Can this hook ever deny a command?

No. It can only allow or stay silent, and silence means Claude Code shows its normal permission prompt, so the worst case is a missed approval costing one click.

What happens when Jev is slow or unavailable?

The hook falls back to the normal permission prompt. It has a configurable timeout (default 3 seconds) plus dry-run mode with logging so you can see what it would approve before enabling it.

Which commands never reach Jev at all?

rm, git push, curl, installs, redirects and sudo, plus anything with comments or approve-style text in it, which is a prompt-injection guard. Plan mode, bypass mode, non-Bash tools and multi-line commands are also outside its scope, and all of those just get your normal prompt.

What did the published calibration on jev-1.13.0 actually show?

16 commands at threshold 0.95. Zero of eight state-changing commands were approved, all scoring 0.01 to 0.03, and six of eight read-only ones were auto-approved: ls, cat, grep, pwd, git log and git diff. git status scored 0.82 and python --version 0.90, so both still asked.

How do I install it and what can I configure?

Set TYPESAFE_API_KEY, clone the repo somewhere permanent, then add a PreToolUse hook with matcher Bash and timeout 5 to ~/.claude/settings.json. Env vars are JEV_AUTO_APPROVE_THRESHOLD at 0.95, JEV_AUTO_APPROVE_TIMEOUT at 3 seconds, JEV_AUTO_APPROVE_DRY, JEV_AUTO_APPROVE_LOG, off by default because commands can carry secrets, and JEV_MODEL.

Can I test it without a key, and what is it licensed under?

Yes. python test_jev_auto_approve.py runs offline against a fake Jev with no key. It is MIT-licensed, standard library only, one file with no dependencies, and it pairs with jev-secret-guard, which stops unsafe output rather than approving safe commands.

How much delay does it add to a command I have to click?

A few hundred milliseconds on the approved path, which is the README's headline claim. The hook itself is registered with a timeout of 5 seconds in settings.json, while JEV_AUTO_APPROVE_TIMEOUT defaults to 3 seconds before the command falls back to the normal prompt.

CommunityJev Tools & CLIs

Jev Auto Approve

Claude Code PreToolUse hook that asks Jev one Noul on whether a Bash command is strictly read-only and auto-approves at p of 0.95 or higher. It can only allow or stay silent, never deny, so unknown or risky commands fall back to Claude Code's normal permission prompt.

See highlights

Open github.com

Stars: 0
Language: Python
License: MIT
Published by: Community
Last verified: Oct 2026

BasmaAbouzied0/jev-auto-approve

User repository on GitHub

View on GitHub

Claude Code hook that auto-approves safe, read-only shell commands in milliseconds using Jev (TypeSafe). Fewer permission prompts; everything else still asks you.

Forks: 0
Last pushed: Updated Sep 2026

Repo stats from the GitHub API, cached Oct 2026.

About this project

Stop clicking "yes" on git status. A Claude Code hook where Jev (TypeSafe's System One model) approves read-only shell commands in a few hundred milliseconds, and everything else still asks you. The hook can only allow or stay silent. Silence means Claude Code shows its normal permission prompt. It never blocks and never approves anything risky on a guess.

Quoted from the project's README. Read the full README.

Tagscommunity claude-code hooks permissions

Works forJev for Decision gating

Used inJev for Software & DevTools

Languages: Python
Platforms: CLI
Capabilities: Open sourceRequires API key

Highlights

Auto-approves read-only commands at p >= 0.95; everything else gets Claude Code's normal prompt
Fail-safe by design: it can only allow or stay silent, never block and never approve on a guess
Published calibration on jev-1.13.0: 0 of 8 state-changing commands approved, 6 of 8 read-only approved
Hard-no list (rm, git push, curl, installs, sudo) and an injection filter keep risky commands from Jev
Timeout, API failure, rate limit or missing key all fall back to the prompt; dry-run logs without approving

Watch out

MIT license. Needs a TypeSafe API key, and the published calibration covers only 16 commands, so validate against your own shell usage before trusting it.

