User repository on GitHub
An expressive Unix-pipeable CLI for System One models like Jev
- Forks
- 0
- Last pushed
- Updated Sep 2026
Repo stats from the GitHub API, cached Oct 2026.
CommunityJev Integrations & Adapters
Onesie
A Unix-pipeable CLI that asks Jev (or Berget System One models) one question over stdin, with shell-safety exit codes and a calibrate subcommand.
- Stars
- 2
- Language
- Go
- License
- MIT
- Published by
- Community
- Author
- frodi-karlsson
- Last verified
- Oct 2026
About this project
Pipe in some text, ask a question, get an answer you can script against. Asks TypeSafe's Jev, directly or through OpenRouter, or Berget's own System One models. Gate an agent's shell commands. The exit code says what to do: See Thresholds from evidence for where that gate's numbers come from. The install script checks the download against the release checksums, and its build provenance when gh is logged in: Then store a key with onesie auth set.
Quoted from the project's README. Read the full README.
Highlights
- echo text | onesie 'does this convey urgency' -r returns a probability suitable for shell tests.
- shell-safety preset maps exit 0 run, 1 block, and 7 escalate-to-human on judged commands.
- onesie calibrate runs labelled records to pick thresholds; install via Homebrew or install.sh with checksum verification.
Quickstart
bash
echo 'EVERYTHING IS DOWN, CALL ME NOW' | onesie 'does this convey urgency' -r
onesie -f shell-safety -q --state 'git status'Watch out
Threshold tables in the README are preset-specific. Claude Code plugin install is optional sugar around the same binary.
Questions about this entry
Short answers drawn from the linked project or page.
It is built for that, with three outcomes: exit 0 runs the command, 1 blocks it, and 7 sends it to a person. Watch the middle band. In the README's own calibration the destroys question missed echo hello > notes.txt at 0.37, and the gate blocks at 0.5 but passes below 0.25, so an overwrite lands in the escalate band rather than being caught or silently run.
They come from onesie calibrate run over your own already-labelled records, which reports AUC and, for each candidate cut, what it catches and what it flags by mistake. In the README's example over 40 labelled commands the destroys question scores AUC 1.00, and a 0.5 cut catches 15 of 16 with zero false alarms, while 0.25 catches all 16 but false-alarms on 2 of 24.
The gate has a distinct code for no answer: 0 run, 1 block, 7 ask a person, and anything else means there was no answer, which the README's own case statement falls through to as blocked. For CI there is a second layer: commit answers.jsonl and rerun the same calibrate command with --offline and requirements, which needs no key, exiting 1 when a requirement stops holding and 2 when the questions changed.
The README argues three reasons: the CLI already validates every question, flag and assertion before any request is made, an agent reads the same messages and exit codes a person does, and skills have room for more prose than a tool description, including worked recipes and mistakes to avoid, with CI checking those examples against the binary. Providers are pluggable too, TypeSafe by default or OpenRouter and Berget by flag.
Install with brew install frodi-karlsson/tap/onesie, the install script, or go install github.com/frodi-karlsson/onesie/cmd/onesie@latest, then run onesie auth set to store a key. In Claude Code the plugin can come first and walk you through the rest.
shell-safety, prompt-injection, personal-data and moderation are built in and already calibrated. Run onesie questions to list them, and the examples README has their calibration tables. Starter gates are loaded with -f NAME from anywhere in the repository.
Set ONESIE_MOCK to a JSON file, and every onesie call is answered from that file instead of hitting a provider. For example, writing danger.json with destroys 0.93, secrets 0.02 and network 0.1 and running ONESIE_MOCK=danger.json ./gate.sh takes the blocked branch with no key.
Reactions & coverage
Posts, threads, and videos about this entry from around the web.
Hacker News: Pipeable onesie CLI with shell-safety exit codes and a calibrate mode over labelled commands.
frodikarlsson3 pointsShow HN: onesie – An expressive Unix-pipeable CLI for System One models like JevRead the thread on Hacker NewsMore Jev resources like this
2GitHub stars
A shell-first CLI for yes or no, multiple-choice, and leveled decisions through TypeSafe Jev, composable with files and JSON context in scripts.
Jev Integrations & Adapters#community#cli#shell
Community
vsekhar/decideSwift
vsekhar/decideSwiftA Kubernetes admission webhook that asks Jev to allow, flag, or deny a manifest change for intent-shaped policies a Rego rule cannot express, keeping hard rules in Rego and failing closed by default.
Jev Integrations & Adapters#community#go#kubernetes
Community
56GitHub stars
grep, sort, cut and uniq that match by meaning: each line whose Jev Noul clears the threshold survives grev, sibling filters route by Choice and rank by Score, and the output is always your own input, never generated text.
Jev Tools & CLIs#community#cli#coreutils
Community
aurorainfra/grevGo
aurorainfra/grevGo60.9kGitHub stars
LiteLLM's proxy adds TypeSafe guardrail hooks and a Jev complexity classifier for policy judgments and request routing across 100+ model providers.
Jev Integrations & Adapters#community#python#gateway
Community
BerriAI/litellmPython
BerriAI/litellmPython12GitHub stars
CLI-installed Gmail classifier that runs 24/7 on user-owned Google Apps Script: the worker asks Jev for three typed judgments per thread (requires_action, is_important, bucket), applies labels, stars, and optional archiving, and routes ambiguous or low-confidence mail to a Review label.
Jev Integrations & Adapters#community#gmail#email
Community
vynnlee/jev-mailTypeScript
vynnlee/jev-mailTypeScript8GitHub stars
Supervisor for unattended coding agents: it tracks cross-turn state and asks one batched Jev Choice whether a trajectory should continue, pause or escalate, while deterministic code owns dangerous-command blocking, budget caps and Ed25519-signed receipts.
Jev Tools & CLIs#community#guardrails#safety
Community
VeridicalTech/EdwardPython
VeridicalTech/EdwardPythonFrom the Jev community
Posts from builders shipping with Jev right now.