ohmyjev 0.2.0 → 0.3.0

package/README.md

@@ -16,6 +16,7 @@
   <img alt="Claude Code 2.1.287+" src="https://img.shields.io/badge/Claude_Code-2.1.287%2B-d97757">
   <img alt="Decided by Jev" src="https://img.shields.io/badge/decided_by-Jev-101315">
   <img alt="pi and omp" src="https://img.shields.io/badge/also_for-pi_·_omp-86a893">
+  <a href="https://www.npmjs.com/package/ohmyjev"><img alt="npm" src="https://img.shields.io/npm/v/ohmyjev?color=de6145"></a>
   <img alt="MIT license" src="https://img.shields.io/badge/license-MIT-798186">
 </p>
 
@@ -48,17 +49,17 @@ Then start Claude Code and run:
 
 ```
 /plugin install ohmyjev --marketplace Novacon/ohmyjev
-/jev
+/omj
 ```
 
-If `/jev` ends with `key: env TYPESAFE_API_KEY · typesafe · jev-1.13.0`, you're set.
+If `/omj` ends with `key: env TYPESAFE_API_KEY · typesafe · jev-1.13.0`, you're set.
 
 ## What you get
 
 | Feature | What it does |
 |---|---|
 | **Bash gate** | Denies a command when Jev rates it irreversible at 0.6 or more, or destructive at 0.7 or more. |
-| **Write gate** | Denies writes outside the repo and `allowPaths`, and writes that contain a real credential. The path check is plain code, not Jev, and it follows symlinks the same way the OS does. |
+| **Write gate** | Denies writes outside the repo and `allowPaths`, and writes that contain a real credential. The repo is every worktree of the one the session started in, plus every worktree of whichever repo the agent has moved into. The path check is plain code, not Jev, and it follows symlinks the same way the OS does. |
 | **Exfil gate** | Denies a WebFetch or MCP call when Jev rates it 0.7 or more for sending your local data, files or credentials out. |
 | **Policies** | Every gate also checks the call against your own rules in the `policies` setting. |
 | **Injection screen** | When output from Bash, WebFetch, an MCP tool, or a Read outside the repo has instructions aimed at the model, it adds a note telling the model to treat that output as data. |
@@ -66,7 +67,7 @@ If `/jev` ends with `key: env TYPESAFE_API_KEY · typesafe · jev-1.13.0`, you'r
 | **Router** | Asks Jev once per request for a tier, an effort level and a risk score. Then it raises or lowers effort and picks the model for general-purpose subagents. With no key it falls back to Claude Code's built-in classifier, which reports no confidence, so then it only ever routes up. |
 | **Auto-compact** | When the task changes after a finished step and the context is at least 40% full, it compacts the conversation. The summary keeps the new request in full. |
 | **`ask_jev`** | A tool the model can use to ask Jev about repo files or text without loading them into its own context. |
-| **`/jev`** | Shows this session's Jev calls, errors, cost, median latency and denies, plus where the key comes from. It never prints the key itself. |
+| **`/omj`** | Shows this session's Jev calls, errors, cost, median latency and denies, plus where the key comes from. It never prints the key itself. `/omj stats` opens a dashboard of every session in your browser. `/omj off` and `/omj on` switch ohmyjev for the session. `/ohmyjev` is the same command. |
 
 ### How a tool call goes through it
 
@@ -120,11 +121,11 @@ You've got three options, in the order ohmyjev looks for them:
 1. **The settings screen.** During the install, ohmyjev shows a screen with its options, including the TypeSafe
    key. Claude Code keeps it in secure storage, not in a settings file.
 2. **`TYPESAFE_API_KEY`** in your environment, for example in `~/.zshrc`.
-3. **`OPENROUTER_API_KEY`** in your environment. ohmyjev then calls Jev through OpenRouter as `~typesafe/jev-latest`.
+3. **`OPENROUTER_API_KEY`** in your environment. ohmyjev then calls Jev through OpenRouter as `~typesafe/omj-latest`.
 
