Jev Permissions

Claude Code PreToolUse hook that asks Jev one Noul on whether a Bash command is strictly read-only and auto-approves at p of 0.95 or higher. It can only allow or stay silent, never deny, so unknown or risky commands fall back to Claude Code's normal permission prompt.

Permission gate extension for the pi coding agent: deterministic allow/deny rules and protected paths settle clear cases first, then gray-zone tool calls get one structured classify() verdict; Jev is an optional native classifier via TypeSafe direct, OpenRouter, or other gateways, failing closed on error.

Jev-backed auto mode for the Pi coding agent: semantically approves bash, write, and edit tool calls, and fails closed whenever a decision cannot be made.