Questions about this entry

Short answers drawn from the linked project or page.

Reactions & coverage

Posts, threads, and videos about this entry from around the web.

YouTube: Ray Amjad puts Jev inside an agentic coding loop and looks at what it costs to run.

YouTube: RoboNuggets puts Jev to work inside Claude Code.

Reddit: A Claude Code mod replaces the auto-mode classifier with Jev, 2x faster.

More Jev resources like this

spending-effort-with-jev

Claude Code plugin whose UserPromptSubmit hook asks Jev a Choice over /effort levels (low, medium, high, max, unclear) plus a Noul on whether a hands-off request has a fuzzy spec, then offers a one-key switch before Claude starts when the tip clears its confidence threshold.

Jev Tools & CLIs#community#claude-code#plugin

Community

Yaxin9Luo/spending-effort-with-jevPython

jev-secret-guard

A Claude Code PreToolUse hook that blocks known key formats locally and sends only masked unknown high-entropy strings to Jev for a Noul judgment, blocking at 0.80 and asking the human from 0.30 or whenever Jev is unavailable.

Jev Tools & CLIs#community#security#claude-code

Community

BasmaAbouzied0/jev-secret-guardPython

Oh My ClaudeCode

39.8k

A teams-first multi-agent orchestration plugin for Claude Code with opt-in Jev hooks for sub-millisecond judgment points, decision caching and per-point egress controls. TypeScript, MIT, with a staged team pipeline and tmux CLI workers.

Jev Tools & CLIs#community#claude-code#orchestration

Community

Yeachan-Heo/oh-my-claudecodeTypeScript

Harness Router

MIT-licensed Python tool router for coding agents that keeps obvious calls on a fast path, asks Jev (default typesafe/jev-1.13 via OpenRouter) for genuinely ambiguous choices, and can run bounded MCTS when multi-step consequences matter. Ships a CLI, MCP server and hook integrations.

Jev Tools & CLIs#community#routing#mcp

Community

Protocol-Lattice/harness-routerPython

Edward

Supervisor for unattended coding agents: it tracks cross-turn state and asks one batched Jev Choice whether a trajectory should continue, pause or escalate, while deterministic code owns dangerous-command blocking, budget caps and Ed25519-signed receipts.

Jev Tools & CLIs#community#guardrails#safety

Community

VeridicalTech/EdwardPython

GUI JEV Harness

Python harness for GUI grounding: it divides a screenshot into grid tiles, has a vision model describe each tile neutrally, then asks typesafe-ai/jev to choose among the descriptions. Local confidence and margin gates decide whether to descend or refuse, and it emits only a point and bounding box.

Jev Tools & CLIs#community#gui-grounding#computer-use

Community

ZihuaEvan/GUI_JEVPython

From the Jev guides

Original write-ups on what this entry is for.

Jev on the Gateways: Vercel, Workers AI, and OpenRouter

Oct 12, 2026

The request shape barely changes across surfaces; the surrounding contract does. When to call the API directly and when a gateway, a Worker binding, or a router entry earns its extra hop.

Jev Tools & CLIs#gateway#vercel#cloudflare

Read article

Exporting Decision Models: GGUF, ONNX, and Device Runtimes

Oct 10, 2026

Taking a decision checkpoint out of Python: what the GGUF and browser WebGPU exports preserve, what they change, and the parity evidence the model cards publish.

Jev Tools & CLIs#open-models#local#onnx

Read article

Records at Rest: Documents, Inboxes, and Risk Queues

Sep 28, 2026

Jev labels a record that already exists. Code moves, flags, or holds it. How the document, mail, and transfer tools keep the action out of the model.

Jev Tools & CLIs#classification#email#security

Read article

Back to all resources

From the Jev community

Posts from builders shipping with Jev right now.

Follow @typesafeai