Jev Social v0.1.13 — supported Node LTS

Jev Social v0.1.13 is a runtime-support and CI maintenance release.

Highlights

• Supported Node LTS: the runtime floor is Node.js 22, .nvmrc selects Node 24, and hosted tests cover Node 22 and 24.
• Current CodeQL: CodeQL init and analysis use the official GitHub-verified v4.38.2 action pinned to an immutable commit.
• Aligned distribution: package, plugin, Pages, benchmark, troubleshooting, and Agent Skill metadata identify v0.1.13.
• Immutable Skill chain: runtime, Skill source, and OpenClaw instructions resolve through exact commits instead of a mutable branch.

Install or run

npx github:socai-io/jev-social#v0.1.13 onboard
npx github:socai-io/jev-social#v0.1.13

Node.js 22+ and a compatible local socai CLI are required. Platform login, challenge, rate-limit, and browser-session boundaries still apply.

Validation

• 224 offline tests passed locally
• focused distribution and benchmark tests passed 46/46
• package dry run contains 45 intended files and no bundled dependencies
• Codex release review reported no remaining findings

No live social-platform, browser-speed, model-quality, or adoption benchmark is claimed.

Jev Social v0.1.12 — CodeQL hardening

Jev Social v0.1.12 publishes the CodeQL-driven runtime hardening added after v0.1.11.

Highlights

• Bounded input cleanup: trailing URL punctuation and long quote runs are handled with linear scans instead of input-dependent regexes.
• Stable reports: Markdown table values now escape pipes and backslashes exactly once, preserving captured evidence text without malformed tables.
• Safer redaction paths: redundant path matching was removed while existing local-path sanitization coverage remains intact.
• Auditable documentation checks: HTML text and Markdown link checks use deterministic parsing and exact targets.
• Immutable distribution: package, plugin, Pages, benchmark, and Agent Skill metadata identify v0.1.12 through the tested runtime → Skill → OpenClaw pin chain.

Install or run

npx github:socai-io/jev-social#v0.1.12 onboard
npx github:socai-io/jev-social#v0.1.12

Node.js 20+ and a compatible local socai CLI are required. Platform login, challenge, rate-limit, and browser-session boundaries still apply.

Validation

• 221 offline tests passed locally
• package dry run contains 45 intended files and no dependencies or bundled packages
• Codex release review reported no actionable findings
• hosted Node 20 tests, plugin security scan, and CodeQL passed on the release PR head

No live social-platform, browser-speed, model-quality, or adoption benchmark is claimed.

Jev Social v0.1.11 — reliable evidence previews

Jev Social v0.1.11 makes captured evidence more reliable and accessible in the local demo.

Highlights

• No false empty state from alias order: when an early items, results, or other known container is empty or invalid, the UI keeps looking for later captured records.
• Accessible video controls: card and detail video previews now carry record-specific accessible names.
• Stable compatibility: direct-array evidence keeps its prior shape, preview fallbacks remain intact, and the local server explicitly serves the extracted evidence helper.
• Immutable distribution: package, plugin, Pages, benchmark, and Agent Skill metadata identify v0.1.11 through the existing tested pin chain.

Install or run

npx github:socai-io/jev-social#v0.1.11 onboard
npx github:socai-io/jev-social#v0.1.11

Node.js 20+ and a compatible local socai CLI are required. Platform login, challenge, rate-limit, and browser-session boundaries still apply.

Validation

• 218 offline tests passed locally
• hosted Node 20 tests and plugin security scan passed on the release PR head
• Codex release review reported no actionable findings

No live social-platform, browser-speed, model-quality, or adoption benchmark is claimed.

Full changelog: v0.1.10...v0.1.11

Jev Social v0.1.10 — private socai execution by default

Jev Social v0.1.10 makes local social research private by default at the socai CLI child-process boundary.

Highlights

• Telemetry off by default: every socai child process started by Jev Social now receives SOCAI_TELEMETRY=0. Only the exact value SOCAI_TELEMETRY=1 opts in; blank, misspelled, or other values remain off.
• Explicit privacy controls: project .env files may carry SOCAI_TELEMETRY, SOCAI_TELEMETRY_QUERY_TEXT, and SOCAI_TELEMETRY_CHAT_TEXT. These controls are forwarded to socai, while OpenRouter, TypeSafe, socai account, and session credentials remain excluded from the child environment.
• Documented boundary: the README, .env.example, and security guide now distinguish Jev Social's direct OpenRouter calls from optional upstream socai telemetry and explain the separate process-level setting required for an independently launched Desktop app.
• Immutable distribution: the v0.1.10 Agent Skill and runtime use a tested two-commit pin chain, and public package-runner commands remain versioned without automatic-consent flags.

Install or run

npx github:socai-io/jev-social#v0.1.10 onboard
npx github:socai-io/jev-social#v0.1.10

Node.js 20+ and a compatible local socai CLI are required. Platform login, challenge, rate-limit, and browser-session boundaries still apply.

