ohmyjev 0.3.0 → 0.3.2

package/README.md

@@ -59,7 +59,7 @@ If `/omj` ends with `key: env TYPESAFE_API_KEY · typesafe · jev-1.13.0`, you'r
 | Feature | What it does |
 |---|---|
 | **Bash gate** | Denies a command when Jev rates it irreversible at 0.6 or more, or destructive at 0.7 or more. |
-| **Write gate** | Denies writes outside the repo and `allowPaths`, and writes that contain a real credential. The repo is every worktree of the one the session started in, plus every worktree of whichever repo the agent has moved into. The path check is plain code, not Jev, and it follows symlinks the same way the OS does. |
+| **Write gate** | Denies writes outside the repo and `allowPaths`, and writes that contain a real credential. The repo means every worktree of the one the session started in, and every worktree of a repo the agent has moved into. The path check is plain code, not Jev, and it follows symlinks the way the OS does. |
 | **Exfil gate** | Denies a WebFetch or MCP call when Jev rates it 0.7 or more for sending your local data, files or credentials out. |
 | **Policies** | Every gate also checks the call against your own rules in the `policies` setting. |
 | **Injection screen** | When output from Bash, WebFetch, an MCP tool, or a Read outside the repo has instructions aimed at the model, it adds a note telling the model to treat that output as data. |
@@ -67,7 +67,7 @@ If `/omj` ends with `key: env TYPESAFE_API_KEY · typesafe · jev-1.13.0`, you'r
 | **Router** | Asks Jev once per request for a tier, an effort level and a risk score. Then it raises or lowers effort and picks the model for general-purpose subagents. With no key it falls back to Claude Code's built-in classifier, which reports no confidence, so then it only ever routes up. |
 | **Auto-compact** | When the task changes after a finished step and the context is at least 40% full, it compacts the conversation. The summary keeps the new request in full. |
 | **`ask_jev`** | A tool the model can use to ask Jev about repo files or text without loading them into its own context. |
-| **`/omj`** | Shows this session's Jev calls, errors, cost, median latency and denies, plus where the key comes from. It never prints the key itself. `/omj stats` opens a dashboard of every session in your browser. `/omj off` and `/omj on` switch ohmyjev for the session. `/ohmyjev` is the same command. |
+| **`/omj`** | This session's Jev calls, errors, cost, median latency and denies, and where the key comes from. It never prints the key. `/omj stats` opens a dashboard of every session in your browser. `/omj off` and `/omj on` switch ohmyjev for the session. `/ohmyjev` is the same command. |
 
 ### How a tool call goes through it
 
@@ -121,7 +121,7 @@ You've got three options, in the order ohmyjev looks for them:
 1. **The settings screen.** During the install, ohmyjev shows a screen with its options, including the TypeSafe
    key. Claude Code keeps it in secure storage, not in a settings file.
 2. **`TYPESAFE_API_KEY`** in your environment, for example in `~/.zshrc`.
-3. **`OPENROUTER_API_KEY`** in your environment. ohmyjev then calls Jev through OpenRouter as `~typesafe/omj-latest`.
+3. **`OPENROUTER_API_KEY`** in your environment. ohmyjev then calls Jev through OpenRouter as `~typesafe/jev-latest`.
 
 ### 4. Check it works
 
@@ -201,9 +201,13 @@ This block is final. Do not try to work around it with another command, another
 or an encoding that does the same thing. Stop and tell the user what was blocked and why.
 ```
 
+A write outside the repo gets a different message. It names the path and tells the model to ask you to add that
+directory to `allowPaths`, because that block is a setting, not a hazard.
+
 ### `/omj`
 
-Run it any time to see what this session has been up to (`/ohmyjev` does the same). Here's an example:
+Run it any time for this session's numbers. `/ohmyjev` is the same command, and `/omj settings` lists every setting's
+value. An example:
 
 ```
 jev ✓23 ⛔1 ↑opus/high
@@ -224,7 +228,7 @@ never touch the prod cluster; no deploys on Friday; don't edit migrations that a
 
 ### `ask_jev`
 
-The model can call this tool on its own when it wants a quick judgment without reading a pile of files. For example:
+The model can call this tool on its own when it needs a judgment about files without reading them. For example:
 
 ```json
 {
@@ -249,21 +253,21 @@ said, then what the router did with it:
 [ohmyjev] main loop kept opus/medium, wanted opus/low (confidence 0.38)
 ```
 
