@techs/pi-decision

English | 简体中文

A Pi tool_call guardrail extension with Jev, OpenAI Decisions and OpenRouter judgment providers; Jev remains the default. Before each tool call, it assesses six risk dimensions: destructive, secretExposure, privacyExposure, externalSideEffect, privilegeEscalation, and scopeViolation. You can disable or customize built-in dimensions and add your own. The risk policy comes from the provider-neutral core; select PI_DECISION_PROVIDER=jev|openai|openrouter. The agent's main model still generates responses, and Pi's own permission rules continue to apply.

export AI_GATEWAY_API_KEY=your_gateway_key
pi install npm:@techs/pi-decision

The default shadow mode observes asynchronously without blocking tools. Configure credentials for Pi's main model separately. Judgments are written to $XDG_STATE_HOME/dsh-decision/pi-audit.jsonl, or ~/.local/state/dsh-decision/pi-audit.jsonl when XDG state is unset.

The OpenAI integration requires version 0.2.1 or newer. After pnpm install && pnpm run build:

export PI_DECISION_PROVIDER=openai
export OPENAI_API_KEY=your_openai_key
pi -e ./packages/pi-decision

OpenAI uses the native Decisions API. Jev's calibrated thresholds do not transfer to OpenAI; start in shadow and evaluate the new provider.

| Environment variable | Default | Purpose | | ------------------------------- | --------------------------- | --------------------------------------------------------------- | | PI_DECISION_PROVIDER | jev | Select jev or openai independently of the main model | | OPENAI_API_KEY | None | Required when provider is openai | | PI_DECISION_OPENAI_BASE_URL | https://api.openai.com/v1 | Versioned Decisions API root | | PI_DECISION_OPENAI_MODEL | gpt-6-luna | Decisions model | | PI_DECISION_OPENAI_TIMEOUT_MS | 8000 | Request and response-body timeout | | AI_GATEWAY_API_KEY | None | Vercel AI Gateway key; takes priority over JEV_API_KEY | | JEV_API_KEY | None | Fallback key; required for the direct backend | | PI_DECISION_JEV_BACKEND | vercel | vercel for Gateway; direct for api.typesafe.ai | | PI_DECISION_ENFORCEMENT | shadow | shadow observes; enforce applies judgments (experimental) | | PI_DECISION_TOOLS | All tools | Comma-separated exact tool names, such as bash,write | | PI_DECISION_ON_FAILURE | allow | Stance when a judgment request fails: allow, ask, or deny | | PI_DECISION_OUTBOUND | redact | Mask recognizable secret patterns; raw sends unchanged input | | PI_DECISION_RISKS | None | JSON custom risk dimensions, like dsh guardrail.customRisks | | PI_DECISION_AUDIT | on | Set to off to disable audit records | | PI_DECISION_AUDIT_PATH | XDG state path | Audit JSONL path |

• Integration and verification (Chinese)
• Threshold evaluation (Chinese)
• Repository README

OpenRouter Decisions

Set PI_DECISION_PROVIDER=openrouter, OPENROUTER_API_KEY, and an explicit PI_DECISION_OPENROUTER_MODEL such as baseten/elephant-1 (paid; check current catalog pricing). Optional PI_DECISION_OPENROUTER_BASE_URL defaults to https://openrouter.ai/api/alpha; PI_DECISION_OPENROUTER_TIMEOUT_MS defaults to 8000. No Jev or OpenAI key is read in this mode. For registry installation, use version 0.2.1 or newer; build first when loading from this checkout. See the adapter guide and free-model verification.