@techs/pi-decision

Tool guardrail for pi with Jev, OpenAI and OpenRouter Decisions providers

Packages

Package details

extension

Install @techs/pi-decision from npm and Pi will load the resources declared by the package manifest.

npm repo home report

$ pi install npm:@techs/pi-decision

Package: @techs/pi-decision
Version: 0.2.2
Published: Oct 29, 2026
Downloads: 439/mo · 197/wk
Author: yourtion
License: MIT
Types: extension
Size: 70.4 KB
Dependencies: 4 dependencies · 1 peer

Pi manifest JSON

{
  "extensions": [
    "./src/index.ts"
  ]
}

Security note

Pi packages can execute code and influence agent behavior. Review the source before installing third-party packages.

README

@techs/pi-decision

English | 简体中文

A Pi tool_call guardrail extension with Jev, OpenAI Decisions and OpenRouter judgment providers; Jev remains the default. Before each tool call, it assesses six risk dimensions: destructive, secretExposure, privacyExposure, externalSideEffect, privilegeEscalation, and scopeViolation. You can disable or customize built-in dimensions and add your own. The risk policy comes from the provider-neutral core; select PI_DECISION_PROVIDER=jev|openai|openrouter. The agent's main model still generates responses, and Pi's own permission rules continue to apply.

export AI_GATEWAY_API_KEY=your_gateway_key
pi install npm:@techs/pi-decision

The default shadow mode observes asynchronously without blocking tools. Configure credentials for Pi's main model separately. Judgments are written to $XDG_STATE_HOME/dsh-decision/pi-audit.jsonl, or ~/.local/state/dsh-decision/pi-audit.jsonl when XDG state is unset.

The OpenAI integration requires version 0.2.1 or newer. After pnpm install && pnpm run build:

export PI_DECISION_PROVIDER=openai
export OPENAI_API_KEY=your_openai_key
pi -e ./packages/pi-decision

OpenAI uses the native Decisions API. Jev's calibrated thresholds do not transfer to OpenAI; start in shadow and evaluate the new provider.

Environment variable	Default	Purpose
`PI_DECISION_PROVIDER`	`jev`	Select `jev` or `openai` independently of the main model
`OPENAI_API_KEY`	None	Required when provider is `openai`
`PI_DECISION_OPENAI_BASE_URL`	`https://api.openai.com/v1`	Versioned Decisions API root
`PI_DECISION_OPENAI_MODEL`	`gpt-6-luna`	Decisions model
`PI_DECISION_OPENAI_TIMEOUT_MS`	`8000`	Request and response-body timeout
`AI_GATEWAY_API_KEY`	None	Vercel AI Gateway key; takes priority over `JEV_API_KEY`
`JEV_API_KEY`	None	Fallback key; required for the `direct` backend
`PI_DECISION_JEV_BACKEND`	`vercel`	`vercel` for Gateway; `direct` for `api.typesafe.ai`
`PI_DECISION_ENFORCEMENT`	`shadow`	`shadow` observes; `enforce` applies judgments (experimental)
`PI_DECISION_TOOLS`	All tools	Comma-separated exact tool names, such as `bash,write`
`PI_DECISION_ON_FAILURE`	`allow`	Stance when a judgment request fails: `allow`, `ask`, or `deny`
`PI_DECISION_OUTBOUND`	`redact`	Mask recognizable secret patterns; `raw` sends unchanged input
`PI_DECISION_RISKS`	None	JSON custom risk dimensions, like dsh `guardrail.customRisks`
`PI_DECISION_AUDIT`	`on`	Set to `off` to disable audit records
`PI_DECISION_AUDIT_PATH`	XDG state path	Audit JSONL path

OpenRouter Decisions

Set PI_DECISION_PROVIDER=openrouter, OPENROUTER_API_KEY, and an explicit PI_DECISION_OPENROUTER_MODEL such as baseten/elephant-1 (paid; check current catalog pricing). Optional PI_DECISION_OPENROUTER_BASE_URL defaults to https://openrouter.ai/api/alpha; PI_DECISION_OPENROUTER_TIMEOUT_MS defaults to 8000. No Jev or OpenAI key is read in this mode. For registry installation, use version 0.2.1 or newer; build first when loading from this checkout. See the adapter guide and free-model verification.