jev-guard

jev-guard</h1>
  <p><strong>A security hook for coding agents, powered by <a href="https://typesafe.ai/">Jev</a>.</strong></p>
  <img src="assets/works-with.svg" alt="Works with Claude Code, Codex, Copilot CLI, Gemini CLI, Cursor, pi, OpenCode, ACP">
  <p>
    <a href="https://www.npmjs.com/package/jev-guard"><img src="https://img.shields.io/npm/v/jev-guard?color=2563EB&label=npm" alt="npm"></a>
    <img src="https://img.shields.io/badge/node-%E2%89%A520.3-339933" alt="node 20.3+">
    <img src="https://img.shields.io/badge/dependencies-0-0F172A" alt="zero dependencies">
    <a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-64748B" alt="MIT"></a>
  </p>
</div>

## Auto mode, for every coding agent

Claude Code's [auto mode](https://code.claude.com/docs/en/permission-modes#eliminate-prompts-with-auto-mode) is described as: *"A separate classifier model reviews actions before they run, blocking anything that escalates beyond your request, targets unrecognized infrastructure, or appears driven by hostile content Claude read."* That is exactly the job jev-guard does — as three typed questions to Jev (`risk`, `user_requested`, `from_untrusted`) instead of a proprietary classifier — and it does it for Codex, Copilot, Gemini, Cursor, pi, OpenCode and ACP editors too, with the same policy and the same session memory everywhere. If you want auto mode outside Claude Code, or a second opinion inside it, this is the build.

### Why Jev: price and speed, with sources

| | Figure | Source |
| --- | --- | --- |
| Price | **$0.042 per 1M input tokens, $0 output** — a typical jev-guard call is ~1k tokens, so **≈ $0.00004 per tool call**; a 1,000-call session is about 4 cents | [Vercel AI Gateway model card `typesafe-ai/jev`](https://vercel.com/ai-gateway/models/jev) (