ohmyjev 0.3.1 → 0.4.0

package/README.md

@@ -58,12 +58,13 @@ If `/omj` ends with `key: env TYPESAFE_API_KEY · typesafe · jev-1.13.0`, you'r
 
 | Feature | What it does |
 |---|---|
-| **Bash gate** | Denies a command when Jev rates it irreversible at 0.6 or more, or destructive at 0.7 or more. |
+| **Bash gate** | Denies a command when Jev rates it irreversible at 0.6 or more. A command Jev calls irreversible with less confidence is denied too when it also aims to wipe something (0.7). A reversible command always passes, so deleting lines, dropping a co-author trailer or uninstalling a plugin goes through. |
 | **Write gate** | Denies writes outside the repo and `allowPaths`, and writes that contain a real credential. The repo means every worktree of the one the session started in, and every worktree of a repo the agent has moved into. The path check is plain code, not Jev, and it follows symlinks the way the OS does. |
 | **Exfil gate** | Denies a WebFetch or MCP call when Jev rates it 0.7 or more for sending your local data, files or credentials out. |
 | **Policies** | Every gate also checks the call against your own rules in the `policies` setting. |
+| **Your request** | Every gate also asks Jev whether your latest message asked for exactly this call. If it did (0.8), a gate's Jev deny lets the call through. So "delete the build folder" or "force push it" works, while the same command picked by the agent on its own is still denied. Policy and path denies always stand. |
 | **Injection screen** | When output from Bash, WebFetch, an MCP tool, or a Read outside the repo has instructions aimed at the model, it adds a note telling the model to treat that output as data. |
-| **Done-check** | If the agent says it's done but nothing shows it ran a check, it blocks the stop once and tells the agent to verify. |
+| **Done-check** | If the agent says it's done but nothing shows it ran a check, it blocks the stop once and tells the agent to verify. A turn that ran no tools is never blocked, since there was nothing to verify. |
 | **Router** | Asks Jev once per request for a tier, an effort level and a risk score. Then it raises or lowers effort and picks the model for general-purpose subagents. With no key it falls back to Claude Code's built-in classifier, which reports no confidence, so then it only ever routes up. |
 | **Auto-compact** | When the task changes after a finished step and the context is at least 40% full, it compacts the conversation. The summary keeps the new request in full. |
 | **`ask_jev`** | A tool the model can use to ask Jev about repo files or text without loading them into its own context. |
@@ -193,14 +194,18 @@ Most of the time you won't notice it. Here's what it looks like when it does ste
 
 ### When a command gets blocked
 
-Claude gets the denial as the tool's result, along with an instruction not to work around it:
+Claude gets the denial as the tool's result, with an instruction not to work around it and a way out:
 
 ```
 ohmyjev blocked this: irreversible (0.95): nothing would restore what this removes or overwrites.
-This block is final. Do not try to work around it with another command, another tool, a different path,
-or an encoding that does the same thing. Stop and tell the user what was blocked and why.
+Do not try to work around it with another command, another tool, a different path, or an encoding that does
+the same thing. Tell the user what was blocked and why. If they reply asking for exactly this, in words that
+name it, run it again: their request then lets it through.
 ```
 
+So when the agent stops and tells you, answer with the action itself, for example "yes, delete ~/.agentmemory".
+A bare "yes" may not be enough, because the gate judges your latest message on its own.
+
 A write outside the repo gets a different message. It names the path and tells the model to ask you to add that
 directory to `allowPaths`, because that block is a setting, not a hazard.
 
@@ -314,7 +319,8 @@ Run `/omj settings` to see every setting's current value (the key stays hidden).
 | `logDecisions` | on | Shows each routing decision as a line in the transcript. |
 | `statusLine` | on | Pins ohmyjev's status under the prompt. |
 
-Each gate also has its own threshold setting. The defaults are the numbers in [What you get](#what-you-get).
+Each gate also has its own threshold setting, and `requested` (0.8) sets how sure Jev must be that you asked for a
+call. The defaults are the numbers in [What you get](#what-you-get).
 
 ## Logs
 
@@ -329,7 +335,7 @@ a fixed size:
 
 | What asks | What it sends |
 |---|---|
-| Bash gate | The command (up to 16000 characters), the working directory and the tool call's description |
+| Bash gate | The command (up to 16000 characters), the working directory, the tool call's description and your latest message (1500) |
 | Write gate | The file path and the new content (up to 16000 characters). Code denies writes outside the repo and `allowPaths` before it sends anything |
 | Exfil gate | The tool's name and its input (up to 4000 characters) |
 | Injection screen | The tool's output (up to 6000 characters), from Bash, WebFetch, MCP tools and Reads outside the repo |
@@ -337,7 +343,8 @@ a fixed size:
 | Router | The request (up to 1500 characters) |
 | `ask_jev` | The model's question, any text it passes (up to 20000 characters) and the repo files it names (8000 each, 80000 in total). It never sends files outside the repo |
 
-When you've set `policies`, every gate sends those too. Turning a feature off stops its calls.
+The write and exfil gates also send your latest message (1500), for the request check. When you've set `policies`,
+every gate sends those too. Turning a feature off stops its calls.
 