+The last line is the router declining to act: it wanted to spend less, but 0.38 is under the 0.6 it takes to move
+down. In a `claude -p` or SDK run the same lines arrive as `ui_log` messages and in the debug log. Turn them off with
+`logDecisions`.
+
 ### `/omj stats`
 
-Writes every session's decisions into one page at `~/.ohmyjev/dashboard.html` and opens it: calls, denies, flags, cost
-and latency, a 30-day chart, a table per tool and per session, and the latest denies with their reasons. It's a plain
-file, read from the logs, so nothing on it leaves the machine (the page fetches its fonts from ohmyjev.xyz, and falls
-back to system fonts offline).
+Builds one page from every session's log at `~/.ohmyjev/dashboard.html` and opens it in your browser. It has the
+totals, a 30-day chart of calls and denies, a table per tool and per session, and the latest denies with their reasons.
+It is a plain file built from the logs, so nothing on it leaves the machine. The page loads its fonts from ohmyjev.xyz
+and falls back to system fonts offline.
 
 ### `/omj off`
 
-Turns every gate, screen, the done-check and the router off for this session, and the status shows `jev off`.
-`/omj on` brings them back. To start sessions off by default, turn off the `enabled` setting.
-
-The last line is the router declining to act: it wanted to spend less, but 0.38 is under the 0.6 it takes to move
-down. In a `claude -p` or SDK run the same lines arrive as `ui_log` messages and in the debug log. Turn them off with
-`logDecisions`.
+Turns every gate, the screen, the done-check and the router off for this session. The status shows `jev off`.
+`/omj on` brings them back. To start every session off, turn off the `enabled` setting.
 