 ### 4. Check it works
 
-Start a session and run `/jev`. The last line tells you where the key came from:
+Start a session and run `/omj`. The last line tells you where the key came from:
 
 ```
 key: env TYPESAFE_API_KEY · typesafe · jev-1.13.0
@@ -137,17 +138,17 @@ Code's built-in classifier (up only), and the status under the prompt shows `jev
 
 The same checks run in [pi](https://pi.dev) and [omp](https://github.com/can1357/oh-my-pi) as a native extension.
 They share the decision logic and the key lookup (`TYPESAFE_API_KEY`, then `OPENROUTER_API_KEY`) with the Claude Code
-plugin, and write to the same `~/.ohmyjev` logs, so `/jev` and the statusline segment work the same way.
+plugin, and write to the same `~/.ohmyjev` logs, so `/omj` and the statusline segment work the same way.
 
 ### omp
 
 ```bash
-omp plugin install github:Novacon/ohmyjev
+omp plugin install ohmyjev
 ```
 
-Or from the marketplace this repo already serves: `/marketplace add Novacon/ohmyjev`, then
-`/marketplace install ohmyjev@ohmyjev`. Restart the session after installing. Settings use the names in
-[Settings](#settings):
+That installs the npm package; `omp plugin install github:Novacon/ohmyjev` installs straight from GitHub instead. Or use
+the marketplace this repo already serves: `/marketplace add Novacon/ohmyjev`, then `/marketplace install ohmyjev@ohmyjev`.
+Restart the session after installing. Settings use the names in [Settings](#settings):
 
 ```bash
 omp plugin config list ohmyjev
@@ -159,9 +160,11 @@ The router's tiers default to omp's own model roles: `@smol`, `@default` and `@s
 ### pi
 
 ```bash
-pi install git:github.com/Novacon/ohmyjev
+pi install npm:ohmyjev
 ```
 
+Or straight from GitHub: `pi install git:github.com/Novacon/ohmyjev`.
+
 pi has no settings screen for extensions, so put yours under an `ohmyjev` key in `~/.pi/agent/settings.json`, or in
 `.pi/settings.json` for one project (project values win):
 
@@ -198,9 +201,9 @@ This block is final. Do not try to work around it with another command, another
 or an encoding that does the same thing. Stop and tell the user what was blocked and why.
 ```
 
-### `/jev`
+### `/omj`
 
-Run it any time to see what this session has been up to. Here's an example:
+Run it any time to see what this session has been up to (`/ohmyjev` does the same). Here's an example:
 