 With no key, nothing goes to Jev. The router's built-in classifier sends the request (up to 1500 characters) to
 Claude's own small model, over the same connection Claude Code already uses. In pi it goes to the cheapest model you

package/adapters/omp.ts

@@ -254,6 +254,7 @@ export function createExtension(options: OmpExtensionOptions = {}): (pi: OmpApi)
     let pushedBackAt = -1
     let route: Route | undefined
     let liveRequest = ''
+    let userRequest = '' // the user's latest message: the gates ask whether it asked for the call
     let compactPending = false
     let classifiedPrompt: string | undefined
     let askRegistered = false
@@ -398,6 +399,7 @@ export function createExtension(options: OmpExtensionOptions = {}): (pi: OmpApi)
       pushedBackAt = -1
       route = undefined
       liveRequest = ''
+      userRequest = ''
       compactPending = false
       classifiedPrompt = undefined
       status()
@@ -453,6 +455,7 @@ export function createExtension(options: OmpExtensionOptions = {}): (pi: OmpApi)
       root = ''
       route = undefined
       liveRequest = ''
+      userRequest = ''
       compactPending = false
       classifiedPrompt = undefined
       pushedBackAt = -1
@@ -482,7 +485,7 @@ export function createExtension(options: OmpExtensionOptions = {}): (pi: OmpApi)
             description: clip(description, 300),
             ...(command.length > CLIP ? { truncated: true } : {}),
           }
-          const d = await session.decide('tool_call', tool, withPolicies(state, c), withPolicyQ(BASH_Q, c))
+          const d = await session.decide('tool_call', tool, withPolicies(state, c, userRequest), withPolicyQ(BASH_Q, c, userRequest))
           if (!d) return
           const judged = gateBash(d.answers, c)
           session.record(d, judged.verdict, judged.reason)
@@ -505,8 +508,8 @@ export function createExtension(options: OmpExtensionOptions = {}): (pi: OmpApi)
           const path = paths.join('; ')
           const d = await session.decide(
             'tool_call', tool,
-            withPolicies({ path, content: clip(writeContent(input), CLIP) }, c),
-            withPolicyQ(WRITE_Q, c),
+            withPolicies({ path, content: clip(writeContent(input), CLIP) }, c, userRequest),
+            withPolicyQ(WRITE_Q, c, userRequest),
           )
           if (!d) return
           const judged = gateWrite(d.answers, c)
@@ -517,8 +520,8 @@ export function createExtension(options: OmpExtensionOptions = {}): (pi: OmpApi)
         if (c.exfilGate && exfilTool(tool, input)) {
           const d = await session.decide(
             'tool_call', tool,
-            withPolicies({ tool, input: clip(safeJson(input), 4000) }, c),
-            withPolicyQ(EXFIL_Q, c),
+            withPolicies({ tool, input: clip(safeJson(input), 4000) }, c, userRequest),
+            withPolicyQ(EXFIL_Q, c, userRequest),
           )
           if (!d) return
           const judged = gateExfil(d.answers, c)
@@ -591,7 +594,7 @@ export function createExtension(options: OmpExtensionOptions = {}): (pi: OmpApi)
           scheduleCompact(ctx)
           return
         }
-        const judged = judgeStop(d.answers, c)
+        const judged = judgeStop(d.answers, c, state.tools_this_turn.length > 0)
         const block = c.doneCheck ? judged.block : null
         if (block) pushedBackAt = requests.length
         if (c.autoCompact && judged.wantsCompact) compactPending = true
@@ -609,6 +612,7 @@ export function createExtension(options: OmpExtensionOptions = {}): (pi: OmpApi)
         if (ctx.agent.kind !== 'main' || !c.enabled) return
         userEffort = userThinking(ctx)
         const prompt = typeof rawEvent.prompt === 'string' ? rawEvent.prompt : ''
+        if (prompt.trim() && !/^\/\S+\s*$/.test(prompt.trim())) userRequest = prompt
         if (!prompt.trim()) return
         if (classifiedPrompt !== prompt) {
           classifiedPrompt = prompt

package/adapters/pi.ts

@@ -257,6 +257,7 @@ export function createExtension(options: PiAdapterOptions = {}) {
     let pushedBackAt = -1
     let route: Route | undefined
     let liveRequest = ''
+    let userRequest = '' // the user's latest message: the gates ask whether it asked for the call
     let compactPending = false
     let userThinking: ThinkingLevel = 'medium'
     let changingThinking = false
@@ -289,6 +290,7 @@ export function createExtension(options: PiAdapterOptions = {}) {
       pushedBackAt = -1
       route = undefined
       liveRequest = ''
+      userRequest = ''
       compactPending = false
     }
     const setThinking = (level: ThinkingLevel): void => {
@@ -403,6 +405,7 @@ export function createExtension(options: PiAdapterOptions = {}) {
 
