@phala/pi-provider-aci
v0.7.2
Published
Vendor-neutral Pi provider for private-ai-gateway using an instance-scoped verified ACI transport
Readme
@phala/pi-provider-aci
Vendor-neutral Pi provider for an Attested Confidential Inference (ACI)
gateway. It establishes an instance-scoped verified connection with
@phala/aci-verifier, injects the scoped transport into Pi, discovers models,
verifies every inference receipt before stream completion, and exposes
attestation, receipt, and session audit commands.
pi install npm:@phala/pi-provider-aci
export ACI_BASE_URL=https://gateway.example/v1
piIn Pi, store the gateway key and save a default model through the native UI:
/login aci
# paste the API key and wait for the footer to show aci-verified
/model
# search for aci/, select a model, and press Ctrl+SPi owns all persistence: credentials are stored in
~/.pi/agent/auth.json, refreshed catalogs in
~/.pi/agent/models-store.json, and a default selected with Ctrl+S in
~/.pi/agent/settings.json. The cached catalog remains available offline.
ACI_API_KEY is also supported for the current process, but Pi does not copy
environment variables into its credential store.
The provider fails closed when workload or channel verification fails. For a
production reviewed-release claim, configure ACI_ACCEPTED_COMPOSE_HASHES with
the comma-separated compose hashes published by the deployment operator.
Model capabilities come only from the gateway catalog. Pi reasoning levels use
the gateway's public normalized reasoning field; upstream model dialects are
handled by the gateway, not by this extension.
Pi requires numeric rates for every token category, so an omitted cache rate is
represented at the ordinary input rate rather than as a free cache operation.
/aci-receipts lists retained exchanges. /aci-receipt [id] displays or
re-verifies the latest or selected exchange's signed receipt, exact wire body
hashes, and cited attested session. /aci-session <id> fetches the public
session artifact over the pinned connection and validates it locally; it does
not require an inference API key.
The local wire-digest history retains the latest 32 receipt-bearing requests by default and is cleared when Pi exits. Credential, model-catalog, and default-model persistence are independent of that audit history. Gateway receipt and session artifacts remain subject to the deployment's server-side retention policy.
See the full client documentation for configuration, trust boundaries, and branded packages.
