignore.
+- **Major release:** removed/renamed required fields, changed field types or meanings, changed correlation semantics, or a host-approval contract change.
+- Unknown fields must be ignored by readers. Writers must not emit a required field unless it is part of the declared schema version.
+- New runtime behavior must remain opt-in and fail open unless the existing contract explicitly requires it.
+
+A breaking schema requires a new schema version, migration notes, fixtures for both versions, and an adapter compatibility decision. Do not change v1 to avoid writing a migration.
+
+## MCP tools
+
+The MCP server currently exposes these stable tool names:
+
+- `jev_route`
+- `jev_browser_step` (experimental, opt-in)
+- `jev_supervise` (experimental, opt-in)
+- `jev_model_route` (report-only; experimental, opt-in)
+- `jev_shadow_compaction` (report-only; experimental, opt-in)
+- `jev_record_execution`
+
+Their input and structured output are v1. Additive optional properties are compatible. Renaming a tool, changing a required property, changing the meaning of a status, or changing who owns execution requires a new tool/schema version and adapter migration. Keep `tools/list`, `initialize`, and stdio JSON-RPC behavior backward compatible for v1 clients.
+
+## Routing decision schema
+
+A v1 decision includes at least:
+
+- `schema_version`
+- `correlation_id`
+- `status`
+- `selected`
+- `confidence`
+- `probabilities`
+- `reason`
+- `candidates`
+- `fallback`
+- `execution` with host execution initially `not_started`
+- `receipt`
+
+The selected id is advisory until the host resolves it against its own capability registry and permissions. `correlation_id` is the join key for routing and execution records.
+
+## Execution receipts
+
+A v1 `execution_receipt` is append-only JSONL data with:
+
+- `record_type: "execution_receipt"`
+- `schema_version: 1`
+- `receipt_id`
+- `correlation_id`
+- `harness`
+- the selected/candidate decision summary;
+- Jev provider, latency, cost, and status;
+- bounded host status/result/error plus optional exit and timing metadata.
+
+The host must record `completed`, `failed`, or `not_started`. Receipts must not contain unbounded prompts, secrets, or raw credentials. Receipts are evidence of what the host reported; they do not grant permission or prove that Jev executed anything.
+
+## Replay cases
+
+A v1 replay file is JSONL. Supported records include:
+
+- `record_type: "routing_case"`
+- `record_type: "execution_receipt"`
+- `record_type: "supervision_case"`
+
+Routing cases retain a sanitized request and a decision summary. `supervision_case.supervision.evidence_state` is an optional v1 object with `state` (`present`, `missing`, or `contradictory`) and bounded source labels. Replay reads cases without calling host tools. New optional record fields are compatible; changing record type, correlation semantics, or the meaning of a recorded status requires a new replay schema and migration.
+
+## Adapter contract
+
+The adapter contract is currently **v1** and is intentionally separate from provider/model versions. A v1 adapter must:
+
+1. submit a bounded candidate set;
+2. call `jev_route` or the equivalent CLI contract;
+3. preserve `correlation_id`;
+4. keep native execution and permissions in the host;
+5. preserve approval decisions;
+6. call `jev_record_execution` after host execution or denial;
+7. fail open to the native path when Jev is unavailable or inconclusive.
+
+An adapter that cannot preserve these invariants is not v1-compatible. Record supported adapter versions in integration documentation and release checklists.
+
+## Compatibility review
+
+For every release, review:
+
+- v1 request/decision fixtures;
+- MCP `tools/list` and `tools/call` smoke cases;
+- receipt/replay round trips;
+- all supported adapter examples;
+- fail-open and approval-denial paths;
+- package contents and translated documentation.

