feat: add TypeSafe Jev as HITL audit backend

Let audit_agent approve or reject with one System One call instead of chat JSON, while keeping the OpenAI-compatible backend as an option.

Co-authored-by: Cursor <cursoragent@cursor.com>

web/static/i18n/en-US.json

@@ -917,6 +917,10 @@
   "hitl": {
     "pageTitle": "HITL approvals",
     "pageReviewerLabel": "Current reviewer",
+    "auditEngineLabel": "Approval engine",
+    "auditEngineOpenAI": "OpenAI protocol",
+    "auditEngineJev": "TypeSafe Jev",
+    "colAuditEngine": "Approval engine",
     "pageReviewerHint": "Applies to the selected conversation. Without a conversation, saved to config.yaml as the global default for new chats. Takes effect immediately.",
     "pageReviewerSaved": "Reviewer saved.",
     "whitelistLabel": "Tool whitelist (no approval)",
@@ -928,6 +932,7 @@
     "strategyTabApproval": "Approval mode",
     "strategyTabReviewEdit": "Review & edit mode",
     "strategyHintApproval": "Whitelisted tools skip approval. In approval mode the Audit Agent only approves or rejects.",
+    "strategyHintJev": "TypeSafe Jev is active: custom strategy text below is evaluated as structured questions. Built-in destructive rules remain a hard floor. Jev cannot rewrite arguments.",
     "strategyHintReviewEdit": "In review & edit mode the Audit Agent may narrow parameters via editedArguments before approve; reject if parameters cannot be safely adjusted.",
     "strategyReset": "Reset to default",
     "strategySaved": "Audit strategy saved.",
@@ -1790,13 +1795,22 @@
       "defaultReviewer": "Global default reviewer",
       "defaultReviewerHint": "Used when no conversation is selected and for new conversations; the chat sidebar can still override it.",
       "auditModelTitle": "Audit Agent model",
+      "auditBackend": "Approval engine",
+      "auditBackendHint": "Choose one: an OpenAI-compatible chat model returns JSON from the prompt, or TypeSafe Jev makes a structured allow/block decision (no argument editing).",
+      "auditBackendOpenAI": "OpenAI-compatible model",
+      "auditBackendTypeSafe": "TypeSafe Jev",
       "auditModelReuseMain": "Follow main model config",
       "auditModelBaseUrlPlaceholder": "Leave blank to reuse the main Base URL",
       "auditModelApiKeyPlaceholder": "Leave blank to reuse the main API Key",
       "auditModelName": "Approval model",
       "auditModelNamePlaceholder": "Leave blank to reuse the main model; a small model is recommended",
       "auditModelHint": "Used only for Audit Agent approvals; manual approval does not call a model.",
+      "auditModelTypeSafeHint": "Jev uses TypeSafe System One, not the OpenAI protocol. The API key is required and is not reused from the main model. Leave the model blank to use jev-latest. In review-edit mode Jev only allows or blocks; it will not rewrite arguments.",
+      "auditModelTypeSafeBaseUrlPlaceholder": "Leave blank to use https://api.typesafe.ai",
+      "auditModelTypeSafeApiKeyPlaceholder": "TypeSafe API key (required; not reused from the main model)",
+      "auditModelTypeSafeNamePlaceholder": "Leave blank to use jev-latest",
       "testAuditModel": "Test audit model",
+      "testTypeSafeFillRequired": "Enter a TypeSafe API key first",
       "retentionDays": "Resolved audit log retention days",
       "retentionDaysHint": "0 keeps logs forever; blank uses the 90-day default.",
       "toolWhitelist": "No-approval tool whitelist",
@@ -1805,6 +1819,7 @@
       "auditAgentTitle": "Audit Agent strategy",
       "auditPromptApproval": "Approval-mode prompt",
       "auditPromptHint": "Leave blank to use the backend default strategy.",
+      "auditPromptTypeSafeHint": "The current engine is TypeSafe Jev: custom strategy text is evaluated as structured questions. Built-in destructive rules remain a hard floor. Jev cannot rewrite arguments.",
       "auditPromptReviewEdit": "Review-edit-mode prompt",
       "auditPromptReviewEditHint": "Review-edit mode can approve with narrowed editedArguments."
     },

