weichen
c07d4020d0
Persist validated_only shadow plans without executing, gate elevated tiers behind INTENT_PLAN_PROJECT_ALLOWLIST, and keep legacy chat routing for shadow.
114 lines
2.7 KiB
Go
114 lines
2.7 KiB
Go
package intentflow
|
|
|
|
import (
|
|
"os"
|
|
"strings"
|
|
"sync"
|
|
)
|
|
|
|
// PlanTier is the intentflow rollout switch. It must not be stored on
|
|
// intent.ActionSpec or intent.FeatureFlags.
|
|
type PlanTier string
|
|
|
|
const (
|
|
TierLegacy PlanTier = "legacy"
|
|
TierShadow PlanTier = "shadow"
|
|
TierAutoRead PlanTier = "auto_read"
|
|
TierConfirm PlanTier = "confirm"
|
|
TierFull PlanTier = "full"
|
|
)
|
|
|
|
type FeatureFlags struct {
|
|
PlanTier PlanTier
|
|
// ProjectAllowlist gates elevated tiers (shadow/auto_read/confirm/full).
|
|
// Empty denies; AllowAllProjects (-1) allows every project.
|
|
// Env: INTENT_PLAN_PROJECT_ALLOWLIST (*|id,id,...)
|
|
ProjectAllowlist []int64
|
|
// Independent PU8 expansion gates. Default OFF; do not couple to PlanTier.
|
|
U9Segment bool // MULTI_INTENT_U9_SEGMENT — LLM segment proposal
|
|
U10Mutate bool // MULTI_INTENT_U10_MUTATE — low/medium mutate adapters
|
|
U11DocGov bool // MULTI_INTENT_U11_DOCGOV — docgov action adapters
|
|
U12RunControl bool // MULTI_INTENT_U12_RUN_CONTROL — workflow/run-control adapters
|
|
}
|
|
|
|
var (
|
|
flagsMu sync.RWMutex
|
|
activeFlags = defaultFeatureFlags()
|
|
)
|
|
|
|
func defaultFeatureFlags() FeatureFlags {
|
|
return FeatureFlags{
|
|
PlanTier: parsePlanTier(os.Getenv("MULTI_INTENT_PLAN_TIER")),
|
|
ProjectAllowlist: ParseProjectAllowlist(os.Getenv("INTENT_PLAN_PROJECT_ALLOWLIST")),
|
|
U9Segment: envBool("MULTI_INTENT_U9_SEGMENT", false),
|
|
U10Mutate: envBool("MULTI_INTENT_U10_MUTATE", false),
|
|
U11DocGov: envBool("MULTI_INTENT_U11_DOCGOV", false),
|
|
U12RunControl: envBool("MULTI_INTENT_U12_RUN_CONTROL", false),
|
|
}
|
|
}
|
|
|
|
func envBool(key string, def bool) bool {
|
|
v := strings.TrimSpace(os.Getenv(key))
|
|
if v == "" {
|
|
return def
|
|
}
|
|
return v == "1" || strings.EqualFold(v, "true") || strings.EqualFold(v, "yes")
|
|
}
|
|
|
|
func parsePlanTier(raw string) PlanTier {
|
|
switch strings.ToLower(strings.TrimSpace(raw)) {
|
|
case "", "legacy":
|
|
return TierLegacy
|
|
case "shadow":
|
|
return TierShadow
|
|
case "auto_read", "autoread":
|
|
return TierAutoRead
|
|
case "confirm":
|
|
return TierConfirm
|
|
case "full":
|
|
return TierFull
|
|
default:
|
|
return TierLegacy
|
|
}
|
|
}
|
|
|
|
func CurrentFeatureFlags() FeatureFlags {
|
|
flagsMu.RLock()
|
|
defer flagsMu.RUnlock()
|
|
return activeFlags
|
|
}
|
|
|
|
func SetFeatureFlagsForTest(f FeatureFlags) {
|
|
flagsMu.Lock()
|
|
activeFlags = f
|
|
flagsMu.Unlock()
|
|
}
|
|
|
|
func ResetFeatureFlagsForTest() {
|
|
flagsMu.Lock()
|
|
activeFlags = defaultFeatureFlags()
|
|
flagsMu.Unlock()
|
|
}
|
|
|
|
// Allows reports whether the current (or supplied) tier may activate a policy row.
|
|
func (t PlanTier) Allows(min PlanTier) bool {
|
|
return tierRank(t) >= tierRank(min)
|
|
}
|
|
|
|
func tierRank(t PlanTier) int {
|
|
switch t {
|
|
case TierLegacy:
|
|
return 0
|
|
case TierShadow:
|
|
return 1
|
|
case TierAutoRead:
|
|
return 2
|
|
case TierConfirm:
|
|
return 3
|
|
case TierFull:
|
|
return 4
|
|
default:
|
|
return 0
|
|
}
|
|
}
|