jev-cognitive-mcp 0.4.4__tar.gz

jev_cognitive_mcp-0.4.4/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 jev-cognitive-mcp Contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

jev_cognitive_mcp-0.4.4/PKG-INFO

@@ -0,0 +1,178 @@
+Metadata-Version: 2.4
+Name: jev-cognitive-mcp
+Version: 0.4.4
+Summary: Advisory 3+1 Cognitive Hierarchy Toolkit & Model Context Protocol (MCP) Server for Agentic Coding: Pre-Tool Risk Screening, Dynamic Task Routing, Candidate Ranking, and Evidence Review.
+Author: jev-cognitive-mcp maintainers
+License: MIT
+Project-URL: Homepage, https://github.com/17671454333/jev-cognitive-mcp
+Project-URL: Repository, https://github.com/17671454333/jev-cognitive-mcp
+Project-URL: Issues, https://github.com/17671454333/jev-cognitive-mcp/issues
+Project-URL: Changelog, https://github.com/17671454333/jev-cognitive-mcp/releases
+Keywords: mcp,model-context-protocol,ai-agents,codex,security-guardrails,model-router,system1-system2,llm-verification
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Software Development :: Quality Assurance
+Classifier: Topic :: Security
+Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Provides-Extra: dev
+Requires-Dist: pytest>=7.4.0; extra == "dev"
+Requires-Dist: pytest-cov>=4.1.0; extra == "dev"
+Dynamic: license-file
+
+# jev-cognitive-mcp
+
+**English** · [简体中文](README.zh-CN.md)
+
+[![CI](https://github.com/17671454333/jev-cognitive-mcp/actions/workflows/ci.yml/badge.svg)](https://github.com/17671454333/jev-cognitive-mcp/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/License-MIT-brightgreen.svg)](LICENSE)
+[![Python 3.10+](https://img.shields.io/badge/python-3.10%2B-blue.svg)](pyproject.toml)
+[![MCP Protocol](https://img.shields.io/badge/MCP-2024--11--05-purple.svg)](jev_kit/mcp_server.py)
+
+**Advisory 3+1 Cognitive Hierarchy Toolkit & Model Context Protocol (MCP) Server for Coding Agents (OpenAI Codex CLI, Claude Code, Cursor, Antigravity).**
+
+`jev-cognitive-mcp` provides deterministic Layer-0 DLP/destructive command pre-screening, 5-factor Meta-Controller escalation arbitration, and optional System-1 probabilistic triage (`guard`, `route`, `verify`, `rerank`) over stdio MCP. All verdicts and routing signals are **advisory**—the host agent remains responsible for enforcing command blocking, sandboxing, and human-in-the-loop approval gates.
+
+---
+
+## Architecture: The 3+1 Cognitive Hierarchy
+
+```mermaid
+flowchart LR
+    A["Incoming Agent Action / Task"] --> L0["Layer 0: Deterministic Reflex<br/>(0 network / 0 token cost)<br/>DLP regex & destructive pattern screen"]
+    L0 -->|Blocked / Matched| OUT0["Immediate Advisory Verdict"]
+    L0 -->|Needs Semantic Triage| S1["System 1: Probabilistic Intuition (JEV)<br/>(Requires external JevBridge)<br/>Guard / Route / Rerank / Verify"]
+    S1 --> MC{"Meta-Controller<br/>5-Factor Arbitration"}
+    MC -->|High Confidence & Two-Way Door| OUT1["Advisory Fast Path"]
+    MC -->|Low Confidence / High Risk| S2["System 2: Host Frontier LLM<br/>(Codex / o3 / Sonnet Thinking)"]
+    MC -->|One-Way Door & High Risk| HG["Explicit Human Gate Required"]
+```
+
+| Layer | Role | Execution Mode | Responsibility |
+|---|---|---|---|
+| **Layer 0 (Reflex)** | Deterministic Code | Local offline (`0 tokens`, no network call) | Pre-egress regex DLP credential screening (`sk-*`, `sk-ant-*`, `ghp_*`, `glpat-*`, `AKIA*`, `SG.*`, `pypi-*`, `hf_*`, `Bearer`, `password=`, `secret=`, `api_key=`, `token=`, PEM keys), destructive shell pattern matching (`rm -rf /`, `rm -rf -- /`, `Remove-Item -Recurse -Force`, `mkfs`, `wipefs -a`, `shred -u /`, `DROP DATABASE`, `curl \| bash`), strict schema validation |
+| **System 1 (Intuition)** | Probabilistic JEV | External `JevBridge` single-attempt call | Multi-head `noul` (boolean probability), `choice` (categorical distribution), and `score` (0..4 ordinal rubric) evaluations |