 ### Status line
 
@@ -273,6 +277,7 @@ ohmyjev pins its status under the prompt, so there's nothing to set up:
 jev ✓23 ⛔1 ↑opus/high 🗜2     Jev calls, denies, this turn's route, auto-compactions
 jev ⚠ down                    Jev failed or timed out in the last 5 minutes, so the gates let calls through
 jev ⚠ no key                  no key configured
+jev off                       turned off with /omj off, or the enabled setting
 ```
 
 If you'd rather have it in your own statusline script, copy `jev_segment()` from
@@ -325,12 +330,12 @@ a fixed size:
 | What asks | What it sends |
 |---|---|
 | Bash gate | The command (up to 16000 characters), the working directory and the tool call's description |
-| Write gate | The file path and the new content (up to 16000 characters). Writes outside the repo and `allowPaths` are denied by code, before anything is sent |
+| Write gate | The file path and the new content (up to 16000 characters). Code denies writes outside the repo and `allowPaths` before it sends anything |
 | Exfil gate | The tool's name and its input (up to 4000 characters) |
 | Injection screen | The tool's output (up to 6000 characters), from Bash, WebFetch, MCP tools and Reads outside the repo |
 | Done-check | The current request (600), up to five earlier requests (200 each), up to 20 of this turn's tool calls with their input (200 each) and outcome, and Claude's last message (1500) |
 | Router | The request (up to 1500 characters) |
-| `ask_jev` | The model's question, any text it passes (up to 20000 characters) and the repo files it names (8000 each, 80000 in total). Files outside the repo are never sent |
+| `ask_jev` | The model's question, any text it passes (up to 20000 characters) and the repo files it names (8000 each, 80000 in total). It never sends files outside the repo |
 
 When you've set `policies`, every gate sends those too. Turning a feature off stops its calls.
 

package/hooks/dashboard.ts

@@ -0,0 +1,225 @@
+/**
+ * /omj stats: one static HTML page from every session's decision log, in ohmyjev.xyz's theme. Pure: the hosts read the
+ * logs, write the page to ~/.ohmyjev/dashboard.html and open it. Nothing on the page leaves the machine except the
+ * four font files, fetched from ohmyjev.xyz (system fonts stand in when offline).
+ */
+import type { LogEntry } from './policy.ts'
+
+const FONTS = 'https://ohmyjev.xyz/fonts'
+const DAYS = 30
+
+export const esc = (s: unknown): string =>
+  String(s ?? '').replace(/[&<>"']/g, ch => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' })[ch]!)
+
+const day = (ts: number): string => new Date(ts).toISOString().slice(0, 10)
+const when = (ts: number): string => new Date(ts).toISOString().replace('T', ' ').slice(0, 16)
+const money = (usd: number): string => `$${usd.toFixed(usd >= 0.01 ? 2 : 4)}`
+const pct = (n: number, of: number): number => (of ? Math.round((n / of) * 100) : 0)
+const quantile = (sorted: number[], q: number): number => sorted[Math.min(sorted.length - 1, Math.floor(q * sorted.length))] ?? 0
+/** What a line was about: the tool, or the battery for lines with no tool. */
+const what = (r: LogEntry): string =>
+  r.tool || ({ 'turn.start': 'router', Stop: 'done-check', 'session.measure': 'auto-compact', 'tool.result': 'screen', ask_jev: 'ask_jev' } as Record<string, string>)[r.event] || r.event
+
+type Stat = { calls: number; denies: number; flags: number; cost: number }
+const stat = (): Stat => ({ calls: 0, denies: 0, flags: 0, cost: 0 })
+const isDeny = (r: LogEntry) => r.verdict === 'deny' || r.verdict === 'block'
+
+export function dashboardHtml(rows: LogEntry[], opts: { now: number; sid?: string; source?: string }): string {
+  const calls = rows.filter(r => r.answers)
+  const ms = calls.map(r => r.ms ?? 0).sort((a, b) => a - b)
+  const denies = rows.filter(isDeny)
+  const total = { ...stat(), calls: calls.length, denies: denies.length, flags: rows.filter(r => r.verdict === 'flag').length, cost: calls.reduce((n, r) => n + (r.costUsd ?? 0), 0) }
+  const errors = rows.filter(r => r.error).length
+  const compactions = rows.filter(r => r.verdict === 'compact').length
+
+  const by = <K extends string>(key: (r: LogEntry) => K): Map<K, Stat> => {
+    const m = new Map<K, Stat>()
+    for (const r of rows) {
+      const s = m.get(key(r)) ?? stat()
+      if (r.answers) s.calls++
+      if (isDeny(r)) s.denies++
+      if (r.verdict === 'flag') s.flags++
+      s.cost += r.costUsd ?? 0