web/static/i18n/zh-CN.json

@@ -906,6 +906,10 @@
     "pageTitle": "人机协同审批",
     "pageReviewerLabel": "当前审批方",
     "pageReviewerHint": "作用于当前选中会话；未选会话时写入 config.yaml 作为全局默认，新建会话时沿用。切换后立即生效。",
+    "auditEngineLabel": "审批引擎",
+    "auditEngineOpenAI": "OpenAI 协议",
+    "auditEngineJev": "TypeSafe Jev",
+    "colAuditEngine": "审批引擎",
     "pageReviewerSaved": "审批方已保存。",
     "whitelistLabel": "免审批工具白名单",
     "whitelistHint": "每行一个或逗号分隔；保存后写入 config.yaml 全局白名单并立即生效（与聊天侧栏同步展示）。",
@@ -916,6 +920,7 @@
     "strategyTabApproval": "审批模式",
     "strategyTabReviewEdit": "审查编辑模式",
     "strategyHintApproval": "白名单内工具免审批；审批模式下审计 Agent 仅裁决通过/拒绝。",
+    "strategyHintJev": "当前是 TypeSafe Jev：会读取下面的自定义策略并编成结构化问题；破坏业务可用性等内置规则仍是硬底线。Jev 不能改参。",
     "strategyHintReviewEdit": "审查编辑模式下审计 Agent 可通过 editedArguments 收窄参数后放行；无法安全改参时应拒绝。",
     "strategyReset": "恢复默认",
     "strategySaved": "审计策略已保存。",
@@ -1778,13 +1783,22 @@
       "defaultReviewer": "全局默认审批方",
       "defaultReviewerHint": "未选会话和新建会话默认使用该审批方；会话侧栏仍可临时覆盖。",
       "auditModelTitle": "审计 Agent 模型",
+      "auditBackend": "审批引擎",
+      "auditBackendHint": "二选一：OpenAI 兼容聊天模型按提示词输出 JSON；Jev 用结构化问题做放通/拦截，不能改参。",
+      "auditBackendOpenAI": "OpenAI 协议模型",
+      "auditBackendTypeSafe": "TypeSafe Jev",
       "auditModelReuseMain": "跟随主模型配置",
       "auditModelBaseUrlPlaceholder": "留空则复用主模型 Base URL",
       "auditModelApiKeyPlaceholder": "留空则复用主模型 API Key",
       "auditModelName": "审批模型",
       "auditModelNamePlaceholder": "留空则复用主模型；建议填写小模型",
       "auditModelHint": "仅审计 Agent 审批时使用；人工审批不消耗模型。",
+      "auditModelTypeSafeHint": "Jev 走 TypeSafe System One，不是 OpenAI 协议。API Key 必填，不复用主模型密钥；模型留空使用 jev-latest。审查编辑模式下 Jev 只做放通/拦截，不会改参。",
+      "auditModelTypeSafeBaseUrlPlaceholder": "留空使用 https://api.typesafe.ai",
+      "auditModelTypeSafeApiKeyPlaceholder": "TypeSafe API Key（必填，不复用主模型）",
+      "auditModelTypeSafeNamePlaceholder": "留空使用 jev-latest",
       "testAuditModel": "测试审计模型",
+      "testTypeSafeFillRequired": "请先填写 TypeSafe API Key",
       "retentionDays": "已决策审计日志保留天数",
       "retentionDaysHint": "0 表示不自动清理；留空使用默认 90 天。",
       "toolWhitelist": "免审批工具白名单",
@@ -1793,6 +1807,7 @@
       "auditAgentTitle": "审计 Agent 策略",
       "auditPromptApproval": "审批模式提示词",
       "auditPromptHint": "留空时使用后端内置默认策略。",
+      "auditPromptTypeSafeHint": "当前审批引擎是 TypeSafe Jev：会读取本页/人机协同页的自定义策略并编成结构化问题；内置破坏性规则仍是硬底线。Jev 不能改参。",
       "auditPromptReviewEdit": "审查编辑模式提示词",
       "auditPromptReviewEditHint": "审查编辑模式可通过 editedArguments 收窄参数后放行。"
     },