+| **System 2 (Reasoning)** | Host Frontier LLM | Host agent runtime | Complex causal reasoning, multi-file architecture design, subtle debugging |
+| **Meta-Controller** | Control Plane | Local offline (`0 tokens`, no network call) | Arbitrates escalation using 5 quantitative signals: **Confidence**, **Risk**, **Reversibility**, **Expected Value**, and **Cost Pressure** |
+
+---
+
+## Core Modules & MCP Tools
+
+1. **`jev_guard` (`jev_kit.guard`) — Advisory Pre-Tool Command Risk Screen**
+   - Evaluates shell commands before execution and returns an advisory action (`ALLOW`, `INSPECT`, `ESCALATE_HUMAN`, or `BLOCK`).
+   - **Layer 0 (`reflex_only=true` or pre-screen)**: Blocks literal credential egress (`SENSITIVE_INPUT_REJECTED`) and known destructive shell/PowerShell patterns locally with zero network calls.
+   - **System 1 (when `reflex_only=false`)**: Evaluates `is_destructive`, `is_rce_or_exfil`, and `is_secret_leak` probabilities via `JevBridge`.
+2. **`jev_arbitrate` (`jev_kit.controller`) — Offline 5-Factor Meta-Controller**
+   - Purely deterministic calculation of expected escalation utility from `(confidence, risk, reversible, expected_value, cost_pressure)`. Recommends `human_gate` on irreversible high-risk actions. Works completely offline.
+3. **`jev_route` (`jev_kit.router`) — Advisory Task & Model Tier Router**
+   - Classifies incoming coding prompts into `FAST` (`codex-mini-latest`, `gpt-4o-mini`), `STANDARD` (`gpt-4.1`, `gpt-4o`), or `DEEP_REASONING` (`o3`, `codex-1`) tiers while estimating architectural scope.
+4. **`jev_verify` (`jev_kit.verifier`) — Caller-Supplied Completion & Acceptance Review**
+   - Reviews caller-supplied `task_spec`, `implemented_changes` summary, and `test_results` logs to return `PASS`, `ADVISORY`, or `NEEDS_REVISION`. Does **not** inspect git repositories or run test suites directly.
+5. **`jev_rerank` (`jev_kit.reranker`) — Bounded Semantic Candidate Reranker**
+   - Ranks up to 96 caller-supplied code snippets or issue candidates in deterministic batches of 12 while preserving full provenance and failing closed on partial batch errors.
+
+---
+
+## Offline Deterministic Mode vs. External `JevBridge` Requirement
+
+- **Works 100% Offline (Zero External Dependencies)**:
+  - `jev_arbitrate` (5-factor Meta-Controller)
+  - `jev_guard` with `reflex_only=true` (`jev-kit guard "<cmd>" --reflex-only`)
+  - `jev-kit init-codex` (configuration generator for OpenAI Codex CLI and MCP clients)
+  - Pre-egress credential DLP screening inside `call_jev()` (blocks sensitive tokens before any bridge lookup)
+- **Requires External `JevBridge` Runtime**:
+  - `jev_guard` (when `reflex_only=false` and Layer 0 does not match), `jev_route`, `jev_verify`, and `jev_rerank` invoke `jev_cli.py` from the local `JevBridge` runtime directory.
+  - Set `JEV_BRIDGE_DIR=/path/to/JevBridge/runtime` (defaults to `%LOCALAPPDATA%\JevBridge\runtime` on Windows or `~/.local/share/JevBridge/runtime` on Linux/macOS). If the bridge runtime is not installed, these tools fail closed with `JevIntegrationError(code="BRIDGE_MISSING")`.
+
+---
+
+## Quick Start
+
+### 1. Installation
+
+```bash
+git clone https://github.com/17671454333/jev-cognitive-mcp.git
+cd jev-cognitive-mcp
+pip install -e ".[dev]"
+```
+
+### 2. Wire into OpenAI Codex CLI (`~/.codex/config.toml`)
+
+Generate the exact TOML snippet with `jev-kit init-codex --format toml` and add it to `~/.codex/config.toml`:
+
+```toml
+[mcp_servers.jev_cognitive]
+command = "jev-mcp"
+args = []
+```
+
+### 3. Wire into JSON MCP Clients (Claude Code, Cursor, Antigravity)
+
+Generate with `jev-kit init-codex --format json`:
+
+```json
+{
+  "mcpServers": {
+    "jev-cognitive": {
+      "command": "jev-mcp",
+      "args": []
+    }
+  }
+}
+```