+      m.set(key(r), s)
+    }
+    return m
+  }
+  const tools = [...by(what)].sort((a, b) => b[1].denies - a[1].denies || b[1].calls - a[1].calls)
+  const days = by(r => day(r.ts))
+  const span = Array.from({ length: DAYS }, (_, i) => day(opts.now - (DAYS - 1 - i) * 86_400_000))
+  const peak = Math.max(1, ...span.map(d => days.get(d)?.calls ?? 0))
+  const sessions = new Map<string, Stat & { first: number; last: number }>()
+  for (const r of rows) {
+    const s = sessions.get(r.session) ?? { ...stat(), first: r.ts, last: r.ts }
+    s.first = Math.min(s.first, r.ts)
+    s.last = Math.max(s.last, r.ts)
+    if (r.answers) s.calls++
+    if (isDeny(r)) s.denies++
+    if (r.verdict === 'flag') s.flags++
+    s.cost += r.costUsd ?? 0
+    sessions.set(r.session, s)
+  }
+  const recentSessions = [...sessions].sort((a, b) => b[1].last - a[1].last).slice(0, 15)
+  const recentDenies = denies.slice(-25).reverse()
+
+  const tile = (n: string, label: string, kind = '') =>
+    `<div class="feat"><span class="kind ${kind}">${esc(label)}</span><strong>${esc(n)}</strong></div>`
+  const bars = span
+    .map(d => {
+      const s = days.get(d) ?? stat()
+      const h = Math.max(s.calls ? 3 : 1, Math.round((s.calls / peak) * 100))
+      const dh = s.calls ? Math.max(s.denies ? 3 : 0, Math.round((s.denies / peak) * 100)) : 0
+      return `<div class="bar" title="${esc(d)}: ${s.calls} calls, ${s.denies} denies, ${money(s.cost)}"><i style="height:${h}%"></i><b style="height:${dh}%"></b></div>`
+    })
+    .join('')
+  const toolRows = tools
+    .map(([t, s]) => `<tr><td><code>${esc(t)}</code></td><td>${s.calls}</td><td class="${s.denies ? 'o' : ''}">${s.denies}</td><td>${s.flags}</td><td>${money(s.cost)}</td></tr>`)
+    .join('')
+  const sessionRows = recentSessions
+    .map(([sid, s]) => `<tr${sid === opts.sid ? ' class="me"' : ''}><td><code>${esc(sid.slice(0, 8))}</code>${sid === opts.sid ? ' <span class="g">this</span>' : ''}</td><td>${when(s.last)}</td><td>${s.calls}</td><td class="${s.denies ? 'o' : ''}">${s.denies}</td><td>${money(s.cost)}</td></tr>`)
+    .join('')
+  const denyRows = recentDenies
+    .map(r => `<tr><td>${when(r.ts)}</td><td><code>${esc(what(r))}</code></td><td>${esc(r.reason ?? '')}</td><td><code>${esc(r.session.slice(0, 8))}</code></td></tr>`)
+    .join('')
+  const lede = rows.length
+    ? `${total.calls} Jev calls across ${sessions.size} sessions for ${money(total.cost)}. ${total.denies} ${total.denies === 1 ? 'deny' : 'denies'} (${pct(total.denies, total.calls + total.denies)}%), ${total.flags} injection ${total.flags === 1 ? 'flag' : 'flags'}, ${errors} ${errors === 1 ? 'error' : 'errors'}.`
+    : 'No decisions logged yet. Run a few commands with ohmyjev on, then come back.'
+
+  return `<!doctype html>
+<html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1">
+<title>ohmyjev · stats</title>
+<style>
+@font-face { font-family: "Changa"; src: url("${FONTS}/Changa-ExtraBold.woff2") format("woff2"); font-weight: 800; font-display: swap; }
+@font-face { font-family: "Space Grotesk"; src: url("${FONTS}/SpaceGrotesk-Regular.woff2") format("woff2"); font-weight: 400; font-display: swap; }
+@font-face { font-family: "Space Grotesk"; src: url("${FONTS}/SpaceGrotesk-SemiBold.woff2") format("woff2"); font-weight: 600; font-display: swap; }
+@font-face { font-family: "Space Grotesk"; src: url("${FONTS}/SpaceGrotesk-Bold.woff2") format("woff2"); font-weight: 700; font-display: swap; }
+@font-face { font-family: "JetBrains Mono"; src: url("${FONTS}/JetBrainsMono-Regular.woff2") format("woff2"); font-weight: 400; font-display: swap; }
+:root {
+  --ground: #080b09; --surface: #111713; --panel: rgba(17, 23, 19, .9); --panel-hi: rgba(26, 36, 29, .94);
+  --paper: #f4f8f5; --muted: #a5b5a9; --faint: #829487; --line: #2c3930; --steel: #829487;
+  --brand: #00ee22; --brand-hi: #39ff53; --link: #79ff98; --lavender: #b69cff;
+  --ok: #56e887; --warn: #ffc857; --err: #ff737d; --info: #74c7ff;
+  --ui: clamp(.875rem, .82rem + .15vw, 1rem);
+  --logo: "Changa", "Space Grotesk", system-ui, sans-serif; --display: "Space Grotesk", system-ui, sans-serif;
+  --body: "Space Grotesk", system-ui, sans-serif; --label: "Space Grotesk", system-ui, sans-serif;
+  --mono: "JetBrains Mono", ui-monospace, "SF Mono", Menlo, monospace;
+  color-scheme: dark;
+}
+*, *::before, *::after { margin: 0; padding: 0; box-sizing: border-box; }