     pi.on('before_agent_start', guarded<BeforeAgentStartEvent, void>(async (event, ctx) => {
       latestCtx = ctx
+      if (event.prompt.trim() && !/^\/\S+\s*$/.test(event.prompt.trim())) userRequest = event.prompt
       if (!c.enabled) return
       const text = event.prompt
       if (!text.trim()) return
@@ -433,8 +436,8 @@ export function createExtension(options: PiAdapterOptions = {}) {
       const input = event.input
       if ((tool === 'bash' || tool === 'powershell') && c.bashGate) {
         const command = arg(input, 'command')
-        const state = withPolicies({ command: clip(command, CLIP), cwd: ctx.cwd, ...(command.length > CLIP ? { truncated: true } : {}) }, c)
-        const d = await x.decide('tool.call', tool, state, withPolicyQ(BASH_Q, c))
+        const state = withPolicies({ command: clip(command, CLIP), cwd: ctx.cwd, ...(command.length > CLIP ? { truncated: true } : {}) }, c, userRequest)
+        const d = await x.decide('tool.call', tool, state, withPolicyQ(BASH_Q, c, userRequest))
         if (!d) return
         const judged = gateBash(d.answers, c)
         x.record(d, judged.verdict, judged.reason)
@@ -448,7 +451,7 @@ export function createExtension(options: PiAdapterOptions = {}) {
           return { block: true, reason: pathDenyText(path) }
         }
         const content = tool === 'write' ? arg(input, 'content') : json(input.edits)
-        const d = await x.decide('tool.call', tool, withPolicies({ path, content: clip(content, CLIP) }, c), withPolicyQ(WRITE_Q, c))
+        const d = await x.decide('tool.call', tool, withPolicies({ path, content: clip(content, CLIP) }, c, userRequest), withPolicyQ(WRITE_Q, c, userRequest))
         if (!d) return
         const judged = gateWrite(d.answers, c)
         x.record(d, judged.verdict, judged.reason)
@@ -459,8 +462,8 @@ export function createExtension(options: PiAdapterOptions = {}) {
         const d = await x.decide(
           'tool.call',
           tool,
-          withPolicies({ tool, input: clip(json(input), 4000) }, c),
-          withPolicyQ(EXFIL_Q, c),
+          withPolicies({ tool, input: clip(json(input), 4000) }, c, userRequest),
+          withPolicyQ(EXFIL_Q, c, userRequest),
         )
         if (!d) return
         const judged = gateExfil(d.answers, c)
@@ -504,7 +507,7 @@ export function createExtension(options: PiAdapterOptions = {}) {
       const questions = state.previous_requests.length ? { ...STOP_Q, ...SWITCHED_Q } : STOP_Q
       const d = await x.decide('Stop', '', state, questions)
       if (!d) return
-      const judged = judgeStop(d.answers, c)
+      const judged = judgeStop(d.answers, c, state.tools_this_turn.length > 0)
       const block = c.doneCheck ? judged.block : null
       if (block) pushedBackAt = count
       if (c.autoCompact && judged.wantsCompact) compactPending = true

