@grwnd/pi-governance 2.0.0 → 3.0.1

package/LICENSE

@@ -175,7 +175,7 @@
 
    END OF TERMS AND CONDITIONS
 
-   Copyright 2026 Grwnd AI
+   Copyright 2026 dtmirizzi
 
    Licensed under the Apache License, Version 2.0 (the "License");
    you may not use this file except in compliance with the License.

package/README.md

@@ -9,11 +9,11 @@
 </p>
 
 <p align="center">
-  <a href="https://github.com/Grwnd-AI/pi-governance/actions/workflows/ci.yml"><img src="https://github.com/Grwnd-AI/pi-governance/actions/workflows/ci.yml/badge.svg" alt="CI" /></a>
+  <a href="https://github.com/dtmirizzi/pi-governance/actions/workflows/ci.yml"><img src="https://github.com/dtmirizzi/pi-governance/actions/workflows/ci.yml/badge.svg" alt="CI" /></a>
   <a href="https://www.npmjs.com/package/@grwnd/pi-governance"><img src="https://img.shields.io/npm/v/@grwnd/pi-governance" alt="npm pi-governance" /></a>
   <a href="https://www.npmjs.com/package/@grwnd/openclaw-governance"><img src="https://img.shields.io/npm/v/@grwnd/openclaw-governance?label=openclaw-governance" alt="npm openclaw-governance" /></a>
-  <a href="https://github.com/Grwnd-AI/pi-governance/blob/main/LICENSE"><img src="https://img.shields.io/badge/license-Apache--2.0-blue" alt="License" /></a>
-  <a href="https://grwnd-ai.github.io/pi-governance/"><img src="https://img.shields.io/badge/docs-GitHub%20Pages-blue" alt="Docs" /></a>
+  <a href="https://github.com/dtmirizzi/pi-governance/blob/main/LICENSE"><img src="https://img.shields.io/badge/license-Apache--2.0-blue" alt="License" /></a>
+  <a href="https://dtmirizzi.github.io/pi-governance/"><img src="https://img.shields.io/badge/docs-GitHub%20Pages-blue" alt="Docs" /></a>
 </p>
 
 ---
@@ -52,26 +52,26 @@ Opens a browser-based wizard to configure roles, DLP, audit, and HITL. Generates
 
 ### Manual YAML
 
-Create `.pi/governance.yaml` and `governance-rules.yaml` — see the [Configuration Reference](https://grwnd-ai.github.io/pi-governance/reference/config).
+Create `.pi/governance.yaml` and `governance-rules.yaml` — see the [Configuration Reference](https://dtmirizzi.github.io/pi-governance/reference/config).
 
 ### Set identity
 
 ```bash
-export PI_RBAC_ROLE=project_lead  # analyst | project_lead | admin | auditor
+export PI_GOV_ROLE=project_lead  # analyst | project_lead | admin | auditor
 pi
 /governance status
 ```
 
 ## Documentation
 
-Full docs at **[grwnd-ai.github.io/pi-governance](https://grwnd-ai.github.io/pi-governance/)**.
+Full docs at **[dtmirizzi.github.io/pi-governance](https://dtmirizzi.github.io/pi-governance/)**.
 
-- [Why Governance?](https://grwnd-ai.github.io/pi-governance/guide/why) — What can go wrong without controls
-- [Quick Start](https://grwnd-ai.github.io/pi-governance/guide/quickstart) — Install and configure
-- [Common Scenarios](https://grwnd-ai.github.io/pi-governance/guide/scenarios) — Copy-paste configs
-- [YAML Policies](https://grwnd-ai.github.io/pi-governance/guide/yaml-policies) — Full policy reference
-- [DLP Guide](https://grwnd-ai.github.io/pi-governance/guide/dlp) — Data loss prevention
-- [OpenClaw Integration](https://grwnd-ai.github.io/pi-governance/guide/openclaw) — MCP tool governance
+- [Why Governance?](https://dtmirizzi.github.io/pi-governance/guide/why) — What can go wrong without controls
+- [Quick Start](https://dtmirizzi.github.io/pi-governance/guide/quickstart) — Install and configure
+- [Common Scenarios](https://dtmirizzi.github.io/pi-governance/guide/scenarios) — Copy-paste configs
+- [YAML Policies](https://dtmirizzi.github.io/pi-governance/guide/yaml-policies) — Full policy reference
+- [DLP Guide](https://dtmirizzi.github.io/pi-governance/guide/dlp) — Data loss prevention
+- [OpenClaw Integration](https://dtmirizzi.github.io/pi-governance/guide/openclaw) — MCP tool governance
 
