feat: portable Jev v0.3 with Command Code and Engraphis memory integrations

.gitattributes

@@ -0,0 +1,10 @@
+* text=auto eol=lf
+*.py text eol=lf
+*.md text eol=lf
+*.json text eol=lf
+*.toml text eol=lf
+*.yml text eol=lf
+*.sh text eol=lf
+*.ps1 text eol=lf
+*.ts text eol=lf
+*.cjs text eol=lf

.github/workflows/ci.yml

@@ -13,7 +13,7 @@ jobs:
       fail-fast: false
       matrix:
         os: [ubuntu-latest, macos-latest, windows-latest]
-        python-version: ["3.9", "3.10", "3.11", "3.12", "3.13"]
+        python-version: ["3.9", "3.10", "3.11", "3.12", "3.13", "3.14"]
 
     steps:
       - uses: actions/checkout@v4
@@ -26,13 +26,62 @@ jobs:
       - name: Install dependencies
         run: |
           python -m pip install --upgrade pip
-          pip install -e ".[test]"
+          pip install -e ".[test,mcp,setup]"
 
       - name: Run Pytest
         run: |
           python -m pytest tests/ -v
 
+      - name: Check configured Python lint rules
+        if: matrix.os == 'ubuntu-latest' && matrix.python-version == '3.12'
+        run: |
+          python -m pip install ruff==0.16.9
+          python -m ruff check .
+
       - name: Test CLI
         run: |
           jev --help
-          jev guard "git status"
+          jev doctor --json
+
+      - name: Clean wheel and source installation
+        if: matrix.python-version == '3.12'
+        run: |
+          python -m pip install build
+          python scripts/check_packages.py --output "${{ runner.temp }}/jev-artifacts"
+
+      - name: Retain Python release candidates
+        if: matrix.python-version == '3.12'
+        uses: actions/upload-artifact@v4
+        with:
+          name: python-release-${{ matrix.os }}
+          path: |
+            ${{ runner.temp }}/jev-artifacts/dist/*
+            ${{ runner.temp }}/jev-artifacts/verification.json
+
+  typescript:
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, macos-latest, windows-latest]
+        node-version: ["22", "24"]
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: ${{ matrix.node-version }}
+      - run: npm ci
+        working-directory: ts
+      - run: npm test
+        working-directory: ts
+      - run: npm run check:package
+        working-directory: ts
+      - uses: actions/upload-artifact@v4
+        with:
+          name: npm-release-${{ matrix.os }}-node${{ matrix.node-version }}
+          path: ts/*.tgz
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - run: python -m pip install -e ".[test]"
+      - run: python -m pytest tests/test_parity.py tests/test_question_ids.py -q

.gitignore

@@ -8,3 +8,9 @@ __pycache__/
 .venv/
 venv/
 .env
+build/
+dist/
+ts/node_modules/
+ts/dist/
+ts/*.tgz
+.coverage

Claude outputs/PR_DESCRIPTION.md

@@ -0,0 +1,14 @@
+Jev v0.3 gives Python, TypeScript, CLI and MCP users a portable advisory runtime with explicit setup, protected credentials and bounded requests. Command Code users can capture approved evidence before model ingestion, and memory systems can consume structured advice without handing Jev permission or memory authority.
+
+- Enforce pinned provider contracts, redacted wire identifiers, per-caller label restoration, one request deadline and conservative shared Python budget accounting. Missing or anomalous usage remains unknown and reserved. Fresh clients, CLI/MCP processes and hooks stay offline; an explicit library key can opt in before setup, while saved disabled settings always win.
+- Preserve unrelated settings through owned installation/restoration. Command Code ships an explicitly invoked skill, shared-project ownership checks, core capture and Windows-safe argv handling. Generated POSIX launchers retain their environment interpreter; unexpanded credential references count as absent keys.
+- Add bounded `assess_memory_relation` and `assess_memory_relevance` helpers plus a dependency-free Engraphis question bridge. Unknown judgments and confidence remain null. Host consent, scoped routing, deterministic verifiers and memory governance remain authoritative.
+- Read saved evidence through pinned roots and validated opened handles, preserving original bytes, hashes and complete source spans. Credential files and Windows stream aliases are denied globally; redirected roots cannot grant new access. Off/shadow/select policy and workload qualification govern omission; no automatic omission profile ships.
+- Offer optional pre-tool shell hooks for five harnesses. They request a native prompt or deny flagged commands and fail open on unavailable advice. Command Code covers shell and Windows PowerShell. Path-qualified executables, unknown flags and effectful options are assessed; hooks never approve commands.
+- Advertise compact MCP questions while retaining complete backend/native-map compatibility and meaningful-content validation. Keep a single Python version source, task-oriented migration/setup guides, shared memory examples and clean package verification receipts. CI covers Python 3.9–3.14 and Node 22/24 on Windows, macOS and Linux.
+
+Validation on Windows / Python 3.12.10 with the official MCP SDK 2.2.0: **781 passed, 2 platform-related skips**; TypeScript build and **87 tests passed**; Ruff and Git whitespace checks passed. Clean wheel, source and npm installations run outside the checkout, including packaged memory/bridge/hook/capture/skill checks and legacy/current MCP handshakes, with zero provider requests. Four bounded internal reviewers returned; the parent integrated their actionable findings.
+
+This PR includes the current checkout's changes, all 14 commits from `review/merge-ready`, and the applicable safeguards from the preserved older worktree. Its remaining edits are superseded by the current contracts and remain untouched in that worktree. The [combined review record](https://github.com/Coding-Dev-Tools/jev-decision/blob/codex/jev-harness-integration/docs/validation/command-code-memory-20261001.md) explains the reconciliation and evidence boundaries.
+
+These local/package checks do not establish authenticated provider operation, named-client live usability, improved recall or token/time/billing savings. Live evaluation remains separate and budget-authorized. No merge or package publication is included. GitHub CI and review status must be read for this PR's latest head.

LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Coding-Dev-Tools and contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

MANIFEST.in

@@ -0,0 +1,9 @@
+include LICENSE README.md
+recursive-include docs *.md *.json
+recursive-include examples *.py *.ps1 *.sh *.json *.log
+recursive-include scripts *.py *.ps1
+recursive-include tests *.py
+include ts/package.json ts/package-lock.json ts/tsconfig.json ts/README.md ts/LICENSE
+recursive-include ts/src *.ts
+recursive-include ts/test *.cjs *.json
+recursive-include ts/scripts *.cjs