package/docs/architecture.svg

@@ -0,0 +1,77 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1280 720" role="img" aria-labelledby="title desc">
+  <title id="title">jev-layer architecture</title>
+  <desc id="desc">Agent harnesses submit bounded requests to jev-layer. The host owns permissions and execution, while jev-layer returns a decision and records receipts for replay.</desc>
+  <defs>
+    <linearGradient id="surface" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0" stop-color="#f8fbff"/>
+      <stop offset="1" stop-color="#e9f3f8"/>
+    </linearGradient>
+    <linearGradient id="decision" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0" stop-color="#12314c"/>
+      <stop offset="1" stop-color="#14525a"/>
+    </linearGradient>
+    <linearGradient id="evidence" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0" stop-color="#eefcf7"/>
+      <stop offset="1" stop-color="#d8f3ee"/>
+    </linearGradient>
+    <marker id="arrow" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="8" markerHeight="8" orient="auto-start-reverse">
+      <path d="M 0 0 L 10 5 L 0 10 z" fill="#228e9b"/>
+    </marker>
+    <marker id="arrowLight" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="8" markerHeight="8" orient="auto-start-reverse">
+      <path d="M 0 0 L 10 5 L 0 10 z" fill="#b6e9e0"/>
+    </marker>
+    <filter id="shadow" x="-20%" y="-20%" width="140%" height="140%">
+      <feDropShadow dx="0" dy="8" stdDeviation="10" flood-color="#183b52" flood-opacity="0.13"/>
+    </filter>
+  </defs>
+  <rect width="1280" height="720" rx="28" fill="url(#surface)"/>
+  <text x="640" y="56" text-anchor="middle" fill="#102c45" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="28" font-weight="750">Host-owned execution, bounded decisions</text>
+  <text x="640" y="86" text-anchor="middle" fill="#567086" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="16">jev-layer chooses and records; the host validates and acts</text>
+
+  <g filter="url(#shadow)">
+    <rect x="70" y="145" width="300" height="205" rx="22" fill="#ffffff" stroke="#9bb4c7" stroke-width="2"/>
+    <rect x="70" y="145" width="300" height="52" rx="22" fill="#e6f0f6"/>
+    <path d="M70 175h300" stroke="#e6f0f6" stroke-width="2"/>
+    <text x="220" y="179" text-anchor="middle" fill="#173c57" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="20" font-weight="750">Agent harnesses</text>
+    <text x="104" y="232" fill="#294c63" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="17" font-weight="650">Hermes · OMP · Codex</text>
+    <text x="104" y="264" fill="#294c63" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="17" font-weight="650">generic MCP clients</text>
+    <text x="104" y="309" fill="#637d90" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="15">supplies intent, candidates, context</text>
+  </g>
+
+  <g filter="url(#shadow)">
+    <rect x="490" y="120" width="300" height="255" rx="22" fill="url(#decision)" stroke="#66e3c4" stroke-width="3"/>
+    <text x="640" y="168" text-anchor="middle" fill="#ffffff" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="26" font-weight="750">jev-layer</text>
+    <text x="640" y="195" text-anchor="middle" fill="#a9e8db" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="15" font-weight="650">SYSTEM-1 DECISION LAYER</text>