package/hooks/dashboard.ts

@@ -0,0 +1,225 @@
+/**
+ * /omj stats: one static HTML page from every session's decision log, in ohmyjev.xyz's theme. Pure: the hosts read the
+ * logs, write the page to ~/.ohmyjev/dashboard.html and open it. Nothing on the page leaves the machine except the
+ * four font files, fetched from ohmyjev.xyz (system fonts stand in when offline).
+ */
+import type { LogEntry } from './policy.ts'
+
+const FONTS = 'https://ohmyjev.xyz/fonts'
+const DAYS = 30
+
+export const esc = (s: unknown): string =>
+  String(s ?? '').replace(/[&<>"']/g, ch => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' })[ch]!)
+
+const day = (ts: number): string => new Date(ts).toISOString().slice(0, 10)
+const when = (ts: number): string => new Date(ts).toISOString().replace('T', ' ').slice(0, 16)
+const money = (usd: number): string => `$${usd.toFixed(usd >= 0.01 ? 2 : 4)}`
+const pct = (n: number, of: number): number => (of ? Math.round((n / of) * 100) : 0)
+const quantile = (sorted: number[], q: number): number => sorted[Math.min(sorted.length - 1, Math.floor(q * sorted.length))] ?? 0
+/** What a line was about: the tool, or the battery for lines with no tool. */
+const what = (r: LogEntry): string =>
+  r.tool || ({ 'turn.start': 'router', Stop: 'done-check', 'session.measure': 'auto-compact', 'tool.result': 'screen', ask_jev: 'ask_jev' } as Record<string, string>)[r.event] || r.event
+
+type Stat = { calls: number; denies: number; flags: number; cost: number }
+const stat = (): Stat => ({ calls: 0, denies: 0, flags: 0, cost: 0 })
+const isDeny = (r: LogEntry) => r.verdict === 'deny' || r.verdict === 'block'
+
+export function dashboardHtml(rows: LogEntry[], opts: { now: number; sid?: string; source?: string }): string {
+  const calls = rows.filter(r => r.answers)
+  const ms = calls.map(r => r.ms ?? 0).sort((a, b) => a - b)
+  const denies = rows.filter(isDeny)
+  const total = { ...stat(), calls: calls.length, denies: denies.length, flags: rows.filter(r => r.verdict === 'flag').length, cost: calls.reduce((n, r) => n + (r.costUsd ?? 0), 0) }
+  const errors = rows.filter(r => r.error).length
+  const compactions = rows.filter(r => r.verdict === 'compact').length
+
+  const by = <K extends string>(key: (r: LogEntry) => K): Map<K, Stat> => {
+    const m = new Map<K, Stat>()
+    for (const r of rows) {
+      const s = m.get(key(r)) ?? stat()
+      if (r.answers) s.calls++
+      if (isDeny(r)) s.denies++
+      if (r.verdict === 'flag') s.flags++
+      s.cost += r.costUsd ?? 0
+      m.set(key(r), s)
+    }
+    return m
+  }
+  const tools = [...by(what)].sort((a, b) => b[1].denies - a[1].denies || b[1].calls - a[1].calls)
+  const days = by(r => day(r.ts))
+  const span = Array.from({ length: DAYS }, (_, i) => day(opts.now - (DAYS - 1 - i) * 86_400_000))
+  const peak = Math.max(1, ...span.map(d => days.get(d)?.calls ?? 0))
+  const sessions = new Map<string, Stat & { first: number; last: number }>()
+  for (const r of rows) {
+    const s = sessions.get(r.session) ?? { ...stat(), first: r.ts, last: r.ts }
+    s.first = Math.min(s.first, r.ts)
+    s.last = Math.max(s.last, r.ts)
+    if (r.answers) s.calls++
+    if (isDeny(r)) s.denies++
+    if (r.verdict === 'flag') s.flags++
+    s.cost += r.costUsd ?? 0
+    sessions.set(r.session, s)
+  }
+  const recentSessions = [...sessions].sort((a, b) => b[1].last - a[1].last).slice(0, 15)
+  const recentDenies = denies.slice(-25).reverse()
+
+  const tile = (n: string, label: string, kind = '') =>
+    `<div class="feat"><span class="kind ${kind}">${esc(label)}</span><strong>${esc(n)}</strong></div>`
+  const bars = span
+    .map(d => {
+      const s = days.get(d) ?? stat()
+      const h = Math.max(s.calls ? 3 : 1, Math.round((s.calls / peak) * 100))
+      const dh = s.calls ? Math.max(s.denies ? 3 : 0, Math.round((s.denies / peak) * 100)) : 0
+      return `<div class="bar" title="${esc(d)}: ${s.calls} calls, ${s.denies} denies, ${money(s.cost)}"><i style="height:${h}%"></i><b style="height:${dh}%"></b></div>`
+    })
+    .join('')
+  const toolRows = tools
+    .map(([t, s]) => `<tr><td><code>${esc(t)}</code></td><td>${s.calls}</td><td class="${s.denies ? 'o' : ''}">${s.denies}</td><td>${s.flags}</td><td>${money(s.cost)}</td></tr>`)
+    .join('')
+  const sessionRows = recentSessions
+    .map(([sid, s]) => `<tr${sid === opts.sid ? ' class="me"' : ''}><td><code>${esc(sid.slice(0, 8))}</code>${sid === opts.sid ? ' <span class="g">this</span>' : ''}</td><td>${when(s.last)}</td><td>${s.calls}</td><td class="${s.denies ? 'o' : ''}">${s.denies}</td><td>${money(s.cost)}</td></tr>`)
+    .join('')
+  const denyRows = recentDenies
+    .map(r => `<tr><td>${when(r.ts)}</td><td><code>${esc(what(r))}</code></td><td>${esc(r.reason ?? '')}</td><td><code>${esc(r.session.slice(0, 8))}</code></td></tr>`)
+    .join('')
+  const lede = rows.length
+    ? `${total.calls} Jev calls across ${sessions.size} sessions for ${money(total.cost)}. ${total.denies} ${total.denies === 1 ? 'deny' : 'denies'} (${pct(total.denies, total.calls + total.denies)}%), ${total.flags} injection ${total.flags === 1 ? 'flag' : 'flags'}, ${errors} ${errors === 1 ? 'error' : 'errors'}.`
