@grwnd/pi-governance 2.0.0 → 3.0.1

package/dist/extensions/index.js

@@ -17,9 +17,9 @@ var init_defaults = __esm({
       auth: {
         provider: "env",
         env: {
-          user_var: "PI_RBAC_USER",
-          role_var: "PI_RBAC_ROLE",
-          org_unit_var: "PI_RBAC_ORG_UNIT"
+          user_var: "PI_GOV_USER",
+          role_var: "PI_GOV_ROLE",
+          org_unit_var: "PI_GOV_ORG_UNIT"
         }
       },
       policy: {
@@ -898,15 +898,15 @@ var init_html = __esm({
           <div class="field-row-3">
             <div class="field">
               <label>User Var</label>
-              <input type="text" id="auth-user-var" value="PI_RBAC_USER" onchange="updatePreview()">
+              <input type="text" id="auth-user-var" value="PI_GOV_USER" onchange="updatePreview()">
             </div>
             <div class="field">
               <label>Role Var</label>
-              <input type="text" id="auth-role-var" value="PI_RBAC_ROLE" onchange="updatePreview()">
+              <input type="text" id="auth-role-var" value="PI_GOV_ROLE" onchange="updatePreview()">
             </div>
             <div class="field">
               <label>Org Unit Var</label>
-              <input type="text" id="auth-org-unit-var" value="PI_RBAC_ORG_UNIT" onchange="updatePreview()">
+              <input type="text" id="auth-org-unit-var" value="PI_GOV_ORG_UNIT" onchange="updatePreview()">
             </div>
           </div>
         </div>
@@ -1356,9 +1356,9 @@ function buildGovernanceConfig() {
   cfg.auth = { provider: authProvider };
   if (authProvider === 'env') {
     cfg.auth.env = {
-      user_var: document.getElementById('auth-user-var').value || 'PI_RBAC_USER',
-      role_var: document.getElementById('auth-role-var').value || 'PI_RBAC_ROLE',
-      org_unit_var: document.getElementById('auth-org-unit-var').value || 'PI_RBAC_ORG_UNIT'
+      user_var: document.getElementById('auth-user-var').value || 'PI_GOV_USER',
+      role_var: document.getElementById('auth-role-var').value || 'PI_GOV_ROLE',
+      org_unit_var: document.getElementById('auth-org-unit-var').value || 'PI_GOV_ORG_UNIT'
     };
   } else if (authProvider === 'local') {
     cfg.auth.local = {
@@ -1691,9 +1691,9 @@ import { Value } from "@sinclair/typebox/value";
 // src/lib/config/schema.ts
 import { Type } from "@sinclair/typebox";
 var AuthEnvConfig = Type.Object({
-  user_var: Type.String({ default: "PI_RBAC_USER" }),
-  role_var: Type.String({ default: "PI_RBAC_ROLE" }),
-  org_unit_var: Type.String({ default: "PI_RBAC_ORG_UNIT" })
+  user_var: Type.String({ default: "PI_GOV_USER" }),
+  role_var: Type.String({ default: "PI_GOV_ROLE" }),
+  org_unit_var: Type.String({ default: "PI_GOV_ORG_UNIT" })
 });
 var AuthLocalConfig = Type.Object({
   users_file: Type.String({ default: "./users.yaml" })
@@ -1840,7 +1840,7 @@ var GovernanceConfigSchema = Type.Object({
 init_defaults();
 function getConfigPaths() {
   return [
-    process.env["PI_RBAC_GOVERNANCE_CONFIG"],
+    process.env["PI_GOV_GOVERNANCE_CONFIG"],
     ".pi/governance.yaml",
     `${process.env["HOME"]}/.pi/agent/governance.yaml`
   ];
@@ -1887,7 +1887,7 @@ ${details}`);
 
 // src/lib/identity/env-provider.ts
 var EnvIdentityProvider = class {
-  constructor(userVar = "PI_RBAC_USER", roleVar = "PI_RBAC_ROLE", orgUnitVar = "PI_RBAC_ORG_UNIT") {
+  constructor(userVar = "PI_GOV_USER", roleVar = "PI_GOV_ROLE", orgUnitVar = "PI_GOV_ORG_UNIT") {
     this.userVar = userVar;
     this.roleVar = roleVar;
     this.orgUnitVar = orgUnitVar;
@@ -3103,6 +3103,7 @@ var piGovernance = (pi) => {
     );
   });
   pi.on("tool_call", async (event, _ctx) => {
+    if (!audit || !policyEngine || !identity) return void 0;
     const { toolName, input } = event;
     const params = summarizeParams(toolName, input);
     const baseRecord = {
@@ -3319,6 +3320,7 @@ var piGovernance = (pi) => {
     return void 0;
   });
   pi.on("tool_result", async (event, _ctx) => {
+    if (!audit || !identity) return;
     if (dlpScanner && dlpMasker && event.output) {
       const result = dlpScanner.scan(event.output);
       if (result.hasMatches) {
@@ -3370,15 +3372,16 @@ var piGovernance = (pi) => {
   });
   pi.on("session_shutdown", async (_event, _ctx) => {
     configWatcher?.stop();
+    if (!audit) return;
     await audit.log({
       sessionId,
       event: "session_end",
-      userId: identity.userId,
-      role: identity.role,
-      orgUnit: identity.orgUnit,
+      userId: identity?.userId,
+      role: identity?.role,
+      orgUnit: identity?.orgUnit,
       metadata: {
         stats: { ...stats },
-        budget: { used: budgetTracker.used(), remaining: budgetTracker.remaining() },
+        budget: budgetTracker ? { used: budgetTracker.used(), remaining: budgetTracker.remaining() } : void 0,
         summary: Object.fromEntries(audit.getSummary())
       }
     });