Watch before installing

The recorded run replays one sanitized, non-live Instagram research trace in the browser. It makes no Instagram, Chrome, or socai request. E01 is the only opened post; E02–E04 remain discovery-only cards.

Privacy and data flow

The live privacy and data-flow guide explains which data stays local, what is sent to the configured model provider and social platform, which credentials are excluded from the socai child environment, and how to remove local artifacts.

Validation

• 199 offline tests passed on Node.js 20
• plugin security scan passed
• post-merge tests and GitHub Pages deployment passed
• read-only Codex release review reported no actionable findings

No live social-platform, browser-speed, model-quality, or adoption benchmark is claimed in this release.

Full changelog: v0.1.9...v0.1.10

Jev Social v0.1.9 — safer routing and local providers

Jev Social v0.1.9 makes the read-only research boundary clearer, adds reproducible local Jev provider paths, and improves the demo's accessibility and discovery surface.

Highlights

• Safer routing: named-platform goals constrain Jev's typed route, unavailable platforms fail before a model call, and clear posting, liking, following, messaging, or account-changing requests are rejected before execution.
• Local Jev providers: new pinned guides cover both Kev and Simple Jev on an exact loopback System One endpoint. Social sites still use the browser and normal network connection.
• Agent Skill distribution: current Codex, cross-agent, OpenCode, and OpenClaw setup paths are documented and tested. OpenClaw installs an immutable Skill that pins an immutable v0.1.9 runtime.
• Security and privacy: the plugin security scan now runs in CI; public examples and documentation make provider data, browser access, local retention, and evidence limitations explicit.
• Research UX: persistent query labeling, visible keyboard focus, and result-entry focus improve keyboard and screen-reader use without changing the lightweight one-page workflow.
• Discovery and contribution: the landing page now includes a social-research workflow guide, citation metadata, Agent Skill discovery, contributor entry points, and a direct Jev Social star path.

Install or run

npx github:socai-io/jev-social#v0.1.9 onboard
npx github:socai-io/jev-social#v0.1.9

Node.js 20+ and a compatible local socai CLI are required. Use a separate browser profile or test account for sensitive research.

Validation

• 198 offline tests passed on Node.js 20
• plugin security scan passed
• post-merge tests and GitHub Pages deployment passed
• two Codex review cycles completed; the final review reported no remaining actionable findings

No new browser-speed or model-quality benchmark is claimed in this release. Recorded evidence remains labeled as individual local observations.

Full changelog: v0.1.8...v0.1.9

Jev Social v0.1.8 — reproducible benchmark tooling

Jev Social v0.1.8 makes performance claims reproducible before they become promotional copy.

• fixed Instagram, TikTok, and LinkedIn research tasks
• one privacy-safe row for every initialized attempt, including failures and interruptions
• schema v2 records the Jev Social runtime alongside pinned Jev and socai versions; legacy v1 rows stay readable but cannot pass the publication gate
• exact-environment p50/p95 summaries with a 10-run minimum

No live benchmark results are published in this release. Jev still chooses typed browser actions, while socai gathers source-linked evidence in the user's browser.

Try it

With Node 20+ and Chrome already signed in to a supported platform:

npx github:socai-io/jev-social#v0.1.8 onboard
npx github:socai-io/jev-social#v0.1.8

Project page and recorded demo · Setup and source · Recorded 64-second Instagram report

Jev Social v0.1.7 — local decisions and browser readiness

Jev Social can now use a loopback Kev/System One server for typed decisions without an OpenRouter key.

• Browser and platform readiness is visible without exposing profiles, paths, ports, or session details.
• Local provider errors no longer echo arbitrary server text.
• A privacy-safe benchmark row schema makes timing and evidence counts comparable without storing captured content.
• Agent Skill and no-clone install commands are pinned to the tested v0.1.7 runtime.

Verified with 148 offline tests, zero production dependency vulnerabilities, and a 38-file package dry run.

npx github:socai-io/jev-social#v0.1.7 onboard
npx github:socai-io/jev-social#v0.1.7

Live overview · Source

Jev Social v0.1.6 — streamed cited research reports

Jev × socai turns one social-research goal into typed decisions, real browser evidence, persistent post cards, and a report that cites what it actually captured.

Live overview · Source · Recorded Instagram report · Recorded TikTok evidence

A report that shows its work

• Captured cards remain visible while report sections stream into a fixed panel.
• Optional OpenRouter synthesis receives only a bounded, sanitized evidence payload.
• Accepted findings must cite captured source URLs; foreign links, missing citations, raw JSON, and local paths fail validation.
• Invalid or unavailable synthesis falls back to a deterministic evidence report with separate claims, comments, metrics, inferences, limitations, and sources.
• The downloaded Markdown is the same report displayed in the browser.
• Interrupted collection or report generation checkpoints an honest partial result instead of erasing evidence.