+
+### 4. CLI Usage & Verification
+
+```bash
+# Generate OpenAI Codex CLI config.toml snippet
+jev-kit init-codex --format toml
+
+# Layer-0 deterministic reflex screen (offline, 0 tokens)
+jev-kit guard "rm -rf -- /" --reflex-only
+
+# 5-factor Meta-Controller arbitration (offline, 0 tokens)
+jev-kit arbitrate --confidence 0.62 --risk 0.75 --irreversible --value 0.85
+
+# Run deterministic unit test suite
+python -m unittest discover -s tests -v
+```
+
+---
+
+## Security & Reliability Boundaries
+
+- **Pre-Egress Credential DLP Chokepoint**: Both `local_reflex_screen()` and `call_jev()` screen serialized inputs for literal secrets (`sk-*`, `ghp_*`, `glpat-*`, `AKIA*`, `sntrys_*`, `s.*`, `PMAK-*`, `glsa_*`, `Bearer`, `password=`, `secret=`, `api_key=`, `token=`, PEM private keys, and URL userinfo credentials) and raise `SENSITIVE_INPUT_REJECTED` before `_invoke_bridge()` can be called.
+- **Zero Direct Credential Arguments**: `call_jev()` rejects explicit `api_key`, `token`, or `secret` keyword arguments (`DIRECT_CREDENTIALS_DISABLED`).
+- **Advisory Boundary**: Outputs from `jev-cognitive-mcp` are advisory structured signals; host agents must enforce execution blocking and human approval gates.
+- **No Silent Fallbacks**: Timeouts, missing bridge runtimes (`BRIDGE_MISSING`), or malformed responses raise `JevIntegrationError` with explicit `billing_uncertain` tracking rather than defaulting to `ALLOW` or `PASS`.
+
+## License
+
+Released under the [MIT License](LICENSE).
+
+
+## Zero-Popup Chrome M144+ Live CDP Guard (`jev_chrome_guard`)
+
+Modern Chrome (M144+) exposes `%LOCALAPPDATA%\Google\Chrome\User Data\DevToolsActivePort` via `chrome://inspect/#remote-debugging`, triggering a native modal prompt on every transient WebSocket handshake. `jev_chrome_guard` provides:
+- **Zero-Popup `DevToolsActivePort` Discovery**: Parses live port and browser WebSocket UUID across Windows, macOS, and Linux without opening transient WebSockets.
+- **Layer-0 CDP DLP & SSRF Pre-Screen**: Blocks accidental `.env` / SSH key / `.kube/config` / `terraform.tfstate` / Chrome `Local State` file uploads in `DOM.setFileInputFiles`, blocks `document.cookie` / `cookieStore.getAll()`, `localStorage`/`sessionStorage`/`indexedDB` network exfiltration, `navigator.clipboard.readText()`, and `navigator.credentials.get()` harvesting in `Runtime.evaluate`, blocks bulk `DOMStorage`/`IndexedDB`/cookie dumps, MITM `Fetch.enable` / `Network.setCookie` overrides, sensitive `Browser.setDownloadBehavior` path traversal, and `Cookie`/`Proxy-Authorization` header overrides, blocks `file://` browser profile vault reads and cloud metadata SSRF (`169.254.169.254`, `[fd00:ec2::254]`, `100.100.100.200`) in `Page.navigate`, and enforces `userGesture: true` on safe evaluations to prevent popup blockers.
+
+---
+
+## Open-Core Pro & Commercial Ecosystem
+
+| Capability | Community Core (`jev-cognitive-mcp` · MIT) | Studio Pro Suite (Commercial / Sponsors) |
+| :--- | :--- | :--- |
+| **Layer-0 Shell & CDP Guardrails** | ✅ Included (75-case JSONL benchmark, 0 tokens) | ✅ + Custom Enterprise Policy Packs |
+| **5-Factor Meta-Controller & Autopilot** | ✅ Included (`jev_arbitrate`, `jev_autopilot`) | ✅ + Multi-Key Quota Balancer |
+| **Chrome M144+ Zero-Popup CDP Guard** | ✅ Endpoint Discovery + Layer-0 CDP Screen | ✅ + Persistent Multi-Tab Daemon & Windows UIA Auto-Consent |
+| **8-Platform Matrix Auto-Publisher** | — | 🚀 **Pro Exclusive**: One-click zero-login publishing to YouTube, TikTok, Bilibili, Xiaohongshu, Douyin, WeChat Channels & Kuaishou |
+| **AI Short-Drama & WebGame Studio** | See [`open-short-drama-studio`](https://github.com/17671454333/open-short-drama-studio) | 🚀 **Pro Exclusive**: Cross-shot face-locking, Seedance 85%-credit-saver pipeline, CapCut draft exporter & 6-target WebGame packager |