 ```
 jev ✓23 ⛔1 ↑opus/high
@@ -246,6 +249,18 @@ said, then what the router did with it:
 [ohmyjev] main loop kept opus/medium, wanted opus/low (confidence 0.38)
 ```
 
+### `/omj stats`
+
+Writes every session's decisions into one page at `~/.ohmyjev/dashboard.html` and opens it: calls, denies, flags, cost
+and latency, a 30-day chart, a table per tool and per session, and the latest denies with their reasons. It's a plain
+file, read from the logs, so nothing on it leaves the machine (the page fetches its fonts from ohmyjev.xyz, and falls
+back to system fonts offline).
+
+### `/omj off`
+
+Turns every gate, screen, the done-check and the router off for this session, and the status shows `jev off`.
+`/omj on` brings them back. To start sessions off by default, turn off the `enabled` setting.
+
 The last line is the router declining to act: it wanted to spend less, but 0.38 is under the 0.6 it takes to move
 down. In a `claude -p` or SDK run the same lines arrive as `ui_log` messages and in the debug log. Turn them off with
 `logDecisions`.
@@ -272,11 +287,12 @@ if jev:
 
 ## Settings
 
-Run `/jev settings` to see every setting's current value (the key stays hidden). To change them, run
+Run `/omj settings` to see every setting's current value (the key stays hidden). To change them, run
 `/plugin configure ohmyjev@ohmyjev` inside Claude Code, then `/reload-plugins`.
 
 | Setting | Default | What it changes |
 |---|---|---|
+| `enabled` | on | The whole mod. Off lets every call through; `/omj on` and `/omj off` change it for one session. |
 | `bashGate`, `writeGate`, `exfilGate` | on | Turns each gate on or off. |
 | `injectionScreen`, `screenReads` | on | Screens tool output, including Reads from outside the repo. |
 | `doneCheck` | on | Pushes back on an unverified "done". |
@@ -286,7 +302,7 @@ Run `/jev settings` to see every setting's current value (the key stays hidden).
 | `autoCompact` | on | Compacts when the task changes. `compactMinPercent` (40) sets how full the context has to be first. |
 | `askJev` | on | Gives the model the `ask_jev` tool. |
 | `policies` | empty | Your own rules, separated by `;`. |
-| `allowPaths` | `~/.claude;$TMPDIR;/tmp` | Places outside the repo where writes are allowed. ohmyjev ignores any entry with `..` in it. |
+| `allowPaths` | `~/.claude;$TMPDIR;/tmp` | Places outside the repo where writes are allowed. ohmyjev ignores any entry with `..` in it. You don't need it for a sibling worktree or another git repo the agent `cd`s into: those count as the repo. |
 | `fastModel`, `balancedModel`, `deepModel` | `claude-haiku-5-5`, `claude-sonnet-5-5`, `claude-opus-5-5` | The model id for each router tier. |
 | `jevModel` | `jev-1.13.0` | The Jev model asked through TypeSafe. |
 | `timeoutMs` | 1500 | How long a gate, the screen or the router waits for Jev before letting the call through. |
@@ -327,6 +343,12 @@ have set up, through pi's own provider. Logs and session files stay in `~/.ohmyj
 ```bash
 claude plugin update ohmyjev@ohmyjev      # then restart Claude Code
 claude plugin uninstall ohmyjev@ohmyjev
+
+omp plugin upgrade ohmyjev                # omp; restart the session
+omp plugin uninstall ohmyjev
+
+pi update npm:ohmyjev                     # pi
+pi remove npm:ohmyjev
 ```
 
 ## Troubleshooting
@@ -335,9 +357,9 @@ claude plugin uninstall ohmyjev@ohmyjev
 Claude Code, or enter the key with `/plugin configure ohmyjev@ohmyjev`.
 
 **The status says `jev ⚠ down`.** A Jev call failed or took longer than `timeoutMs` (1.5 s) in the last 5 minutes. The
-gates let calls through until Jev answers again. `/jev` shows the error count.
+gates let calls through until Jev answers again. `/omj` shows the error count.
 
-**Something got blocked that shouldn't have.** `/jev` shows the reason and Jev's numbers. Raise that gate's threshold
+**Something got blocked that shouldn't have.** `/omj` shows the reason and Jev's numbers. Raise that gate's threshold
 with `/plugin configure ohmyjev@ohmyjev`, or turn the gate off. Local MCP tools sometimes trip the exfil gate, and `exfilGate` is the switch for
 that.
 

package/adapters/omp.ts

@@ -4,7 +4,8 @@
 import { readFile } from 'node:fs/promises'
 import {
   BASH_Q, DEFAULTS, EXFIL_Q, ROUTE_Q, SCREEN_Q, STOP_Q, SWITCHED_Q, WRITE_Q,
-  clip, decideRoute, denyText, gateBash, gateExfil, gateWrite, jevRouteLine, judgeStop,
+  clip, decideRoute, denyText, gateBash, gateExfil, gateWrite, jevRouteLine, judgeStop, pathDenyText,
+  OMJ_HELP, OMJ_OFF, OMJ_ON, settingsRows, toggleArg,
   keepInstructions, modelOf, readConfig, routeStep, screen, stepLine, withPolicies, withPolicyQ,
   type Config, type Route,