+    <path d="M535 222h210M535 273h210M535 324h210" stroke="#6ea7ac" stroke-opacity="0.55"/>
+    <text x="640" y="247" text-anchor="middle" fill="#f2ffff" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="17" font-weight="650">route · supervise</text>
+    <text x="640" y="298" text-anchor="middle" fill="#f2ffff" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="17" font-weight="650">context filter · fail-open</text>
+    <text x="640" y="349" text-anchor="middle" fill="#b6e9e0" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="15">returns one bounded decision + id</text>
+  </g>
+
+  <g filter="url(#shadow)">
+    <rect x="910" y="145" width="300" height="205" rx="22" fill="#ffffff" stroke="#9bb4c7" stroke-width="2"/>
+    <rect x="910" y="145" width="300" height="52" rx="22" fill="#e6f0f6"/>
+    <text x="1060" y="179" text-anchor="middle" fill="#173c57" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="20" font-weight="750">Host policy boundary</text>
+    <text x="944" y="232" fill="#294c63" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="17" font-weight="650">permissions · approvals</text>
+    <text x="944" y="264" fill="#294c63" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="17" font-weight="650">native execution · retries</text>
+    <text x="944" y="309" fill="#637d90" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="15">owns every side effect</text>
+  </g>
+
+  <path d="M370 220h110" stroke="#228e9b" stroke-width="4" marker-end="url(#arrow)"/>
+  <text x="425" y="204" text-anchor="middle" fill="#347485" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="14" font-weight="700">bounded request</text>
+  <path d="M490 315H370" stroke="#228e9b" stroke-width="4" marker-end="url(#arrow)"/>
+  <text x="430" y="342" text-anchor="middle" fill="#347485" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="14" font-weight="700">decision + correlation_id</text>
+  <path d="M790 220h120" stroke="#228e9b" stroke-width="4" marker-end="url(#arrow)"/>
+  <text x="850" y="204" text-anchor="middle" fill="#347485" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="14" font-weight="700">selected capability</text>
+  <path d="M910 315H790" stroke="#228e9b" stroke-width="4" marker-end="url(#arrow)"/>
+  <text x="850" y="342" text-anchor="middle" fill="#347485" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="14" font-weight="700">execution receipt</text>
+
+  <g filter="url(#shadow)">
+    <rect x="260" y="470" width="760" height="150" rx="22" fill="url(#evidence)" stroke="#69b9aa" stroke-width="2"/>
+    <text x="640" y="515" text-anchor="middle" fill="#14505a" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="23" font-weight="750">Evidence and replay</text>
+    <text x="640" y="552" text-anchor="middle" fill="#286b73" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="17" font-weight="650">jev_record_execution · receipts · JSONL cases</text>
+    <text x="640" y="584" text-anchor="middle" fill="#4f7e82" font-family="Inter, ui-sans-serif, system-ui, sans-serif" font-size="15">correlation_id joins the decision to the host result; replay never executes host work</text>
+  </g>
+  <path d="M640 375v90" stroke="#228e9b" stroke-width="4" marker-end="url(#arrow)"/>
+  <path d="M1060 350v72q0 48-48 48h-22" fill="none" stroke="#228e9b" stroke-width="4" marker-end="url(#arrow)"/>
+</svg>