jev_cognitive_mcp-0.4.4/README.md

@@ -0,0 +1,149 @@
+# jev-cognitive-mcp
+
+**English** · [简体中文](README.zh-CN.md)
+
+[![CI](https://github.com/17671454333/jev-cognitive-mcp/actions/workflows/ci.yml/badge.svg)](https://github.com/17671454333/jev-cognitive-mcp/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/License-MIT-brightgreen.svg)](LICENSE)
+[![Python 3.10+](https://img.shields.io/badge/python-3.10%2B-blue.svg)](pyproject.toml)
+[![MCP Protocol](https://img.shields.io/badge/MCP-2024--11--05-purple.svg)](jev_kit/mcp_server.py)
+
+**Advisory 3+1 Cognitive Hierarchy Toolkit & Model Context Protocol (MCP) Server for Coding Agents (OpenAI Codex CLI, Claude Code, Cursor, Antigravity).**
+
+`jev-cognitive-mcp` provides deterministic Layer-0 DLP/destructive command pre-screening, 5-factor Meta-Controller escalation arbitration, and optional System-1 probabilistic triage (`guard`, `route`, `verify`, `rerank`) over stdio MCP. All verdicts and routing signals are **advisory**—the host agent remains responsible for enforcing command blocking, sandboxing, and human-in-the-loop approval gates.
+
+---
+
+## Architecture: The 3+1 Cognitive Hierarchy
+
+```mermaid
+flowchart LR
+    A["Incoming Agent Action / Task"] --> L0["Layer 0: Deterministic Reflex<br/>(0 network / 0 token cost)<br/>DLP regex & destructive pattern screen"]
+    L0 -->|Blocked / Matched| OUT0["Immediate Advisory Verdict"]
+    L0 -->|Needs Semantic Triage| S1["System 1: Probabilistic Intuition (JEV)<br/>(Requires external JevBridge)<br/>Guard / Route / Rerank / Verify"]
+    S1 --> MC{"Meta-Controller<br/>5-Factor Arbitration"}
+    MC -->|High Confidence & Two-Way Door| OUT1["Advisory Fast Path"]
+    MC -->|Low Confidence / High Risk| S2["System 2: Host Frontier LLM<br/>(Codex / o3 / Sonnet Thinking)"]
+    MC -->|One-Way Door & High Risk| HG["Explicit Human Gate Required"]
+```
+
+| Layer | Role | Execution Mode | Responsibility |
+|---|---|---|---|
+| **Layer 0 (Reflex)** | Deterministic Code | Local offline (`0 tokens`, no network call) | Pre-egress regex DLP credential screening (`sk-*`, `sk-ant-*`, `ghp_*`, `glpat-*`, `AKIA*`, `SG.*`, `pypi-*`, `hf_*`, `Bearer`, `password=`, `secret=`, `api_key=`, `token=`, PEM keys), destructive shell pattern matching (`rm -rf /`, `rm -rf -- /`, `Remove-Item -Recurse -Force`, `mkfs`, `wipefs -a`, `shred -u /`, `DROP DATABASE`, `curl \| bash`), strict schema validation |
+| **System 1 (Intuition)** | Probabilistic JEV | External `JevBridge` single-attempt call | Multi-head `noul` (boolean probability), `choice` (categorical distribution), and `score` (0..4 ordinal rubric) evaluations |
+| **System 2 (Reasoning)** | Host Frontier LLM | Host agent runtime | Complex causal reasoning, multi-file architecture design, subtle debugging |
+| **Meta-Controller** | Control Plane | Local offline (`0 tokens`, no network call) | Arbitrates escalation using 5 quantitative signals: **Confidence**, **Risk**, **Reversibility**, **Expected Value**, and **Cost Pressure** |
+
+---
+
+## Core Modules & MCP Tools
+
+1. **`jev_guard` (`jev_kit.guard`) — Advisory Pre-Tool Command Risk Screen**
+   - Evaluates shell commands before execution and returns an advisory action (`ALLOW`, `INSPECT`, `ESCALATE_HUMAN`, or `BLOCK`).
+   - **Layer 0 (`reflex_only=true` or pre-screen)**: Blocks literal credential egress (`SENSITIVE_INPUT_REJECTED`) and known destructive shell/PowerShell patterns locally with zero network calls.
+   - **System 1 (when `reflex_only=false`)**: Evaluates `is_destructive`, `is_rce_or_exfil`, and `is_secret_leak` probabilities via `JevBridge`.
+2. **`jev_arbitrate` (`jev_kit.controller`) — Offline 5-Factor Meta-Controller**
+   - Purely deterministic calculation of expected escalation utility from `(confidence, risk, reversible, expected_value, cost_pressure)`. Recommends `human_gate` on irreversible high-risk actions. Works completely offline.
+3. **`jev_route` (`jev_kit.router`) — Advisory Task & Model Tier Router**
+   - Classifies incoming coding prompts into `FAST` (`codex-mini-latest`, `gpt-4o-mini`), `STANDARD` (`gpt-4.1`, `gpt-4o`), or `DEEP_REASONING` (`o3`, `codex-1`) tiers while estimating architectural scope.
+4. **`jev_verify` (`jev_kit.verifier`) — Caller-Supplied Completion & Acceptance Review**
+   - Reviews caller-supplied `task_spec`, `implemented_changes` summary, and `test_results` logs to return `PASS`, `ADVISORY`, or `NEEDS_REVISION`. Does **not** inspect git repositories or run test suites directly.
+5. **`jev_rerank` (`jev_kit.reranker`) — Bounded Semantic Candidate Reranker**
+   - Ranks up to 96 caller-supplied code snippets or issue candidates in deterministic batches of 12 while preserving full provenance and failing closed on partial batch errors.
+
+---
+
+## Offline Deterministic Mode vs. External `JevBridge` Requirement
+
+- **Works 100% Offline (Zero External Dependencies)**:
+  - `jev_arbitrate` (5-factor Meta-Controller)
+  - `jev_guard` with `reflex_only=true` (`jev-kit guard "<cmd>" --reflex-only`)
+  - `jev-kit init-codex` (configuration generator for OpenAI Codex CLI and MCP clients)