+html { background: var(--ground); scrollbar-color: var(--line) var(--ground); }
+body {
+  min-height: 100vh; padding: clamp(26px, 4.5vh, 64px) clamp(22px, 6vw, 120px) 80px; color: var(--paper); font-family: var(--body);
+  -webkit-font-smoothing: antialiased; background: var(--ground);
+  background-image: linear-gradient(rgba(130, 148, 135, .07) 1px, transparent 1px), linear-gradient(90deg, rgba(130, 148, 135, .07) 1px, transparent 1px);
+  background-size: 64px 64px;
+}
+::selection { background: rgba(0, 238, 34, .3); color: var(--paper); }
+a { color: inherit; text-decoration: none; }
+:focus-visible { outline: 2px solid var(--link); outline-offset: 3px; }
+code { font-family: var(--mono); font-size: .875em; color: var(--paper); }
+.lbl { font-family: var(--label); font-weight: 600; font-size: var(--ui); letter-spacing: .06em; text-transform: uppercase; }
+.header { display: flex; align-items: baseline; justify-content: space-between; gap: 16px; flex-wrap: wrap; margin-bottom: clamp(28px, 6vh, 64px); }
+.brand { font: 800 30px/1 var(--logo); letter-spacing: -.01em; color: var(--paper); white-space: nowrap; }
+.brand .acc { color: var(--brand); }
+.header .lbl { color: var(--faint); }
+.header .lbl span { color: var(--brand); }
+.section-label { display: flex; align-items: center; gap: 10px; color: var(--paper); margin-bottom: 12px; }
+.section-label::before { content: ""; width: 6px; height: 6px; background: var(--brand); }
+.section-label span { margin-left: 8px; color: var(--faint); }
+h2 { color: var(--paper); font: 600 clamp(1.75rem, 1.3rem + 1.2vw, 2.25rem)/1.1 var(--display); letter-spacing: -.02em; text-transform: lowercase; text-wrap: balance; }
+h2 em { font-style: inherit; color: var(--brand); }
+.lede { max-width: 62ch; color: var(--muted); font-size: clamp(1rem, .95rem + .2vw, 1.125rem); line-height: 1.5; margin: 14px 0 clamp(22px, 4vh, 40px); }
+h3 { font: 600 var(--ui) var(--label); letter-spacing: .06em; text-transform: uppercase; color: var(--paper); }
+section { margin-bottom: clamp(24px, 4vh, 44px); }
+.grid { display: grid; gap: 1px; background: var(--line); border: 1px solid var(--line); }
+.grid > * { position: relative; display: flex; flex-direction: column; gap: 8px; min-width: 0; padding: clamp(14px, 2vh, 22px) clamp(14px, 1.4vw, 22px); background: var(--panel); transition: background .25s ease; }
+.grid > *:hover { background: var(--panel-hi); }
+.tiles { grid-template-columns: repeat(auto-fit, minmax(150px, 1fr)); }
+/* tiles draw their own hairlines, so a short last row ends in panel, not a block of line color */
+.tiles { background: var(--panel); }
+.tiles > * { box-shadow: 1px 0 0 var(--line), 0 1px 0 var(--line); }
+.g2 { grid-template-columns: repeat(auto-fit, minmax(min(100%, 420px), 1fr)); }
+.kind { font: 600 .75rem var(--label); letter-spacing: .08em; text-transform: uppercase; color: var(--faint); display: inline-flex; align-items: center; gap: 6px; }
+.kind::before { content: ""; width: 5px; height: 5px; background: var(--steel); }
+.kind.gate::before { background: var(--err); }
+.kind.check::before { background: var(--lavender); }
+.kind.route::before { background: var(--info); }
+.feat strong { font: 700 clamp(1.6rem, 2.4vw, 2.2rem)/1.1 var(--display); letter-spacing: -.03em; color: var(--paper); font-variant-numeric: tabular-nums; }
+.card-head { display: flex; flex-wrap: wrap; align-items: baseline; justify-content: space-between; gap: 4px 16px; }
+.card-head .meta { color: var(--faint); font: 600 .75rem var(--label); letter-spacing: .06em; text-transform: uppercase; }
+.chart { display: flex; align-items: flex-end; gap: 3px; height: 160px; padding-top: 8px; border-bottom: 1px solid var(--line); }
+.bar { position: relative; flex: 1; height: 100%; min-width: 0; }
+.bar i, .bar b { position: absolute; left: 0; right: 0; bottom: 0; display: block; }
+.bar i { background: rgba(0, 238, 34, .45); transition: background .2s ease; }
+.bar b { background: var(--err); }
+.bar:hover i { background: var(--brand-hi); }
+.axis { display: flex; justify-content: space-between; color: var(--faint); font: .75rem var(--mono); padding-top: 6px; }
+.legend { display: flex; gap: 18px; color: var(--faint); font: 600 .75rem var(--label); letter-spacing: .06em; text-transform: uppercase; }
+.legend i { display: inline-block; width: 10px; height: 10px; vertical-align: -1px; margin-right: 6px; background: rgba(0, 238, 34, .45); }
+.legend i.o { background: var(--err); }