 } from '../hooks/policy.ts'
@@ -267,7 +268,7 @@ export function createExtension(options: OmpExtensionOptions = {}): (pi: OmpApi)
     const status = (): void => {
       try {
         if (!latestContext) return
-        latestContext.ui.setStatus('ohmyjev', c.statusLine && session ? session.status() : undefined)
+        latestContext.ui.setStatus('ohmyjev', c.statusLine && session ? session.status(Date.now(), c.enabled) : undefined)
       } catch {}
     }
 
@@ -460,7 +461,7 @@ export function createExtension(options: OmpExtensionOptions = {}): (pi: OmpApi)
     pi.on('tool_call', async (rawEvent, ctx) => {
       try {
         touch(ctx)
-        if (!session) return
+        if (!session || !c.enabled) return
         const event = rawEvent as ToolCall
         const tool = event.toolName
         const input = object(event.input)
@@ -497,9 +498,8 @@ export function createExtension(options: OmpExtensionOptions = {}): (pi: OmpApi)
           }
           for (const path of paths) {
             if (!sessionLocalWrite(path) && !(await pathAllowed(path, ctx.cwd, root, c, env))) {
-              const reason = `${path} is outside the repo and allowPaths`
-              session.denyByCode(tool, reason)
-              return { block: true, reason: denyText(reason) }
+              session.denyByCode(tool, `${path} is outside the repo and allowPaths`)
+              return { block: true, reason: pathDenyText(path) }
             }
           }
           const path = paths.join('; ')
@@ -533,7 +533,7 @@ export function createExtension(options: OmpExtensionOptions = {}): (pi: OmpApi)
     pi.on('tool_result', async (rawEvent, ctx) => {
       try {
         touch(ctx)
-        if (!session || !c.injectionScreen) return
+        if (!session || !c.enabled || !c.injectionScreen) return
         const event = rawEvent as ToolResult
         const tool = event.toolName
         const input = object(event.input)
@@ -560,6 +560,7 @@ export function createExtension(options: OmpExtensionOptions = {}): (pi: OmpApi)
         touch(ctx)
         if (!session || ctx.agent.kind !== 'main') return
         restoreUserThinking(ctx)
+        if (!c.enabled) return
         if (!(c.doneCheck || c.autoCompact)) return
         const event = rawEvent as unknown as StopEvent
         if (event.stop_hook_active) {
@@ -605,7 +606,7 @@ export function createExtension(options: OmpExtensionOptions = {}): (pi: OmpApi)
     pi.on('before_agent_start', async (rawEvent, ctx) => {
       try {
         touch(ctx)
-        if (ctx.agent.kind !== 'main') return
+        if (ctx.agent.kind !== 'main' || !c.enabled) return
         userEffort = userThinking(ctx)
         const prompt = typeof rawEvent.prompt === 'string' ? rawEvent.prompt : ''
         if (!prompt.trim()) return
@@ -650,17 +651,30 @@ export function createExtension(options: OmpExtensionOptions = {}): (pi: OmpApi)
       }
     })
 
-    pi.registerCommand('jev', {
-      description: "ohmyjev: this session's Jev calls, denies, cost and key source",
-      async handler(_args, ctx) {
-        try {
-          touch(ctx)
-          ctx.ui.notify(session ? await session.report() : 'ohmyjev: no active session', 'info')
-        } catch {
-          try { ctx.ui.notify('ohmyjev: report unavailable', 'error') } catch {}
-        }
-      },
-    })
+    /** /omj and /ohmyjev: the report, `settings`, or `on`/`off` for this session (the enabled setting is the default). */
+    const command = async (args: string, ctx: HostContext): Promise<void> => {
+      try {
+        touch(ctx)
+        const a = args.trim()
+        const enabled = toggleArg(a)
+        if (enabled !== undefined) {
+          c = { ...c, enabled }
+          if (!enabled) {
+            route = undefined
+            compactPending = false
+          }
+          status()
+          ctx.ui.notify(enabled ? OMJ_ON : OMJ_OFF, 'info')
+        } else if (a === 'stats') ctx.ui.notify(session ? await session.dashboard('omp') : 'ohmyjev: no active session', 'info')
+        else if (a === 'settings') ctx.ui.notify(settingsRows(c).join('\n'), 'info')
+        else if (a) ctx.ui.notify(OMJ_HELP, 'info')
+        else ctx.ui.notify(session ? await session.report(c.enabled) : 'ohmyjev: no active session', 'info')
+      } catch {
+        try { ctx.ui.notify('ohmyjev: report unavailable', 'error') } catch {}
+      }
+    }
+    for (const name of ['omj', 'ohmyjev'])
+      pi.registerCommand(name, { description: "ohmyjev: this session's Jev calls, denies, cost and key source; stats opens the dashboard; on/off for this session", handler: command })
   }