+  - Pre-egress credential DLP screening inside `call_jev()` (blocks sensitive tokens before any bridge lookup)
+- **Requires External `JevBridge` Runtime**:
+  - `jev_guard` (when `reflex_only=false` and Layer 0 does not match), `jev_route`, `jev_verify`, and `jev_rerank` invoke `jev_cli.py` from the local `JevBridge` runtime directory.
+  - Set `JEV_BRIDGE_DIR=/path/to/JevBridge/runtime` (defaults to `%LOCALAPPDATA%\JevBridge\runtime` on Windows or `~/.local/share/JevBridge/runtime` on Linux/macOS). If the bridge runtime is not installed, these tools fail closed with `JevIntegrationError(code="BRIDGE_MISSING")`.
+
+---
+
+## Quick Start
+
+### 1. Installation
+
+```bash
+git clone https://github.com/17671454333/jev-cognitive-mcp.git
+cd jev-cognitive-mcp
+pip install -e ".[dev]"
+```
+
+### 2. Wire into OpenAI Codex CLI (`~/.codex/config.toml`)
+
+Generate the exact TOML snippet with `jev-kit init-codex --format toml` and add it to `~/.codex/config.toml`:
+
+```toml
+[mcp_servers.jev_cognitive]
+command = "jev-mcp"
+args = []
+```
+
+### 3. Wire into JSON MCP Clients (Claude Code, Cursor, Antigravity)
+
+Generate with `jev-kit init-codex --format json`:
+
+```json
+{
+  "mcpServers": {
+    "jev-cognitive": {
+      "command": "jev-mcp",
+      "args": []
+    }
+  }
+}
+```
+
+### 4. CLI Usage & Verification
+
+```bash
+# Generate OpenAI Codex CLI config.toml snippet
+jev-kit init-codex --format toml
+
+# Layer-0 deterministic reflex screen (offline, 0 tokens)
+jev-kit guard "rm -rf -- /" --reflex-only
+
+# 5-factor Meta-Controller arbitration (offline, 0 tokens)
+jev-kit arbitrate --confidence 0.62 --risk 0.75 --irreversible --value 0.85
+
+# Run deterministic unit test suite
+python -m unittest discover -s tests -v
+```
+
+---
+
+## Security & Reliability Boundaries
+
+- **Pre-Egress Credential DLP Chokepoint**: Both `local_reflex_screen()` and `call_jev()` screen serialized inputs for literal secrets (`sk-*`, `ghp_*`, `glpat-*`, `AKIA*`, `sntrys_*`, `s.*`, `PMAK-*`, `glsa_*`, `Bearer`, `password=`, `secret=`, `api_key=`, `token=`, PEM private keys, and URL userinfo credentials) and raise `SENSITIVE_INPUT_REJECTED` before `_invoke_bridge()` can be called.
+- **Zero Direct Credential Arguments**: `call_jev()` rejects explicit `api_key`, `token`, or `secret` keyword arguments (`DIRECT_CREDENTIALS_DISABLED`).
+- **Advisory Boundary**: Outputs from `jev-cognitive-mcp` are advisory structured signals; host agents must enforce execution blocking and human approval gates.
+- **No Silent Fallbacks**: Timeouts, missing bridge runtimes (`BRIDGE_MISSING`), or malformed responses raise `JevIntegrationError` with explicit `billing_uncertain` tracking rather than defaulting to `ALLOW` or `PASS`.
+
+## License
+
+Released under the [MIT License](LICENSE).
+
+
+## Zero-Popup Chrome M144+ Live CDP Guard (`jev_chrome_guard`)
+
+Modern Chrome (M144+) exposes `%LOCALAPPDATA%\Google\Chrome\User Data\DevToolsActivePort` via `chrome://inspect/#remote-debugging`, triggering a native modal prompt on every transient WebSocket handshake. `jev_chrome_guard` provides:
+- **Zero-Popup `DevToolsActivePort` Discovery**: Parses live port and browser WebSocket UUID across Windows, macOS, and Linux without opening transient WebSockets.
+- **Layer-0 CDP DLP & SSRF Pre-Screen**: Blocks accidental `.env` / SSH key / `.kube/config` / `terraform.tfstate` / Chrome `Local State` file uploads in `DOM.setFileInputFiles`, blocks `document.cookie` / `cookieStore.getAll()`, `localStorage`/`sessionStorage`/`indexedDB` network exfiltration, `navigator.clipboard.readText()`, and `navigator.credentials.get()` harvesting in `Runtime.evaluate`, blocks bulk `DOMStorage`/`IndexedDB`/cookie dumps, MITM `Fetch.enable` / `Network.setCookie` overrides, sensitive `Browser.setDownloadBehavior` path traversal, and `Cookie`/`Proxy-Authorization` header overrides, blocks `file://` browser profile vault reads and cloud metadata SSRF (`169.254.169.254`, `[fd00:ec2::254]`, `100.100.100.200`) in `Page.navigate`, and enforces `userGesture: true` on safe evaluations to prevent popup blockers.
+
+---
+
+## Open-Core Pro & Commercial Ecosystem
+
+| Capability | Community Core (`jev-cognitive-mcp` · MIT) | Studio Pro Suite (Commercial / Sponsors) |
+| :--- | :--- | :--- |
+| **Layer-0 Shell & CDP Guardrails** | ✅ Included (75-case JSONL benchmark, 0 tokens) | ✅ + Custom Enterprise Policy Packs |
+| **5-Factor Meta-Controller & Autopilot** | ✅ Included (`jev_arbitrate`, `jev_autopilot`) | ✅ + Multi-Key Quota Balancer |
+| **Chrome M144+ Zero-Popup CDP Guard** | ✅ Endpoint Discovery + Layer-0 CDP Screen | ✅ + Persistent Multi-Tab Daemon & Windows UIA Auto-Consent |
+| **8-Platform Matrix Auto-Publisher** | — | 🚀 **Pro Exclusive**: One-click zero-login publishing to YouTube, TikTok, Bilibili, Xiaohongshu, Douyin, WeChat Channels & Kuaishou |
+| **AI Short-Drama & WebGame Studio** | See [`open-short-drama-studio`](https://github.com/17671454333/open-short-drama-studio) | 🚀 **Pro Exclusive**: Cross-shot face-locking, Seedance 85%-credit-saver pipeline, CapCut draft exporter & 6-target WebGame packager |

