@grwnd/pi-governance 1.9.1 → 2.0.0

package/README.md

@@ -57,7 +57,7 @@ Create `.pi/governance.yaml` and `governance-rules.yaml` — see the [Configurat
 ### Set identity
 
 ```bash
-export GRWND_ROLE=project_lead  # analyst | project_lead | admin | auditor
+export PI_RBAC_ROLE=project_lead  # analyst | project_lead | admin | auditor
 pi
 /governance status
 ```

package/dist/extensions/index.cjs

@@ -39,9 +39,9 @@ var init_defaults = __esm({
       auth: {
         provider: "env",
         env: {
-          user_var: "GRWND_USER",
-          role_var: "GRWND_ROLE",
-          org_unit_var: "GRWND_ORG_UNIT"
+          user_var: "PI_RBAC_USER",
+          role_var: "PI_RBAC_ROLE",
+          org_unit_var: "PI_RBAC_ORG_UNIT"
         }
       },
       policy: {
@@ -920,15 +920,15 @@ var init_html = __esm({
           <div class="field-row-3">
             <div class="field">
               <label>User Var</label>
-              <input type="text" id="auth-user-var" value="GRWND_USER" onchange="updatePreview()">
+              <input type="text" id="auth-user-var" value="PI_RBAC_USER" onchange="updatePreview()">
             </div>
             <div class="field">
               <label>Role Var</label>
-              <input type="text" id="auth-role-var" value="GRWND_ROLE" onchange="updatePreview()">
+              <input type="text" id="auth-role-var" value="PI_RBAC_ROLE" onchange="updatePreview()">
             </div>
             <div class="field">
               <label>Org Unit Var</label>
-              <input type="text" id="auth-org-unit-var" value="GRWND_ORG_UNIT" onchange="updatePreview()">
+              <input type="text" id="auth-org-unit-var" value="PI_RBAC_ORG_UNIT" onchange="updatePreview()">
             </div>
           </div>
         </div>
@@ -1378,9 +1378,9 @@ function buildGovernanceConfig() {
   cfg.auth = { provider: authProvider };
   if (authProvider === 'env') {
     cfg.auth.env = {
-      user_var: document.getElementById('auth-user-var').value || 'GRWND_USER',
-      role_var: document.getElementById('auth-role-var').value || 'GRWND_ROLE',
-      org_unit_var: document.getElementById('auth-org-unit-var').value || 'GRWND_ORG_UNIT'
+      user_var: document.getElementById('auth-user-var').value || 'PI_RBAC_USER',
+      role_var: document.getElementById('auth-role-var').value || 'PI_RBAC_ROLE',
+      org_unit_var: document.getElementById('auth-org-unit-var').value || 'PI_RBAC_ORG_UNIT'
     };
   } else if (authProvider === 'local') {
     cfg.auth.local = {
@@ -1718,9 +1718,9 @@ var import_value = require("@sinclair/typebox/value");
 // src/lib/config/schema.ts
 var import_typebox = require("@sinclair/typebox");
 var AuthEnvConfig = import_typebox.Type.Object({
-  user_var: import_typebox.Type.String({ default: "GRWND_USER" }),
-  role_var: import_typebox.Type.String({ default: "GRWND_ROLE" }),
-  org_unit_var: import_typebox.Type.String({ default: "GRWND_ORG_UNIT" })
+  user_var: import_typebox.Type.String({ default: "PI_RBAC_USER" }),
+  role_var: import_typebox.Type.String({ default: "PI_RBAC_ROLE" }),
+  org_unit_var: import_typebox.Type.String({ default: "PI_RBAC_ORG_UNIT" })
 });
 var AuthLocalConfig = import_typebox.Type.Object({
   users_file: import_typebox.Type.String({ default: "./users.yaml" })
@@ -1867,7 +1867,7 @@ var GovernanceConfigSchema = import_typebox.Type.Object({
 init_defaults();
 function getConfigPaths() {
   return [
-    process.env["GRWND_GOVERNANCE_CONFIG"],
+    process.env["PI_RBAC_GOVERNANCE_CONFIG"],
     ".pi/governance.yaml",
     `${process.env["HOME"]}/.pi/agent/governance.yaml`
   ];
@@ -1914,7 +1914,7 @@ ${details}`);
 
 // src/lib/identity/env-provider.ts
 var EnvIdentityProvider = class {
-  constructor(userVar = "GRWND_USER", roleVar = "GRWND_ROLE", orgUnitVar = "GRWND_ORG_UNIT") {
+  constructor(userVar = "PI_RBAC_USER", roleVar = "PI_RBAC_ROLE", orgUnitVar = "PI_RBAC_ORG_UNIT") {
     this.userVar = userVar;
     this.roleVar = roleVar;
     this.orgUnitVar = orgUnitVar;