+    : 'No decisions logged yet. Run a few commands with ohmyjev on, then come back.'
+
+  return `<!doctype html>
+<html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1">
+<title>ohmyjev · stats</title>
+<style>
+@font-face { font-family: "Changa"; src: url("${FONTS}/Changa-ExtraBold.woff2") format("woff2"); font-weight: 800; font-display: swap; }
+@font-face { font-family: "Space Grotesk"; src: url("${FONTS}/SpaceGrotesk-Regular.woff2") format("woff2"); font-weight: 400; font-display: swap; }
+@font-face { font-family: "Space Grotesk"; src: url("${FONTS}/SpaceGrotesk-SemiBold.woff2") format("woff2"); font-weight: 600; font-display: swap; }
+@font-face { font-family: "Space Grotesk"; src: url("${FONTS}/SpaceGrotesk-Bold.woff2") format("woff2"); font-weight: 700; font-display: swap; }
+@font-face { font-family: "JetBrains Mono"; src: url("${FONTS}/JetBrainsMono-Regular.woff2") format("woff2"); font-weight: 400; font-display: swap; }
+:root {
+  --ground: #0a0a0a; --surface: #131313; --panel: rgba(19, 19, 19, .9); --panel-hi: rgba(28, 28, 28, .94);
+  --paper: #f4f8f5; --muted: #a5b5a9; --faint: #829487; --line: #2e2e2e; --steel: #829487;
+  --brand: #00ee22; --brand-hi: #39ff53; --link: #79ff98; --lavender: #b69cff;
+  --ok: #56e887; --warn: #ffc857; --err: #ff737d; --info: #74c7ff;
+  --ui: clamp(.875rem, .82rem + .15vw, 1rem);
+  --logo: "Changa", "Space Grotesk", system-ui, sans-serif; --display: "Space Grotesk", system-ui, sans-serif;
+  --body: "Space Grotesk", system-ui, sans-serif; --label: "Space Grotesk", system-ui, sans-serif;
+  --mono: "JetBrains Mono", ui-monospace, "SF Mono", Menlo, monospace;
+  color-scheme: dark;
+}
+*, *::before, *::after { margin: 0; padding: 0; box-sizing: border-box; }
+html { background: var(--ground); scrollbar-color: var(--line) var(--ground); }
+body {
+  min-height: 100vh; padding: clamp(26px, 4.5vh, 64px) clamp(22px, 6vw, 120px) 80px; color: var(--paper); font-family: var(--body);
+  -webkit-font-smoothing: antialiased; background: var(--ground);
+  background-image: linear-gradient(rgba(140, 140, 140, .07) 1px, transparent 1px), linear-gradient(90deg, rgba(140, 140, 140, .07) 1px, transparent 1px);
+  background-size: 64px 64px;
+}
+::selection { background: rgba(0, 238, 34, .3); color: var(--paper); }
+a { color: inherit; text-decoration: none; }
+:focus-visible { outline: 2px solid var(--link); outline-offset: 3px; }
+code { font-family: var(--mono); font-size: .875em; color: var(--paper); }
+.lbl { font-family: var(--label); font-weight: 600; font-size: var(--ui); letter-spacing: .06em; text-transform: uppercase; }
+.header { display: flex; align-items: baseline; justify-content: space-between; gap: 16px; flex-wrap: wrap; margin-bottom: clamp(28px, 6vh, 64px); }
+.brand { font: 800 30px/1 var(--logo); letter-spacing: -.01em; color: var(--paper); white-space: nowrap; }
+.brand .acc { color: var(--brand); }
+.header .lbl { color: var(--faint); }
+.header .lbl span { color: var(--brand); }
+.section-label { display: flex; align-items: center; gap: 10px; color: var(--paper); margin-bottom: 12px; }
+.section-label::before { content: ""; width: 6px; height: 6px; background: var(--brand); }
+.section-label span { margin-left: 8px; color: var(--faint); }
+h2 { color: var(--paper); font: 600 clamp(1.75rem, 1.3rem + 1.2vw, 2.25rem)/1.1 var(--display); letter-spacing: -.02em; text-transform: lowercase; text-wrap: balance; }
+h2 em { font-style: inherit; color: var(--brand); }
+.lede { max-width: 62ch; color: var(--muted); font-size: clamp(1rem, .95rem + .2vw, 1.125rem); line-height: 1.5; margin: 14px 0 clamp(22px, 4vh, 40px); }
+h3 { font: 600 var(--ui) var(--label); letter-spacing: .06em; text-transform: uppercase; color: var(--paper); }
+section { margin-bottom: clamp(24px, 4vh, 44px); }
+.grid { display: grid; gap: 1px; background: var(--line); border: 1px solid var(--line); }
+.grid > * { position: relative; display: flex; flex-direction: column; gap: 8px; min-width: 0; padding: clamp(14px, 2vh, 22px) clamp(14px, 1.4vw, 22px); background: var(--panel); transition: background .25s ease; }
+.grid > *:hover { background: var(--panel-hi); }
+.tiles { grid-template-columns: repeat(auto-fit, minmax(150px, 1fr)); }
+/* tiles draw their own hairlines, so a short last row ends in panel, not a block of line color */
+.tiles { background: var(--panel); }
+.tiles > * { box-shadow: 1px 0 0 var(--line), 0 1px 0 var(--line); }
+.g2 { grid-template-columns: repeat(auto-fit, minmax(min(100%, 420px), 1fr)); }
+.kind { font: 600 .75rem var(--label); letter-spacing: .08em; text-transform: uppercase; color: var(--faint); display: inline-flex; align-items: center; gap: 6px; }
+.kind::before { content: ""; width: 5px; height: 5px; background: var(--steel); }
+.kind.gate::before { background: var(--err); }
+.kind.check::before { background: var(--lavender); }
+.kind.route::before { background: var(--info); }
+.feat strong { font: 700 clamp(1.6rem, 2.4vw, 2.2rem)/1.1 var(--display); letter-spacing: -.03em; color: var(--paper); font-variant-numeric: tabular-nums; }