jev_cognitive_mcp-0.4.4/jev_cognitive_mcp.egg-info/PKG-INFO

@@ -0,0 +1,178 @@
+Metadata-Version: 2.4
+Name: jev-cognitive-mcp
+Version: 0.4.4
+Summary: Advisory 3+1 Cognitive Hierarchy Toolkit & Model Context Protocol (MCP) Server for Agentic Coding: Pre-Tool Risk Screening, Dynamic Task Routing, Candidate Ranking, and Evidence Review.
+Author: jev-cognitive-mcp maintainers
+License: MIT
+Project-URL: Homepage, https://github.com/17671454333/jev-cognitive-mcp
+Project-URL: Repository, https://github.com/17671454333/jev-cognitive-mcp
+Project-URL: Issues, https://github.com/17671454333/jev-cognitive-mcp/issues
+Project-URL: Changelog, https://github.com/17671454333/jev-cognitive-mcp/releases
+Keywords: mcp,model-context-protocol,ai-agents,codex,security-guardrails,model-router,system1-system2,llm-verification
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Software Development :: Quality Assurance
+Classifier: Topic :: Security
+Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Provides-Extra: dev
+Requires-Dist: pytest>=7.4.0; extra == "dev"
+Requires-Dist: pytest-cov>=4.1.0; extra == "dev"
+Dynamic: license-file
+
+# jev-cognitive-mcp
+
+**English** · [简体中文](README.zh-CN.md)
+
+[![CI](https://github.com/17671454333/jev-cognitive-mcp/actions/workflows/ci.yml/badge.svg)](https://github.com/17671454333/jev-cognitive-mcp/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/License-MIT-brightgreen.svg)](LICENSE)
+[![Python 3.10+](https://img.shields.io/badge/python-3.10%2B-blue.svg)](pyproject.toml)
+[![MCP Protocol](https://img.shields.io/badge/MCP-2024--11--05-purple.svg)](jev_kit/mcp_server.py)
+
+**Advisory 3+1 Cognitive Hierarchy Toolkit & Model Context Protocol (MCP) Server for Coding Agents (OpenAI Codex CLI, Claude Code, Cursor, Antigravity).**
+
+`jev-cognitive-mcp` provides deterministic Layer-0 DLP/destructive command pre-screening, 5-factor Meta-Controller escalation arbitration, and optional System-1 probabilistic triage (`guard`, `route`, `verify`, `rerank`) over stdio MCP. All verdicts and routing signals are **advisory**—the host agent remains responsible for enforcing command blocking, sandboxing, and human-in-the-loop approval gates.
+
+---
+
+## Architecture: The 3+1 Cognitive Hierarchy
+
+```mermaid
+flowchart LR
+    A["Incoming Agent Action / Task"] --> L0["Layer 0: Deterministic Reflex<br/>(0 network / 0 token cost)<br/>DLP regex & destructive pattern screen"]
+    L0 -->|Blocked / Matched| OUT0["Immediate Advisory Verdict"]
+    L0 -->|Needs Semantic Triage| S1["System 1: Probabilistic Intuition (JEV)<br/>(Requires external JevBridge)<br/>Guard / Route / Rerank / Verify"]
+    S1 --> MC{"Meta-Controller<br/>5-Factor Arbitration"}
+    MC -->|High Confidence & Two-Way Door| OUT1["Advisory Fast Path"]
+    MC -->|Low Confidence / High Risk| S2["System 2: Host Frontier LLM<br/>(Codex / o3 / Sonnet Thinking)"]
+    MC -->|One-Way Door & High Risk| HG["Explicit Human Gate Required"]
+```
+
+| Layer | Role | Execution Mode | Responsibility |
+|---|---|---|---|
+| **Layer 0 (Reflex)** | Deterministic Code | Local offline (`0 tokens`, no network call) | Pre-egress regex DLP credential screening (`sk-*`, `sk-ant-*`, `ghp_*`, `glpat-*`, `AKIA*`, `SG.*`, `pypi-*`, `hf_*`, `Bearer`, `password=`, `secret=`, `api_key=`, `token=`, PEM keys), destructive shell pattern matching (`rm -rf /`, `rm -rf -- /`, `Remove-Item -Recurse -Force`, `mkfs`, `wipefs -a`, `shred -u /`, `DROP DATABASE`, `curl \| bash`), strict schema validation |
+| **System 1 (Intuition)** | Probabilistic JEV | External `JevBridge` single-attempt call | Multi-head `noul` (boolean probability), `choice` (categorical distribution), and `score` (0..4 ordinal rubric) evaluations |
+| **System 2 (Reasoning)** | Host Frontier LLM | Host agent runtime | Complex causal reasoning, multi-file architecture design, subtle debugging |
+| **Meta-Controller** | Control Plane | Local offline (`0 tokens`, no network call) | Arbitrates escalation using 5 quantitative signals: **Confidence**, **Risk**, **Reversibility**, **Expected Value**, and **Cost Pressure** |
+
+---
+
+## Core Modules & MCP Tools
+
+1. **`jev_guard` (`jev_kit.guard`) — Advisory Pre-Tool Command Risk Screen**
+   - Evaluates shell commands before execution and returns an advisory action (`ALLOW`, `INSPECT`, `ESCALATE_HUMAN`, or `BLOCK`).
+   - **Layer 0 (`reflex_only=true` or pre-screen)**: Blocks literal credential egress (`SENSITIVE_INPUT_REJECTED`) and known destructive shell/PowerShell patterns locally with zero network calls.
+   - **System 1 (when `reflex_only=false`)**: Evaluates `is_destructive`, `is_rce_or_exfil`, and `is_secret_leak` probabilities via `JevBridge`.
+2. **`jev_arbitrate` (`jev_kit.controller`) — Offline 5-Factor Meta-Controller**
+   - Purely deterministic calculation of expected escalation utility from `(confidence, risk, reversible, expected_value, cost_pressure)`. Recommends `human_gate` on irreversible high-risk actions. Works completely offline.
+3. **`jev_route` (`jev_kit.router`) — Advisory Task & Model Tier Router**
+   - Classifies incoming coding prompts into `FAST` (`codex-mini-latest`, `gpt-4o-mini`), `STANDARD` (`gpt-4.1`, `gpt-4o`), or `DEEP_REASONING` (`o3`, `codex-1`) tiers while estimating architectural scope.
+4. **`jev_verify` (`jev_kit.verifier`) — Caller-Supplied Completion & Acceptance Review**
+   - Reviews caller-supplied `task_spec`, `implemented_changes` summary, and `test_results` logs to return `PASS`, `ADVISORY`, or `NEEDS_REVISION`. Does **not** inspect git repositories or run test suites directly.
+5. **`jev_rerank` (`jev_kit.reranker`) — Bounded Semantic Candidate Reranker**