Distribution

• Package metadata, README, Pages metadata, llms.txt, Codex plugin, Grok plugin, and Agent Skill now identify v0.1.6.
• The Agent Skill pins tested runtime commit f265915 and keeps the workflow read-only.
• Install paths remain available through GitHub, skills.sh, Codex, OpenCode, and Grok Build.

Verification

• Main-branch CI passes.
• 108 project tests and all syntax checks pass.
• npm audit --omit=dev reports zero vulnerabilities.
• The package dry run contains 34 files and reports version 0.1.6.
• A release-consistency test now guards package, plugin, site, documentation, and Skill metadata.

Install

npx github:socai-io/jev-social#v0.1.6 onboard
npx github:socai-io/jev-social#v0.1.6

For Codex with GitHub CLI 2.101 or newer:

gh skill install socai-io/jev-social jev-social@v0.1.6 --agent codex --scope user

Jev Social is a loopback-only local application. It requires Node 20+, an OpenRouter key with Jev access, the socai CLI, and a Chrome session that can access the selected social platform. Live-site coverage and timing depend on login state, network conditions, platform behavior, and the operations Jev selects.

If the workflow is useful, star Jev Social and share the recorded evidence with another browser-agent builder.

Jev Social v0.1.5 — recoverable runs and previewable evidence

Jev × socai turns one social-research goal into typed decisions, real browser evidence, streamed post cards, and a cited report.

Live overview · Source · Recorded Instagram report · Recorded TikTok evidence

More reliable research runs

• Interrupted searches now checkpoint completed decisions and public evidence so partial work remains recoverable.
• Result summaries prioritize up to four previewable evidence cards while retaining the complete evidence set for the cited report.
• Preflight checks derive supported platforms and operations from the installed socai CLI; unavailable platforms fail before a Jev model call.
• Added platform-specific login, browser-session, challenge, and empty-result troubleshooting guidance.

Distribution and presentation

• Updated the Agent Skill to the tested 782d809 runtime with the existing read-only and explicit-media boundaries intact.
• Synchronized the package, Codex plugin, README, Pages metadata, and machine-readable install instructions at v0.1.5.
• Standardized the visible brand as Jev × socai.
• Updated the pinned GitHub Actions dependencies used by tests and Pages deployment.

Verification

• All 87 project tests and syntax checks pass.
• The Codex Skill and plugin validators pass.
• npm audit --omit=dev reports zero vulnerabilities.
• The package dry run contains 32 files and reports version 0.1.5.
• Main-branch tests and the GitHub Pages deployment both pass at 51830b3.

Install

npx github:socai-io/jev-social#v0.1.5 onboard
npx github:socai-io/jev-social#v0.1.5

For Codex with GitHub CLI 2.101 or newer:

gh skill install socai-io/jev-social jev-social@v0.1.5 --agent codex --scope user

Jev Social remains a loopback-only local application. It requires Node 20+, an OpenRouter key with Jev access, the socai CLI, and a Chrome session that can access the selected social platform. Live-site coverage and timing still depend on login state, network conditions, and platform behavior.

If the workflow is useful, star Jev Social and share the recorded evidence with another builder.

Jev Social v0.1.4 — explicit media intent and trust boundaries

Explicit TikTok media intent

• Generic TikTok research no longer receives or executes a media-download action.
• An explicit download, save, archive, capture, record, or offline-copy request can still expose --download-media for the selected video.
• Run history records the authorization and the selected downloadMedia: true action.
• Negative tests cover ambiguous evidence, note, and comment wording as well as the generic and explicit end-to-end CLI paths.

Trust and distribution

• Expanded SECURITY.md with the exact OpenRouter payload, key handling, browser-cookie boundary, local artifact retention, cleanup, costs, cancellation, and recovery behavior.
• Added the immutable v0.1.4 Agent Skill install path to the README, landing page, and machine-readable overview.
• Updated the Skill's executable examples to the tested 05581ca runtime commit without automatic package-download consent.
• Migrated the pinned actions/setup-node and actions/configure-pages dependencies to their Node 24 releases.

Verification

• All 57 project tests and syntax checks pass.
• npm audit reports zero vulnerabilities.
• The package dry run contains 28 files and reports version 0.1.4.
• Main-branch tests and the real GitHub Pages deployment both pass at 213fba1.

Install

npx github:socai-io/jev-social#v0.1.4 onboard
npx github:socai-io/jev-social#v0.1.4

For Codex with GitHub CLI 2.101 or newer:

gh skill install socai-io/jev-social jev-social@v0.1.4 --agent codex --scope user

Jev Social remains a loopback-only local application. It requires Node 20+, an OpenRouter key with Jev access, the socai CLI, and a Chrome session that can access the selected social platform. Live-site coverage and timing still depend on login state, network conditions, and platform behavior.