 }
 

package/adapters/pi.ts

@@ -1,7 +1,8 @@
 import { readFile } from 'node:fs/promises'
 import {
   BASH_Q, EXFIL_Q, ROUTE_Q, SCREEN_Q, STOP_Q, SWITCHED_Q, WRITE_Q,
-  TIER_LABELS, builtinRoute, clip, decideRoute, denyText, gateBash, gateExfil, gateWrite, jevRouteLine, judgeStop,
+  TIER_LABELS, builtinRoute, clip, decideRoute, denyText, gateBash, gateExfil, gateWrite, jevRouteLine, judgeStop, pathDenyText,
+  OMJ_HELP, OMJ_OFF, OMJ_ON, settingsRows, toggleArg,
   keepInstructions, readConfig, routeStep, screen, stepLine, withPolicies, withPolicyQ,
   type Config, type Route,
 } from '../hooks/policy.ts'
@@ -264,7 +265,7 @@ export function createExtension(options: PiAdapterOptions = {}) {
     const status = (): void => {
       if (!c.statusLine || !session || !latestCtx) return
       try {
-        latestCtx.ui.setStatus('ohmyjev', session.status())
+        latestCtx.ui.setStatus('ohmyjev', session.status(Date.now(), c.enabled))
       } catch {}
     }
     const say = (ctx: PiContext, line: string): void => {
@@ -348,17 +349,28 @@ export function createExtension(options: PiAdapterOptions = {}) {
       askRegistered = true
     }
 
-    pi.registerCommand('jev', {
-      description: "ohmyjev: this session's Jev calls, denies, cost and key source",
-      handler: async (_args, ctx) => {
-        try {
-          const x = await ensureSession(ctx)
-          ctx.ui.notify(await x.report(), 'info')
-        } catch {
-          ctx.ui.notify('ohmyjev report unavailable', 'warning')
-        }
-      },
-    })
+    /** /omj and /ohmyjev: the report, `settings`, or `on`/`off` for this session (the enabled setting is the default). */
+    const command = async (args: string, ctx: PiContext): Promise<void> => {
+      try {
+        const x = await ensureSession(ctx)
+        const a = args.trim()
+        const enabled = toggleArg(a)
+        if (enabled !== undefined) {
+          c = { ...c, enabled }
+          if (!enabled) {
+            route = undefined
+            compactPending = false
+          }
+          status()
+          ctx.ui.notify(enabled ? OMJ_ON : OMJ_OFF, 'info')
+        } else if (a === 'stats') ctx.ui.notify(await x.dashboard('pi'), 'info')
+        else ctx.ui.notify(a === 'settings' ? settingsRows(c).join('\n') : a ? OMJ_HELP : await x.report(c.enabled), 'info')
+      } catch {
+        ctx.ui.notify('ohmyjev report unavailable', 'warning')
+      }
+    }
+    for (const name of ['omj', 'ohmyjev'])
+      pi.registerCommand(name, { description: "ohmyjev: this session's Jev calls, denies, cost and key source; stats opens the dashboard; on/off for this session", handler: command })
 
     pi.on('session_start', guarded(async (_event, ctx) => {
       reset()
@@ -373,7 +385,7 @@ export function createExtension(options: PiAdapterOptions = {}) {
           ? `ready: Jev via ${key.provider} (${key.model}, key from ${key.source})`
           : `no Jev key: gates and screens let every call through${c.routeWithoutKey ? '; routing uses Pi\'s cheapest available model classifier, up only' : ''}. Set TYPESAFE_API_KEY or the apiKey setting.`,
       )
-      ctx.ui.setStatus('ohmyjev', c.statusLine ? x.status() : undefined)
+      ctx.ui.setStatus('ohmyjev', c.statusLine ? x.status(Date.now(), c.enabled) : undefined)
     }))
 
     pi.on('thinking_level_select', guarded<ThinkingLevelSelectEvent, void>((event) => {
@@ -391,6 +403,7 @@ export function createExtension(options: PiAdapterOptions = {}) {
 
     pi.on('before_agent_start', guarded<BeforeAgentStartEvent, void>(async (event, ctx) => {
       latestCtx = ctx
+      if (!c.enabled) return
       const text = event.prompt
       if (!text.trim()) return
       restoreThinking()
@@ -414,6 +427,7 @@ export function createExtension(options: PiAdapterOptions = {}) {
 
     pi.on('tool_call', guarded<ToolCallEvent, { block: true; reason: string }>(async (event, ctx) => {
       latestCtx = ctx
+      if (!c.enabled) return
       const x = await ensureSession(ctx)
       const tool = event.toolName
       const input = event.input
@@ -430,9 +444,8 @@ export function createExtension(options: PiAdapterOptions = {}) {
       if ((tool === 'write' || tool === 'edit') && c.writeGate) {
         const path = arg(input, 'path')
         if (!(await pathAllowed(path, ctx.cwd, root, c, env))) {
-          const reason = `${path} is outside the repo and allowPaths`
-          x.denyByCode(tool, reason)
-          return { block: true, reason: denyText(reason) }
+          x.denyByCode(tool, `${path} is outside the repo and allowPaths`)
+          return { block: true, reason: pathDenyText(path) }