 ## License
 

package/dist/extensions/index.cjs

@@ -39,9 +39,9 @@ var init_defaults = __esm({
       auth: {
         provider: "env",
         env: {
-          user_var: "PI_RBAC_USER",
-          role_var: "PI_RBAC_ROLE",
-          org_unit_var: "PI_RBAC_ORG_UNIT"
+          user_var: "PI_GOV_USER",
+          role_var: "PI_GOV_ROLE",
+          org_unit_var: "PI_GOV_ORG_UNIT"
         }
       },
       policy: {
@@ -920,15 +920,15 @@ var init_html = __esm({
           <div class="field-row-3">
             <div class="field">
               <label>User Var</label>
-              <input type="text" id="auth-user-var" value="PI_RBAC_USER" onchange="updatePreview()">
+              <input type="text" id="auth-user-var" value="PI_GOV_USER" onchange="updatePreview()">
             </div>
             <div class="field">
               <label>Role Var</label>
-              <input type="text" id="auth-role-var" value="PI_RBAC_ROLE" onchange="updatePreview()">
+              <input type="text" id="auth-role-var" value="PI_GOV_ROLE" onchange="updatePreview()">
             </div>
             <div class="field">
               <label>Org Unit Var</label>
-              <input type="text" id="auth-org-unit-var" value="PI_RBAC_ORG_UNIT" onchange="updatePreview()">
+              <input type="text" id="auth-org-unit-var" value="PI_GOV_ORG_UNIT" onchange="updatePreview()">
             </div>
           </div>
         </div>
@@ -1378,9 +1378,9 @@ function buildGovernanceConfig() {
   cfg.auth = { provider: authProvider };
   if (authProvider === 'env') {
     cfg.auth.env = {
-      user_var: document.getElementById('auth-user-var').value || 'PI_RBAC_USER',
-      role_var: document.getElementById('auth-role-var').value || 'PI_RBAC_ROLE',
-      org_unit_var: document.getElementById('auth-org-unit-var').value || 'PI_RBAC_ORG_UNIT'
+      user_var: document.getElementById('auth-user-var').value || 'PI_GOV_USER',
+      role_var: document.getElementById('auth-role-var').value || 'PI_GOV_ROLE',
+      org_unit_var: document.getElementById('auth-org-unit-var').value || 'PI_GOV_ORG_UNIT'
     };
   } else if (authProvider === 'local') {
     cfg.auth.local = {
@@ -1718,9 +1718,9 @@ var import_value = require("@sinclair/typebox/value");
 // src/lib/config/schema.ts
 var import_typebox = require("@sinclair/typebox");
 var AuthEnvConfig = import_typebox.Type.Object({
-  user_var: import_typebox.Type.String({ default: "PI_RBAC_USER" }),
-  role_var: import_typebox.Type.String({ default: "PI_RBAC_ROLE" }),
-  org_unit_var: import_typebox.Type.String({ default: "PI_RBAC_ORG_UNIT" })
+  user_var: import_typebox.Type.String({ default: "PI_GOV_USER" }),
+  role_var: import_typebox.Type.String({ default: "PI_GOV_ROLE" }),
+  org_unit_var: import_typebox.Type.String({ default: "PI_GOV_ORG_UNIT" })
 });
 var AuthLocalConfig = import_typebox.Type.Object({
   users_file: import_typebox.Type.String({ default: "./users.yaml" })
@@ -1867,7 +1867,7 @@ var GovernanceConfigSchema = import_typebox.Type.Object({
 init_defaults();
 function getConfigPaths() {
   return [
-    process.env["PI_RBAC_GOVERNANCE_CONFIG"],
+    process.env["PI_GOV_GOVERNANCE_CONFIG"],
     ".pi/governance.yaml",
     `${process.env["HOME"]}/.pi/agent/governance.yaml`
   ];
@@ -1914,7 +1914,7 @@ ${details}`);
 
 // src/lib/identity/env-provider.ts
 var EnvIdentityProvider = class {
-  constructor(userVar = "PI_RBAC_USER", roleVar = "PI_RBAC_ROLE", orgUnitVar = "PI_RBAC_ORG_UNIT") {
+  constructor(userVar = "PI_GOV_USER", roleVar = "PI_GOV_ROLE", orgUnitVar = "PI_GOV_ORG_UNIT") {
     this.userVar = userVar;
     this.roleVar = roleVar;
     this.orgUnitVar = orgUnitVar;
@@ -3130,6 +3130,7 @@ var piGovernance = (pi) => {
     );
   });
   pi.on("tool_call", async (event, _ctx) => {
+    if (!audit || !policyEngine || !identity) return void 0;
     const { toolName, input } = event;
     const params = summarizeParams(toolName, input);
     const baseRecord = {
@@ -3346,6 +3347,7 @@ var piGovernance = (pi) => {
     return void 0;
   });
   pi.on("tool_result", async (event, _ctx) => {
+    if (!audit || !identity) return;
     if (dlpScanner && dlpMasker && event.output) {
       const result = dlpScanner.scan(event.output);
       if (result.hasMatches) {
@@ -3397,15 +3399,16 @@ var piGovernance = (pi) => {
   });
   pi.on("session_shutdown", async (_event, _ctx) => {
     configWatcher?.stop();
+    if (!audit) return;
     await audit.log({
       sessionId,
       event: "session_end",
-      userId: identity.userId,
-      role: identity.role,
-      orgUnit: identity.orgUnit,
+      userId: identity?.userId,
+      role: identity?.role,
+      orgUnit: identity?.orgUnit,
       metadata: {
         stats: { ...stats },
-        budget: { used: budgetTracker.used(), remaining: budgetTracker.remaining() },
+        budget: budgetTracker ? { used: budgetTracker.used(), remaining: budgetTracker.remaining() } : void 0,
         summary: Object.fromEntries(audit.getSummary())
       }
     });