+   - Ranks up to 96 caller-supplied code snippets or issue candidates in deterministic batches of 12 while preserving full provenance and failing closed on partial batch errors.
+
+---
+
+## Offline Deterministic Mode vs. External `JevBridge` Requirement
+
+- **Works 100% Offline (Zero External Dependencies)**:
+  - `jev_arbitrate` (5-factor Meta-Controller)
+  - `jev_guard` with `reflex_only=true` (`jev-kit guard "<cmd>" --reflex-only`)
+  - `jev-kit init-codex` (configuration generator for OpenAI Codex CLI and MCP clients)
+  - Pre-egress credential DLP screening inside `call_jev()` (blocks sensitive tokens before any bridge lookup)
+- **Requires External `JevBridge` Runtime**:
+  - `jev_guard` (when `reflex_only=false` and Layer 0 does not match), `jev_route`, `jev_verify`, and `jev_rerank` invoke `jev_cli.py` from the local `JevBridge` runtime directory.
+  - Set `JEV_BRIDGE_DIR=/path/to/JevBridge/runtime` (defaults to `%LOCALAPPDATA%\JevBridge\runtime` on Windows or `~/.local/share/JevBridge/runtime` on Linux/macOS). If the bridge runtime is not installed, these tools fail closed with `JevIntegrationError(code="BRIDGE_MISSING")`.
+
+---
+
+## Quick Start
+
+### 1. Installation
+
+```bash
+git clone https://github.com/17671454333/jev-cognitive-mcp.git
+cd jev-cognitive-mcp
+pip install -e ".[dev]"
+```
+
+### 2. Wire into OpenAI Codex CLI (`~/.codex/config.toml`)
+
+Generate the exact TOML snippet with `jev-kit init-codex --format toml` and add it to `~/.codex/config.toml`:
+
+```toml
+[mcp_servers.jev_cognitive]
+command = "jev-mcp"
+args = []
+```
+
+### 3. Wire into JSON MCP Clients (Claude Code, Cursor, Antigravity)
+
+Generate with `jev-kit init-codex --format json`:
+
+```json
+{
+  "mcpServers": {
+    "jev-cognitive": {
+      "command": "jev-mcp",
+      "args": []
+    }
+  }
+}
+```
+
+### 4. CLI Usage & Verification
+
+```bash
+# Generate OpenAI Codex CLI config.toml snippet
+jev-kit init-codex --format toml
+
+# Layer-0 deterministic reflex screen (offline, 0 tokens)
+jev-kit guard "rm -rf -- /" --reflex-only
+
+# 5-factor Meta-Controller arbitration (offline, 0 tokens)
+jev-kit arbitrate --confidence 0.62 --risk 0.75 --irreversible --value 0.85
+
+# Run deterministic unit test suite
+python -m unittest discover -s tests -v
+```
+
+---
+
+## Security & Reliability Boundaries
+
+- **Pre-Egress Credential DLP Chokepoint**: Both `local_reflex_screen()` and `call_jev()` screen serialized inputs for literal secrets (`sk-*`, `ghp_*`, `glpat-*`, `AKIA*`, `sntrys_*`, `s.*`, `PMAK-*`, `glsa_*`, `Bearer`, `password=`, `secret=`, `api_key=`, `token=`, PEM private keys, and URL userinfo credentials) and raise `SENSITIVE_INPUT_REJECTED` before `_invoke_bridge()` can be called.
+- **Zero Direct Credential Arguments**: `call_jev()` rejects explicit `api_key`, `token`, or `secret` keyword arguments (`DIRECT_CREDENTIALS_DISABLED`).
+- **Advisory Boundary**: Outputs from `jev-cognitive-mcp` are advisory structured signals; host agents must enforce execution blocking and human approval gates.
+- **No Silent Fallbacks**: Timeouts, missing bridge runtimes (`BRIDGE_MISSING`), or malformed responses raise `JevIntegrationError` with explicit `billing_uncertain` tracking rather than defaulting to `ALLOW` or `PASS`.
+
+## License
+
+Released under the [MIT License](LICENSE).
+
+
+## Zero-Popup Chrome M144+ Live CDP Guard (`jev_chrome_guard`)
+
+Modern Chrome (M144+) exposes `%LOCALAPPDATA%\Google\Chrome\User Data\DevToolsActivePort` via `chrome://inspect/#remote-debugging`, triggering a native modal prompt on every transient WebSocket handshake. `jev_chrome_guard` provides:
+- **Zero-Popup `DevToolsActivePort` Discovery**: Parses live port and browser WebSocket UUID across Windows, macOS, and Linux without opening transient WebSockets.
+- **Layer-0 CDP DLP & SSRF Pre-Screen**: Blocks accidental `.env` / SSH key / `.kube/config` / `terraform.tfstate` / Chrome `Local State` file uploads in `DOM.setFileInputFiles`, blocks `document.cookie` / `cookieStore.getAll()`, `localStorage`/`sessionStorage`/`indexedDB` network exfiltration, `navigator.clipboard.readText()`, and `navigator.credentials.get()` harvesting in `Runtime.evaluate`, blocks bulk `DOMStorage`/`IndexedDB`/cookie dumps, MITM `Fetch.enable` / `Network.setCookie` overrides, sensitive `Browser.setDownloadBehavior` path traversal, and `Cookie`/`Proxy-Authorization` header overrides, blocks `file://` browser profile vault reads and cloud metadata SSRF (`169.254.169.254`, `[fd00:ec2::254]`, `100.100.100.200`) in `Page.navigate`, and enforces `userGesture: true` on safe evaluations to prevent popup blockers.
+
+---
+
+## Open-Core Pro & Commercial Ecosystem
+
+| Capability | Community Core (`jev-cognitive-mcp` · MIT) | Studio Pro Suite (Commercial / Sponsors) |
+| :--- | :--- | :--- |
+| **Layer-0 Shell & CDP Guardrails** | ✅ Included (75-case JSONL benchmark, 0 tokens) | ✅ + Custom Enterprise Policy Packs |
+| **5-Factor Meta-Controller & Autopilot** | ✅ Included (`jev_arbitrate`, `jev_autopilot`) | ✅ + Multi-Key Quota Balancer |
+| **Chrome M144+ Zero-Popup CDP Guard** | ✅ Endpoint Discovery + Layer-0 CDP Screen | ✅ + Persistent Multi-Tab Daemon & Windows UIA Auto-Consent |
+| **8-Platform Matrix Auto-Publisher** | — | 🚀 **Pro Exclusive**: One-click zero-login publishing to YouTube, TikTok, Bilibili, Xiaohongshu, Douyin, WeChat Channels & Kuaishou |
+| **AI Short-Drama & WebGame Studio** | See [`open-short-drama-studio`](https://github.com/17671454333/open-short-drama-studio) | 🚀 **Pro Exclusive**: Cross-shot face-locking, Seedance 85%-credit-saver pipeline, CapCut draft exporter & 6-target WebGame packager |