         }
         const content = tool === 'write' ? arg(input, 'content') : json(input.edits)
         const d = await x.decide('tool.call', tool, withPolicies({ path, content: clip(content, CLIP) }, c), withPolicyQ(WRITE_Q, c))
@@ -458,6 +471,7 @@ export function createExtension(options: PiAdapterOptions = {}) {
 
     pi.on('tool_result', guarded<ToolResultEvent, { content: Content[]; structuredContent?: unknown }>(async (event, ctx) => {
       latestCtx = ctx
+      if (!c.enabled) return
       const tool = event.toolName
       const shell = tool === 'bash' || tool === 'powershell'
       if (!c.injectionScreen || (event.isError && !shell)) return
@@ -482,7 +496,7 @@ export function createExtension(options: PiAdapterOptions = {}) {
 
     pi.on('agent_before_settle', guarded<BoundaryEvent, { entries: Array<Record<string, unknown>>; continue: true }>(async (event, ctx) => {
       latestCtx = ctx
-      if (event.outcome !== 'completed' || event.continue || !event.context.canContinue || !(c.doneCheck || c.autoCompact)) return
+      if (!c.enabled || event.outcome !== 'completed' || event.continue || !event.context.canContinue || !(c.doneCheck || c.autoCompact)) return
       const { count, state } = messagesForStop(event.context.contextMessages)
       if (!count || count === pushedBackAt) return
       liveRequest = state.current_request

package/adapters/shared.ts

@@ -4,12 +4,12 @@
  * under pi (Node) and omp (Bun). Every decision stays in hooks/policy.ts; every failure passes the call through.
  */
 import { execFile } from 'node:child_process'
-import { appendFile, chmod, lstat, mkdir, readFile, realpath, writeFile } from 'node:fs/promises'
-import { fileURLToPath } from 'node:url'
+import { appendFile, chmod, lstat, mkdir, readFile, readdir, realpath, writeFile } from 'node:fs/promises'
+import { dashboardHtml } from '../hooks/dashboard.ts'
 import { ENDPOINTS, JevError, parseReply, pickKey, type Key } from '../hooks/jev.ts'
 import {
-  EMPTY_SESSION, absolute, buildQuestion, clip, expandRoot, isUnder, normalize, rawAbsolute, sanitizeSid, splitList, statusText,
-  summarize, type Answers, type Config, type LogEntry, type Questions, type SessionState, type Verdict,
+  DASHBOARD, EMPTY_SESSION, absolute, buildQuestion, clip, expandRoot, hostPath, isUnder, normalize, parseLog, parseWorktrees, rawAbsolute, sanitizeSid,
+  splitList, statusText, summarize, type Answers, type Config, type LogEntry, type Questions, type SessionState, type Verdict,
 } from '../hooks/policy.ts'
 
 export type Env = Readonly<Record<string, string | undefined>>
@@ -133,6 +133,20 @@ export class Session {
     this.log(d.e)
   }
 
+  /**
+   * /omj stats: every session's log as one page at ~/.ohmyjev/dashboard.html, opened with `open` or `xdg-open`
+   * (tests pass their own opener). The line to show the user.
+   */
+  async dashboard(source: string, open: (path: string) => Promise<boolean> = openInBrowser): Promise<string> {
+    await this.ready
+    const dir = `${this.dir}/log`
+    const names = (await readdir(dir).catch(() => [] as string[])).filter(n => n.endsWith('.jsonl'))
+    const logs = await Promise.all(names.map(n => readFile(`${dir}/${n}`, 'utf8').catch(() => '')))
+    const path = `${this.dir}/${DASHBOARD}`
+    await writeFile(path, dashboardHtml(parseLog(logs.join('\n')), { now: Date.now(), sid: this.sid, source }), { mode: 0o600 })
+    return `dashboard: ${path}${(await open(path)) ? ' (opened in your browser)' : ' (open it in a browser)'}`
+  }
+
   /** A deny decided by code (a path), counted and logged like Jev's. */
   denyByCode(tool: string, reason: string): void {
     this.s.denies++
@@ -146,23 +160,30 @@ export class Session {
     this.save()
   }
 
-  status(now = Date.now()): string {
-    return statusText(keyOf(this.c, this.env) ? this.s : { ...this.s, noKey: true }, now)
+  status(now = Date.now(), enabled = true): string {
+    return statusText(keyOf(this.c, this.env) ? this.s : { ...this.s, noKey: true }, now, enabled)
   }
 
-  /** /jev: this session's status and log summary, and where the key comes from (never the key). */
-  async report(): Promise<string> {
+  /** /omj: this session's status and log summary, and where the key comes from (never the key). */
+  async report(enabled = true): Promise<string> {
     await this.ready
     const log = await readFile(this.logPath, 'utf8').catch(() => '')
     const k = keyOf(this.c, this.env)
     return [
-      statusText(this.s, Date.now()),
+      statusText(this.s, Date.now(), enabled),
       summarize(log),