+.card-head { display: flex; flex-wrap: wrap; align-items: baseline; justify-content: space-between; gap: 4px 16px; }
+.card-head .meta { color: var(--faint); font: 600 .75rem var(--label); letter-spacing: .06em; text-transform: uppercase; }
+.chart { display: flex; align-items: flex-end; gap: 3px; height: 160px; padding-top: 8px; border-bottom: 1px solid var(--line); }
+.bar { position: relative; flex: 1; height: 100%; min-width: 0; }
+.bar i, .bar b { position: absolute; left: 0; right: 0; bottom: 0; display: block; }
+.bar i { background: rgba(0, 238, 34, .45); transition: background .2s ease; }
+.bar b { background: var(--err); }
+.bar:hover i { background: var(--brand-hi); }
+.axis { display: flex; justify-content: space-between; color: var(--faint); font: .75rem var(--mono); padding-top: 6px; }
+.legend { display: flex; gap: 18px; color: var(--faint); font: 600 .75rem var(--label); letter-spacing: .06em; text-transform: uppercase; }
+.legend i { display: inline-block; width: 10px; height: 10px; vertical-align: -1px; margin-right: 6px; background: rgba(0, 238, 34, .45); }
+.legend i.o { background: var(--err); }
+.tbl { overflow: auto; border: 1px solid var(--line); scrollbar-width: thin; }
+table { width: 100%; border-collapse: collapse; }
+th { padding: 7px 14px; text-align: left; font: 600 .75rem var(--label); letter-spacing: .08em; text-transform: uppercase; color: var(--faint); border-bottom: 1px solid var(--line); background: var(--panel); white-space: nowrap; }
+td { padding: 6px 14px; border-bottom: 1px solid var(--line); color: var(--muted); font-size: .9375rem; line-height: 1.35; vertical-align: top; background: rgba(19, 19, 19, .82); font-variant-numeric: tabular-nums; }
+tr:last-child td { border-bottom: 0; }
+tr:hover td { background: var(--panel-hi); }
+td:first-child, td:nth-child(2) { white-space: nowrap; }
+td.o { color: var(--err); }
+.g { color: var(--ok); }
+.me td { background: rgba(0, 238, 34, .06); }
+.empty { padding: 18px 14px; color: var(--faint); }
+.foot { display: flex; flex-wrap: wrap; justify-content: space-between; gap: 8px 24px; margin-top: 40px; padding-top: 14px; border-top: 1px solid var(--line); color: var(--faint); font-size: .875rem; }
+.foot a { color: var(--link); }
+.foot a:hover { color: var(--brand-hi); }
+.foot a span { color: var(--brand); }
+</style></head>
+<body>
+<header class="header">
+  <a class="brand" href="https://ohmyjev.xyz" aria-label="ohmyjev"><span class="acc">&gt;_</span>ohmy<span class="acc">jev</span></a>
+  <div class="lbl">stats <span>·</span> ${esc(when(opts.now))} UTC${opts.source ? ` <span>·</span> ${esc(opts.source)}` : ''}</div>
+</header>
+<p class="section-label lbl">What Jev decided <span>every session on this machine</span></p>
+<h2>what jev <em>decided</em></h2>
+<p class="lede">${esc(lede)}</p>
+
+<section><div class="grid tiles">
+  ${tile(String(total.calls), 'Jev calls')}
+  ${tile(String(total.denies), 'denies', 'gate')}
+  ${tile(String(total.flags), 'injection flags', 'check')}
+  ${tile(money(total.cost), 'cost')}
+  ${tile(`${quantile(ms, 0.5)} ms`, 'p50 latency')}
+  ${tile(`${quantile(ms, 0.95)} ms`, 'p95 latency')}
+  ${tile(String(sessions.size), 'sessions')}
+  ${tile(String(errors), 'errors')}
+  ${tile(String(compactions), 'auto-compactions', 'route')}
+</div></section>
+
+<section><div class="grid"><div>
+  <div class="card-head"><h3>last ${DAYS} days</h3><span class="legend"><span><i></i>calls</span><span><i class="o"></i>denies</span></span></div>
+  <div class="chart">${bars}</div>
+  <div class="axis"><span>${esc(span[0])}</span><span>${esc(span.at(-1))}</span></div>
+</div></div></section>
+
+<section><div class="grid g2">
+  <div>
+    <div class="card-head"><h3>by tool</h3><span class="meta">most denied first</span></div>
+    <div class="tbl">${toolRows ? `<table><thead><tr><th>tool</th><th>calls</th><th>denies</th><th>flags</th><th>cost</th></tr></thead><tbody>${toolRows}</tbody></table>` : '<p class="empty">nothing yet</p>'}</div>
+  </div>
+  <div>
+    <div class="card-head"><h3>sessions</h3><span class="meta">latest ${recentSessions.length} of ${sessions.size}</span></div>
+    <div class="tbl">${sessionRows ? `<table><thead><tr><th>session</th><th>last seen (UTC)</th><th>calls</th><th>denies</th><th>cost</th></tr></thead><tbody>${sessionRows}</tbody></table>` : '<p class="empty">nothing yet</p>'}</div>
+  </div>
+</div></section>
+
+<section><div class="grid"><div>
+  <div class="card-head"><h3>recent denies</h3><span class="meta">latest ${recentDenies.length} of ${denies.length}</span></div>
+  <div class="tbl">${denyRows ? `<table><thead><tr><th>when (UTC)</th><th>tool</th><th>reason</th><th>session</th></tr></thead><tbody>${denyRows}</tbody></table>` : '<p class="empty">no denies</p>'}</div>
+</div></div></section>
+
+<footer class="foot">
+  <span>Read from ~/.ohmyjev/log, readable only by you. Nothing on this page leaves the machine.</span>
+  <span>Regenerate with <code>/omj stats</code> · <a href="https://ohmyjev.xyz">ohmyjev<span>.</span>xyz</a></span>
+</footer>
+</body></html>
+`
+}