package/docs/jev-layer-banner.svg

@@ -0,0 +1,38 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1200 260" role="img" aria-labelledby="title desc">
+  <title id="title">jev-layer</title>
+  <desc id="desc">Portable System-1 decision layer for agent harnesses.</desc>
+  <defs>
+    <linearGradient id="bg" x1="0" y1="0" x2="1" y2="1">
+      <stop offset="0" stop-color="#0b1220"/>
+      <stop offset="0.55" stop-color="#12233d"/>
+      <stop offset="1" stop-color="#123f4a"/>
+    </linearGradient>
+    <linearGradient id="accent" x1="0" y1="0" x2="1" y2="0">
+      <stop offset="0" stop-color="#66e3c4"/>
+      <stop offset="1" stop-color="#8bd5ff"/>
+    </linearGradient>
+    <filter id="shadow" x="-20%" y="-20%" width="140%" height="140%">
+      <feDropShadow dx="0" dy="10" stdDeviation="12" flood-color="#000" flood-opacity="0.24"/>
+    </filter>
+  </defs>
+  <rect width="1200" height="260" rx="28" fill="url(#bg)"/>
+  <circle cx="1080" cy="-15" r="220" fill="#66e3c4" opacity="0.08"/>
+  <circle cx="1120" cy="245" r="180" fill="#8bd5ff" opacity="0.08"/>
+  <g filter="url(#shadow)">
+    <rect x="72" y="64" width="132" height="132" rx="30" fill="#152e46" stroke="#66e3c4" stroke-width="2"/>
+    <path d="M105 128h66M138 95v66" stroke="url(#accent)" stroke-width="12" stroke-linecap="round"/>
+    <circle cx="138" cy="128" r="18" fill="#0b1220" stroke="#8bd5ff" stroke-width="4"/>
+  </g>
+  <text x="248" y="128" fill="#f6fbff" font-family="Inter, ui-sans-serif, system-ui, -apple-system, sans-serif" font-size="66" font-weight="750" letter-spacing="-2">jev-layer</text>
+  <text x="252" y="166" fill="#b9cce0" font-family="Inter, ui-sans-serif, system-ui, -apple-system, sans-serif" font-size="24" font-weight="500">portable System-1 decisions for agent harnesses</text>
+  <g font-family="Inter, ui-sans-serif, system-ui, -apple-system, sans-serif" font-size="15" font-weight="700" letter-spacing="1">
+    <rect x="252" y="191" width="112" height="34" rx="17" fill="#173d43" stroke="#66e3c4"/>
+    <text x="308" y="213" text-anchor="middle" fill="#9af0d9">ROUTE</text>
+    <rect x="376" y="191" width="126" height="34" rx="17" fill="#173d43" stroke="#66e3c4"/>
+    <text x="439" y="213" text-anchor="middle" fill="#9af0d9">RECEIPTS</text>
+    <rect x="514" y="191" width="112" height="34" rx="17" fill="#173d43" stroke="#66e3c4"/>
+    <text x="570" y="213" text-anchor="middle" fill="#9af0d9">REPLAY</text>
+    <rect x="638" y="191" width="130" height="34" rx="17" fill="#173d43" stroke="#8bd5ff"/>
+    <text x="703" y="213" text-anchor="middle" fill="#b9e4ff">FAIL-OPEN</text>
+  </g>
+</svg>

package/examples/capabilities.json

@@ -1,39 +1,39 @@
-[
-  {
-    "id": "repo_search",
-    "kind": "mcp",
-    "name": "Repository search",
-    "description": "Search repository files and symbols without changing files",
-    "permissions": ["read"],
-    "risk": "low",
-    "execution": { "target": "host-native-repository-search" }
-  },
-  {
-    "id": "browser_inspect",
-    "kind": "mcp",
-    "name": "Browser inspection",
-    "description": "Open a webpage and inspect visible browser state",
-    "permissions": ["browser"],
-    "risk": "medium",
-    "execution": { "target": "host-native-browser" }
-  },
-  {
-    "id": "terminal_read",
-    "kind": "cli",
-    "name": "Read-only terminal",
-    "description": "Run a read-only shell command and return its output",
-    "permissions": ["terminal:read"],
-    "risk": "low",
-    "execution": { "target": "host-native-terminal" }
-  },
-  {
-    "id": "file_write",
-    "kind": "tool",
-    "name": "File writer",
-    "description": "Modify files in the repository",
-    "permissions": ["write"],
-    "risk": "high",
-    "execution": { "target": "host-native-write" },
-    "policy": { "requires_confirmation": true }
-  }
-]
+[
+  {
+    "id": "repo_search",
+    "kind": "mcp",
+    "name": "Repository search",
+    "description": "Search repository files and symbols without changing files",
+    "permissions": ["read"],
+    "risk": "low",
+    "execution": { "target": "host-native-repository-search" }
+  },
+  {
+    "id": "browser_inspect",
+    "kind": "mcp",
+    "name": "Browser inspection",
+    "description": "Open a webpage and inspect visible browser state",
+    "permissions": ["browser"],
+    "risk": "medium",
+    "execution": { "target": "host-native-browser" }
+  },
+  {
+    "id": "terminal_read",
+    "kind": "cli",
+    "name": "Read-only terminal",
+    "description": "Run a read-only shell command and return its output",
+    "permissions": ["terminal:read"],
+    "risk": "low",
+    "execution": { "target": "host-native-terminal" }
+  },
+  {
+    "id": "file_write",
+    "kind": "tool",
+    "name": "File writer",
+    "description": "Modify files in the repository",
+    "permissions": ["write"],
+    "risk": "high",
+    "execution": { "target": "host-native-write" },
+    "policy": { "requires_confirmation": true }
+  }
+]