       `key: ${k ? `${k.source} · ${k.provider} · ${k.model}` : 'none (set TYPESAFE_API_KEY or the apiKey setting)'}`,
     ].join('\n')
   }
 }
 
+/** `open` on macOS, `xdg-open` elsewhere; false when neither works. */
+function openInBrowser(path: string): Promise<boolean> {
+  const { promise, resolve } = Promise.withResolvers<boolean>()
+  execFile('sh', ['-c', 'open "$0" 2>/dev/null || xdg-open "$0"', path], { timeout: 5000 }, err => resolve(!err))
+  return promise
+}
+
 // --- paths: code decides, never Jev ---
 
 /** The repo root: git's top level from cwd, else cwd itself. */
@@ -172,6 +193,13 @@ export function repoRoot(cwd: string): Promise<string> {
   return promise
 }
 
+/** Every checkout of the repo `cwd` is in; none when cwd is not in a repo or git is unavailable. */
+export function worktrees(cwd: string): Promise<string[]> {
+  const { promise, resolve } = Promise.withResolvers<string[]>()
+  execFile('git', ['-C', cwd, 'worktree', 'list', '--porcelain'], { timeout: 2000 }, (err, stdout) => resolve(err ? [] : parseWorktrees(stdout)))
+  return promise
+}
+
 /**
  * Where an absolute spelling lands by the OS's rules: each existing component's link followed as it is reached, then
  * `..` from where that link led. Null (deny) for a dangling link or a path that exists yet will not resolve.
@@ -194,25 +222,13 @@ async function place(p: string): Promise<string | null> {
   return cur || '/'
 }
 
-/**
- * The local path a pi or omp file tool actually opens: a `file://` URL as a path, and the `@` and stray `:` prefixes
- * both hosts drop. Null for any other `scheme://` target (omp's ssh:// writes to another machine): never a repo path.
- */
-export function hostPath(p: string): string | null {
-  if (/^file:\/\//i.test(p)) {
-    try {
-      return fileURLToPath(p)
-    } catch {
-      return null
-    }
-  }
-  if (/^[a-z][a-z0-9+.-]*:\/\//i.test(p)) return null
-  return /^@[/~]|^:[/~.]/.test(p) ? p.slice(1) : p
-}
+export { hostPath }
 
 /**
  * Allowed only when the OS's reading (raw spelling) and a normalizing tool's reading (lexical) both land in a root:
- * the repo, plus allowPaths for writes. Spelled the way the host's tools read it (hostPath); another machine never is.
+ * the session's repo, every worktree of the repo `cwd` is in (a sibling worktree, or another project the agent was
+ * told to work in), plus allowPaths for writes. Spelled the way the host's tools read it (hostPath); another machine
+ * never is.
  */
 export async function pathAllowed(spelled: string, cwd: string, root: string, c: Config, env: Env, withAllowPaths = true): Promise<boolean> {
   const path = hostPath(spelled)
@@ -220,7 +236,7 @@ export async function pathAllowed(spelled: string, cwd: string, root: string, c:
   const home = env.HOME ?? ''
   const roots: string[] = []
   const extra = withAllowPaths ? splitList(c.allowPaths).map(r => expandRoot(r, home, env.TMPDIR)) : []
-  for (const r of [root, ...extra]) {
+  for (const r of [root, ...(await worktrees(cwd)), ...extra]) {
     const placed = r ? await place(r) : null
     if (placed) roots.push(placed)
   }

package/hooks/policy.ts

@@ -8,6 +8,7 @@
 export const DEFAULTS = {
   apiKey: '',
   jevModel: 'jev-1.13.0',
+  enabled: true,
   bashGate: true,
   writeGate: true,
   injectionScreen: true,
@@ -176,6 +177,10 @@ export const clip = (text: unknown, n: number): string => {
 }
 export const sanitizeSid = (sid: string): string => sid.replace(/[^\w-]/g, '') || 'unknown'
 export const denyText = (reason: string): string => `ohmyjev blocked this: ${reason}. ${BLOCK_NOTICE}`
+/** A path deny is a setting, not a hazard: the model must not route around it, but it should tell the user how to widen it. */
+export const pathDenyText = (path: string): string =>
+  `ohmyjev blocked this: ${path} is outside the repo and allowPaths. Do not write it another way (a shell redirect, another tool). ` +
+  'If the user asked for this location, tell them to add its directory to the allowPaths setting, or to start the session in that repo.'
 
 const f2 = (x: number): string => x.toFixed(2)
 const nv = (a: Answers, k: string): number => {
@@ -373,6 +378,28 @@ export function expandRoot(p: string, home: string, tmpdir: string | undefined):
   return absolute(p, '/', home)
 }
 
+/**
+ * The local path a pi or omp file tool actually opens: a `file://` URL as a path, and the `@` and stray `:` prefixes
+ * both hosts drop. Null for any other `scheme://` target (omp's ssh:// writes to another machine): never a repo path.
+ */
+export function hostPath(p: string): string | null {
+  if (/^file:\/\//i.test(p)) {
+    // as node's fileURLToPath on POSIX: no host but localhost, no encoded `/`; a query or fragment is refused, not dropped