+.tbl { overflow: auto; border: 1px solid var(--line); scrollbar-width: thin; }
+table { width: 100%; border-collapse: collapse; }
+th { padding: 7px 14px; text-align: left; font: 600 .75rem var(--label); letter-spacing: .08em; text-transform: uppercase; color: var(--faint); border-bottom: 1px solid var(--line); background: var(--panel); white-space: nowrap; }
+td { padding: 6px 14px; border-bottom: 1px solid var(--line); color: var(--muted); font-size: .9375rem; line-height: 1.35; vertical-align: top; background: rgba(17, 23, 19, .82); font-variant-numeric: tabular-nums; }
+tr:last-child td { border-bottom: 0; }
+tr:hover td { background: var(--panel-hi); }
+td:first-child, td:nth-child(2) { white-space: nowrap; }
+td.o { color: var(--err); }
+.g { color: var(--ok); }
+.me td { background: rgba(0, 238, 34, .06); }
+.empty { padding: 18px 14px; color: var(--faint); }
+.foot { display: flex; flex-wrap: wrap; justify-content: space-between; gap: 8px 24px; margin-top: 40px; padding-top: 14px; border-top: 1px solid var(--line); color: var(--faint); font-size: .875rem; }
+.foot a { color: var(--link); }
+.foot a:hover { color: var(--brand-hi); }
+.foot a span { color: var(--brand); }
+</style></head>
+<body>
+<header class="header">
+  <a class="brand" href="https://ohmyjev.xyz" aria-label="ohmyjev"><span class="acc">&gt;_</span>ohmy<span class="acc">jev</span></a>
+  <div class="lbl">stats <span>·</span> ${esc(when(opts.now))} UTC${opts.source ? ` <span>·</span> ${esc(opts.source)}` : ''}</div>
+</header>
+<p class="section-label lbl">What Jev decided <span>every session on this machine</span></p>
+<h2>what jev <em>decided</em></h2>
+<p class="lede">${esc(lede)}</p>
+
+<section><div class="grid tiles">
+  ${tile(String(total.calls), 'Jev calls')}
+  ${tile(String(total.denies), 'denies', 'gate')}
+  ${tile(String(total.flags), 'injection flags', 'check')}
+  ${tile(money(total.cost), 'cost')}
+  ${tile(`${quantile(ms, 0.5)} ms`, 'p50 latency')}
+  ${tile(`${quantile(ms, 0.95)} ms`, 'p95 latency')}
+  ${tile(String(sessions.size), 'sessions')}
+  ${tile(String(errors), 'errors')}
+  ${tile(String(compactions), 'auto-compactions', 'route')}
+</div></section>
+
+<section><div class="grid"><div>
+  <div class="card-head"><h3>last ${DAYS} days</h3><span class="legend"><span><i></i>calls</span><span><i class="o"></i>denies</span></span></div>
+  <div class="chart">${bars}</div>
+  <div class="axis"><span>${esc(span[0])}</span><span>${esc(span.at(-1))}</span></div>
+</div></div></section>
+
+<section><div class="grid g2">
+  <div>
+    <div class="card-head"><h3>by tool</h3><span class="meta">most denied first</span></div>
+    <div class="tbl">${toolRows ? `<table><thead><tr><th>tool</th><th>calls</th><th>denies</th><th>flags</th><th>cost</th></tr></thead><tbody>${toolRows}</tbody></table>` : '<p class="empty">nothing yet</p>'}</div>
+  </div>
+  <div>
+    <div class="card-head"><h3>sessions</h3><span class="meta">latest ${recentSessions.length} of ${sessions.size}</span></div>
+    <div class="tbl">${sessionRows ? `<table><thead><tr><th>session</th><th>last seen (UTC)</th><th>calls</th><th>denies</th><th>cost</th></tr></thead><tbody>${sessionRows}</tbody></table>` : '<p class="empty">nothing yet</p>'}</div>
+  </div>
+</div></section>
+
+<section><div class="grid"><div>
+  <div class="card-head"><h3>recent denies</h3><span class="meta">latest ${recentDenies.length} of ${denies.length}</span></div>
+  <div class="tbl">${denyRows ? `<table><thead><tr><th>when (UTC)</th><th>tool</th><th>reason</th><th>session</th></tr></thead><tbody>${denyRows}</tbody></table>` : '<p class="empty">no denies</p>'}</div>
+</div></div></section>
+
+<footer class="foot">
+  <span>Read from ~/.ohmyjev/log, readable only by you. Nothing on this page leaves the machine.</span>
+  <span>Regenerate with <code>/omj stats</code> · <a href="https://ohmyjev.xyz">ohmyjev<span>.</span>xyz</a></span>
+</footer>
+</body></html>
+`
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ohmyjev",
-  "version": "0.3.0",
+  "version": "0.3.2",
   "description": "Guardrails for coding agents, decided by TypeSafe's Jev: blocks destructive commands, catches prompt injection, pushes back on an unverified done and routes effort per turn. For Claude Code, pi and omp.",
   "type": "module",
   "license": "MIT",
@@ -19,6 +19,7 @@
   ],
   "files": [
     "adapters/*.ts",
+    "hooks/dashboard.ts",
     "hooks/jev.ts",
     "hooks/policy.ts",
     "extras/"