package/examples/route-request.json

@@ -1,28 +1,28 @@
-{
-  "schema_version": 1,
-  "harness": "example",
-  "intent": "Find where the routing decision is implemented in this repository",
-  "context": {
-    "workspace": "jev-layer",
-    "api_key": "must-not-reach-provider"
-  },
-  "actor_permissions": ["read"],
-  "capabilities": [
-    {
-      "id": "repo_search",
-      "kind": "mcp",
-      "name": "Repository search",
-      "description": "Search repository files and symbols without changing files",
-      "permissions": ["read"],
-      "risk": "low"
-    },
-    {
-      "id": "file_write",
-      "kind": "tool",
-      "name": "File writer",
-      "description": "Modify files in the repository",
-      "permissions": ["write"],
-      "risk": "high"
-    }
-  ]
-}
+{
+  "schema_version": 1,
+  "harness": "example",
+  "intent": "Find where the routing decision is implemented in this repository",
+  "context": {
+    "workspace": "jev-layer",
+    "api_key": "must-not-reach-provider"
+  },
+  "actor_permissions": ["read"],
+  "capabilities": [
+    {
+      "id": "repo_search",
+      "kind": "mcp",
+      "name": "Repository search",
+      "description": "Search repository files and symbols without changing files",
+      "permissions": ["read"],
+      "risk": "low"
+    },
+    {
+      "id": "file_write",
+      "kind": "tool",
+      "name": "File writer",
+      "description": "Modify files in the repository",
+      "permissions": ["write"],
+      "risk": "high"
+    }
+  ]
+}

package/integrations/codex/.codex-plugin/plugin.json

@@ -1,19 +1,19 @@
-{
-  "name": "jev-layer",
-  "version": "0.1.0",
-  "description": "Host-owned Jev capability routing through the standalone jev-layer core",
-  "author": { "name": "Local Jev Layer" },
-  "license": "MIT",
-  "keywords": ["jev", "routing", "decision", "mcp"],
-  "skills": "./skills/",
-  "mcpServers": "./.mcp.json",
-  "interface": {
-    "displayName": "Jev Layer",
-    "shortDescription": "Bounded capability decisions without host execution",
-    "longDescription": "Routes a closed candidate set and leaves approvals and execution to Codex.",
-    "developerName": "Local Jev Layer",
-    "category": "Developer Tools",
-    "capabilities": ["Decision routing"],
-    "defaultPrompt": ["Use Jev only for bounded capability routing; keep execution and approvals in Codex."]
-  }
-}
+{
+  "name": "jev-layer",
+  "version": "0.1.0",
+  "description": "Host-owned Jev capability routing through the standalone jev-layer core",
+  "author": { "name": "Local Jev Layer" },
+  "license": "MIT",
+  "keywords": ["jev", "routing", "decision", "mcp"],
+  "skills": "./skills/",
+  "mcpServers": "./.mcp.json",
+  "interface": {
+    "displayName": "Jev Layer",
+    "shortDescription": "Bounded capability decisions without host execution",
+    "longDescription": "Routes a closed candidate set and leaves approvals and execution to Codex.",
+    "developerName": "Local Jev Layer",
+    "category": "Developer Tools",
+    "capabilities": ["Decision routing"],
+    "defaultPrompt": ["Use Jev only for bounded capability routing; keep execution and approvals in Codex."]
+  }
+}

