decionis-autogen

Add a Decionis policy decision immediately before an AutoGen tool executes. The package supports the current AutoGen Core tool interface and the legacy AutoGen 0.2 UserProxyAgent execution hook.

Current AutoGen

pip install decionis-autogen

from autogen_core.tools import FunctionTool
from decionis import DecionisClient
from decionis_autogen import guard_tool

refund_tool = FunctionTool(send_refund, description="Issue a customer refund.")
guarded_refund = guard_tool(
    inner_tool=refund_tool,
    client=DecionisClient(api_key="..."),
    tenant_id="your-org-uuid",
    workflow_key="refund_execution",
    site_base_url="https://decionis.com",
)

agent = AssistantAgent(..., tools=[guarded_refund])

The wrapper preserves the inner tool schema. An ALLOW verdict delegates to the tool. BLOCK, REVIEW_REQUIRED, and ESCALATE raise DecionisToolRefusal before the side effect runs.

AutoGen 0.2 UserProxyAgent

The requested execute_function interception applies to AutoGen 0.2. Install the legacy extra on Python 3.10–3.12:

pip install 'decionis-autogen[legacy]'

from decionis import DecionisClient
from decionis_autogen import DecionisUserProxyAgent

executor = DecionisUserProxyAgent(
    "executor",
    decionis_client=DecionisClient(api_key="..."),
    tenant_id="your-org-uuid",
    function_map={"send_refund": send_refund},
    human_input_mode="NEVER",
)

The subclass overrides both execute_function and a_execute_function. A blocked call returns a structured function error with the dossier id and never invokes the registered function.

For either API, set shadow_mode=True to record would-block verdicts while still executing the inner tool. The tool also runs in shadow mode when the decision request fails (a timeout, an HTTP error, no connection): the guard logs a warning and passes the failure to on_decision as error, with decision=None. Enforcement is fail closed: evaluation errors do not silently fall through to the tool.

Compatibility: Python 3.10+, AutoGen Core 0.4–0.7; legacy AutoGen AgentChat 0.2 on Python 3.10–3.12.