+    const path = /^file:\/\/(?:localhost)?(\/[^?#]*)$/i.exec(p)?.[1]
+    try {
+      return path === undefined || /%2f/i.test(path) ? null : decodeURIComponent(path)
+    } catch {
+      return null
+    }
+  }
+  if (/^[a-z][a-z0-9+.-]*:\/\//i.test(p)) return null
+  return /^@[/~]|^:[/~.]/.test(p) ? p.slice(1) : p
+}
+
+/** The worktrees in `git worktree list --porcelain` output: every checkout of the repo counts as the repo. */
+export const parseWorktrees = (porcelain: string): string[] =>
+  porcelain.split('\n').filter(l => l.startsWith('worktree ')).map(l => l.slice('worktree '.length).trim()).filter(Boolean)
+
 export const isUnder = (target: string, root: string): boolean =>
   target === root || target.startsWith(root.replace(/\/+$/, '') + '/')
 
@@ -381,7 +408,8 @@ export const isUnder = (target: string, root: string): boolean =>
 export type SessionState = { calls: number; denies: number; downUntil: number; noKey: boolean; lastRoute: string; compactions: number }
 export const EMPTY_SESSION: SessionState = { calls: 0, denies: 0, downUntil: 0, noKey: false, lastRoute: '', compactions: 0 }
 
-export function statusText(s: SessionState, now: number): string {
+export function statusText(s: SessionState, now: number, enabled = true): string {
+  if (!enabled) return 'jev off'
   if (s.noKey) return 'jev ⚠ no key'
   if (s.downUntil > now) return 'jev ⚠ down'
   return [`jev ✓${s.calls}`, s.denies ? `⛔${s.denies}` : '', s.lastRoute, s.compactions ? `🗜${s.compactions}` : ''].filter(Boolean).join(' ')
@@ -402,7 +430,17 @@ export type LogEntry = {
   costUsd?: number
 }
 
-// --- ask_jev and /jev ---
+// --- ask_jev, /omj and /ohmyjev ---
+
+export const OMJ_HELP = 'usage: /omj [stats|settings|on|off]. /ohmyjev is the same command.'
+export const DASHBOARD = 'dashboard.html'
+export const OMJ_OFF = 'ohmyjev off for this session: every call passes through. /omj on turns it back. The enabled setting is the default for new sessions.'
+export const OMJ_ON = 'ohmyjev on: gates, screens, done-check and router are back for this session.'
+/** `/omj on|off` as the new enabled value; undefined for any other argument. */
+export const toggleArg = (args: string): boolean | undefined => ({ on: true, off: false })[args.trim() as 'on' | 'off']
+/** /omj settings: every setting's current value, the key only as set or not. */
+export const settingsRows = (c: Config): string[] =>
+  Object.entries(c).map(([k, v]) => (k === 'apiKey' ? `apiKey: ${v ? 'set (hidden)' : 'not set'}` : `${k}: ${v === '' ? '(empty)' : String(v)}`))
 
 /** The model's ask_jev input as one Jev question, or the error text to hand back. */
 export function buildQuestion(i: { question?: unknown; type?: unknown; options?: unknown }): Question | string {
@@ -418,14 +456,20 @@ export function buildQuestion(i: { question?: unknown; type?: unknown; options?:
   return 'type must be noul, choice or score'
 }
 
-/** /jev's body from a session log: calls, errors, cost, p50, denies per tool, the last 5 denies. Torn lines are skipped. */
-export function summarize(log: string): string {
+/** The entries of one or more decision logs; torn lines and blanks are skipped. */
+export function parseLog(log: string): LogEntry[] {
   const rows: LogEntry[] = []
   for (const line of log.split('\n')) {
     try {
       if (line.trim()) rows.push(JSON.parse(line) as LogEntry)
     } catch {}
   }
+  return rows
+}
+
+/** /omj's body from a session log: calls, errors, cost, p50, denies per tool, the last 5 denies. */
+export function summarize(log: string): string {
+  const rows = parseLog(log)
   const calls = rows.filter(r => r.answers)
   const ms = calls.map(r => r.ms ?? 0).sort((a, b) => a - b)
   const cost = calls.reduce((n, r) => n + (r.costUsd ?? 0), 0)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ohmyjev",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Guardrails for coding agents, decided by TypeSafe's Jev: blocks destructive commands, catches prompt injection, pushes back on an unverified done and routes effort per turn. For Claude Code, pi and omp.",
   "type": "module",
   "license": "MIT",
@@ -45,6 +45,11 @@
         "description": "Model id sent to the TypeSafe endpoint",
         "default": "jev-1.13.0"
       },
+      "enabled": {
+        "type": "boolean",
+        "description": "Off lets every call through. /omj off and /omj on change it for one session",
+        "default": true
+      },
       "bashGate": {
         "type": "boolean",
         "description": "Deny irreversible or destructive shell and eval calls",