jev_cognitive_mcp-0.4.4/jev_cognitive_mcp.egg-info/SOURCES.txt

@@ -0,0 +1,21 @@
+LICENSE
+README.md
+pyproject.toml
+jev_cognitive_mcp.egg-info/PKG-INFO
+jev_cognitive_mcp.egg-info/SOURCES.txt
+jev_cognitive_mcp.egg-info/dependency_links.txt
+jev_cognitive_mcp.egg-info/entry_points.txt
+jev_cognitive_mcp.egg-info/requires.txt
+jev_cognitive_mcp.egg-info/top_level.txt
+jev_kit/__init__.py
+jev_kit/__main__.py
+jev_kit/chrome_live.py
+jev_kit/controller.py
+jev_kit/core.py
+jev_kit/guard.py
+jev_kit/mcp_server.py
+jev_kit/reranker.py
+jev_kit/router.py
+jev_kit/verifier.py
+jev_kit/data/layer0_corpus.jsonl
+tests/test_jev_kit.py

jev_cognitive_mcp-0.4.4/jev_cognitive_mcp.egg-info/dependency_links.txt

@@ -0,0 +1 @@
+

jev_cognitive_mcp-0.4.4/jev_cognitive_mcp.egg-info/entry_points.txt

@@ -0,0 +1,3 @@
+[console_scripts]
+jev-kit = jev_kit.__main__:main
+jev-mcp = jev_kit.mcp_server:run_stdio_server

jev_cognitive_mcp-0.4.4/jev_cognitive_mcp.egg-info/requires.txt

@@ -0,0 +1,4 @@
+
+[dev]
+pytest>=7.4.0
+pytest-cov>=4.1.0

jev_cognitive_mcp-0.4.4/jev_cognitive_mcp.egg-info/top_level.txt

@@ -0,0 +1 @@
+jev_kit