package/integrations/codex/.mcp.json

@@ -1,11 +1,11 @@
-{
-  "mcpServers": {
-    "jev": {
-      "type": "stdio",
-      "command": "node",
-      "args": ["./run-mcp.mjs"],
-      "cwd": ".",
-      "env_vars": ["JEV_LAYER_ROOT", "JEV_LAYER_PROVIDER", "OPENROUTER_API_KEY"]
-    }
-  }
-}
+{
+  "mcpServers": {
+    "jev": {
+      "type": "stdio",
+      "command": "node",
+      "args": ["./run-mcp.mjs"],
+      "cwd": ".",
+      "env_vars": ["JEV_LAYER_ROOT", "JEV_LAYER_PROVIDER", "OPENROUTER_API_KEY"]
+    }
+  }
+}

package/integrations/codex/AGENTS.md

@@ -1 +1 @@
-When this adapter is enabled, use `jev_route` only for bounded closed-set capability routing. The tool returns an identifier; Codex owns all execution and approvals. On fallback, low confidence, malformed response, unavailable capability, or timeout, continue with normal Codex planning. Never send secrets or full transcripts to Jev.
+When this adapter is enabled, use `jev_route` only for bounded closed-set capability routing. The tool returns an identifier; Codex owns all execution and approvals. On fallback, low confidence, malformed response, unavailable capability, or timeout, continue with normal Codex planning. Never send secrets or full transcripts to Jev.

package/integrations/codex/run-mcp.mjs

@@ -1,9 +1,9 @@
-import { dirname, resolve } from "node:path";
-import { fileURLToPath } from "node:url";
-
-const pluginRoot = dirname(fileURLToPath(import.meta.url));
-const projectRoot = process.env.JEV_LAYER_ROOT
-  ? resolve(process.env.JEV_LAYER_ROOT)
-  : resolve(pluginRoot, "../..");
-
-await import(resolve(projectRoot, "src/mcp-server.mjs"));
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const pluginRoot = dirname(fileURLToPath(import.meta.url));
+const projectRoot = process.env.JEV_LAYER_ROOT
+  ? resolve(process.env.JEV_LAYER_ROOT)
+  : resolve(pluginRoot, "../..");
+
+await import(resolve(projectRoot, "src/mcp-server.mjs"));

package/integrations/codex/skills/jev-route/SKILL.md

@@ -1,17 +1,17 @@
----
-name: jev-route
-description: Use Jev for one bounded capability choice when a closed candidate set is already available. Keep permissions, approvals, execution, and recovery in Codex.
----
-
-# Jev route
-
-Use the `jev_route` MCP tool only when the request can be expressed as one bounded choice among supplied capabilities.
-
-1. Build a small candidate list from capabilities Codex can already execute.
-2. Include only non-secret intent, candidate metadata, and the minimum context needed.
-3. Call `jev_route` once.
-4. Treat `fallback`, `no_decision`, and `needs_confirmation` as normal outcomes.
-5. Execute `selected` only through the native Codex capability and its existing approval gate.
-6. Never interpret a Jev response as permission to bypass Codex policy.
-
-Do not use Jev for open-ended planning, coding, research, recovery, or arbitrary tool execution.
+---
+name: jev-route
+description: Use Jev for one bounded capability choice when a closed candidate set is already available. Keep permissions, approvals, execution, and recovery in Codex.
+---
+
+# Jev route
+
+Use the `jev_route` MCP tool only when the request can be expressed as one bounded choice among supplied capabilities.
+
+1. Build a small candidate list from capabilities Codex can already execute.
+2. Include only non-secret intent, candidate metadata, and the minimum context needed.
+3. Call `jev_route` once.
+4. Treat `fallback`, `no_decision`, and `needs_confirmation` as normal outcomes.
+5. Execute `selected` only through the native Codex capability and its existing approval gate.
+6. Never interpret a Jev response as permission to bypass Codex policy.
+
+Do not use Jev for open-ended planning, coding, research, recovery, or arbitrary tool execution.