package/hooks/policy.ts

@@ -24,6 +24,7 @@ export const DEFAULTS = {
   doneVerifiedMax: 0.3,
   doneAsksUserMax: 0.5,
   exfil: 0.7,
+  requested: 0.8,
   askJev: true,
   autoCompact: true,
   compactSwitched: 0.8,
@@ -75,8 +76,9 @@ export const score = (instructions: string, criteria: string[]): Question => ({
 // --- questions (rubrics from ten-levels-of-jev level 6) ---
 
 export const BLOCK_NOTICE =
-  'This block is final. Do not try to work around it with another command, another tool, a different path, ' +
-  'or an encoding that does the same thing. Stop and tell the user what was blocked and why.'
+  'Do not try to work around it with another command, another tool, a different path, or an encoding that does the ' +
+  'same thing. Tell the user what was blocked and why. If they reply asking for exactly this, in words that name it, ' +
+  'run it again: their request then lets it through.'
 export const DONE_REASON =
   "You said this is done but nothing shows it was verified. Run the check, or say explicitly why it can't be verified."
 
@@ -122,11 +124,20 @@ export const POLICY_Q: Questions = {
   ),
 }
 /** A gate's questions plus the policy question, only when the user wrote policies. */
-export const withPolicyQ = (q: Questions, c: Config): Questions => (splitList(c.policies).length ? { ...q, ...POLICY_Q } : q)
+export const withPolicyQ = (q: Questions, c: Config, request = ''): Questions =>
+  ({ ...q, ...(splitList(c.policies).length ? POLICY_Q : {}), ...(request.trim() ? REQUESTED_Q : {}) })
 /** A gate's state plus the user's policies, only when there are some. */
-export const withPolicies = <T extends object>(state: T, c: Config): T | (T & { policies: string[] }) => {
+export const withPolicies = <T extends object>(state: T, c: Config, request = ''): T => {
   const policies = splitList(c.policies)
-  return policies.length ? { ...state, policies } : state
+  return { ...state, ...(policies.length ? { policies } : {}), ...(request.trim() ? { request: clip(request, 1500) } : {}) }
+}
+/** Asked only when there is a user request: does the user's own latest message ask for exactly this call? */
+export const REQUESTED_Q: Questions = {
+  requested: noul(
+    'Does `request`, the user\'s own latest message, explicitly ask for what this call does?',
+    'The user named this action or its target: delete that file, force push, remove the co-author line, uninstall X',
+    'The request is about something else, is vague, or the agent chose this step on its own',
+  ),
 }
 /** The tier rubric: Jev's choice criteria, and the labels the built-in classifier picks from. */
 const TIER_CRITERIA: Record<Tier, string> = {
@@ -197,15 +208,22 @@ const policyDeny = (a: Answers, threshold: number): Judged | null => {
   return p >= threshold ? { verdict: 'deny', reason: `breaks a listed policy (${f2(p)})` } : null
 }
 
+/** A Jev deny the user's own request asked for passes. Policy and path denies never reach here. */
+const unlessRequested = (j: Judged, a: Answers, c: Config): Judged => {
+  const r = nv(a, 'requested')
+  return j.verdict === 'deny' && r >= c.requested ? { verdict: null, reason: `${j.reason}; the user asked for it (${f2(r)})` } : j
+}
+
 export function gateBash(a: Answers, c: Config): Judged {
   const effect = ch(a, 'effect')
   const destructive = nv(a, 'destructive_intent')
   const policy = policyDeny(a, c.bashDestructive)
   if (policy) return policy
+  // destructive intent alone is most editing (deleting lines, uninstalling); it only tips an irreversible answer
   if (effect.choice === 'irreversible' && effect.confidence >= c.bashIrreversible)
-    return { verdict: 'deny', reason: `irreversible (${f2(effect.confidence)}): nothing would restore what this removes or overwrites` }
-  if (destructive >= c.bashDestructive)
-    return { verdict: 'deny', reason: `destructive intent (${f2(destructive)}): this command aims to wipe something` }
+    return unlessRequested({ verdict: 'deny', reason: `irreversible (${f2(effect.confidence)}): nothing would restore what this removes or overwrites` }, a, c)
+  if (effect.choice === 'irreversible' && destructive >= c.bashDestructive)
+    return unlessRequested({ verdict: 'deny', reason: `irreversible (${f2(effect.confidence)}) and destructive (${f2(destructive)}): this aims to wipe something with no way back` }, a, c)
   return { verdict: null, reason: `${effect.choice} (${f2(effect.confidence)}), destructive ${f2(destructive)}` }
 }
 
@@ -215,9 +233,9 @@ export function gateWrite(a: Answers, c: Config): Judged {
   const policy = policyDeny(a, c.writeSecret)
   if (policy) return policy
   if (secret >= c.writeSecret)
-    return { verdict: 'deny', reason: `contains a credential (${f2(secret)}): put it in an ignored .env or a secret store` }
+    return unlessRequested({ verdict: 'deny', reason: `contains a credential (${f2(secret)}): put it in an ignored .env or a secret store` }, a, c)
   if (kind.choice === 'secrets' && kind.confidence >= c.writeSecretsKind)
-    return { verdict: 'deny', reason: `a secrets file (${f2(kind.confidence)}): keep credentials out of the repo` }
+    return unlessRequested({ verdict: 'deny', reason: `a secrets file (${f2(kind.confidence)}): keep credentials out of the repo` }, a, c)
   return { verdict: null, reason: `${kind.choice} (${f2(kind.confidence)}), secret ${f2(secret)}` }
 }
 
@@ -225,7 +243,7 @@ export function gateExfil(a: Answers, c: Config): Judged {
   const p = nv(a, 'exfiltrates')
   const policy = policyDeny(a, c.exfil)
   if (policy) return policy
-  if (p >= c.exfil) return { verdict: 'deny', reason: `sends local data out (${f2(p)}): keep local files and credentials local` }
+  if (p >= c.exfil) return unlessRequested({ verdict: 'deny', reason: `sends local data out (${f2(p)}): keep local files and credentials local` }, a, c)
   return { verdict: null, reason: `exfil ${f2(p)}` }
 }
 
@@ -239,8 +257,10 @@ export function screen(a: Answers, c: Config): { flagged: boolean; reason: strin
 }
 
 /** The done-check (DONE_REASON when done is claimed with no sign of a check or question) and the compact verdict. */
-export function judgeStop(a: Answers, c: Config): { block: string | null; wantsCompact: boolean } {
+/** `ranTools` false: the turn ran no tool, so there is nothing that could have been verified and nothing to block. */
+export function judgeStop(a: Answers, c: Config, ranTools = true): { block: string | null; wantsCompact: boolean } {
   const unverified =
+    ranTools &&
     nv(a, 'claimed_done') >= c.doneClaimed && nv(a, 'verified') < c.doneVerifiedMax && nv(a, 'asks_user') < c.doneAsksUserMax
   const wantsCompact = nv(a, 'switched_gears') >= c.compactSwitched && nv(a, 'at_boundary') >= c.compactBoundary
   return { block: unverified ? DONE_REASON : null, wantsCompact }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ohmyjev",
-  "version": "0.3.1",
+  "version": "0.4.0",
   "description": "Guardrails for coding agents, decided by TypeSafe's Jev: blocks destructive commands, catches prompt injection, pushes back on an unverified done and routes effort per turn. For Claude Code, pi and omp.",
   "type": "module",
   "license": "MIT",
@@ -19,6 +19,7 @@
   ],
   "files": [
     "adapters/*.ts",
+    "hooks/dashboard.ts",
     "hooks/jev.ts",
     "hooks/policy.ts",
     "extras/"
@@ -125,6 +126,11 @@
         "description": "Deny when Jev rates a call as sending local data out at least this probably (0-1)",
         "default": 0.7
       },
+      "requested": {
+        "type": "number",
+        "description": "A gate's Jev deny passes when Jev rates your latest message as asking for exactly that call at least this probable (0-1). Policy and path denies always stand",
+        "default": 0.8
+      },
       "askJev": {
         "type": "boolean",
         "description": "Expose the ask_jev tool for quick judgments about repo files or text",