Skip to content

Admin governance: remove the admin_governance feature flag - #29637

Open
philipperolet wants to merge 2 commits into
mainfrom
pr/728-remove-admin-governance-ff
Open

Admin governance: remove the admin_governance feature flag#29637
philipperolet wants to merge 2 commits into
mainfrom
pr/728-remove-admin-governance-ff

Conversation

@philipperolet

@philipperolet philipperolet commented Jul 28, 2026

Copy link
Copy Markdown
Contributor

Description

Admin governance ships to all workspaces: this removes the admin_governance feature flag and every check on it, keeping the flag-enabled behavior everywhere.

End-user changes for workspaces that did not have the flag:

  • The "Settings & Governance" page and nav entry replace the legacy "Workspace Settings" page; /w/[wId]/workspace now redirects to /w/[wId]/governance. "Identity & Provisioning" is now labeled "IT & Security".
  • The manager role can now be assigned and invited, and the dust-managers provisioning group grants it; builder can no longer be assigned from the role dropdown (existing builders display as members).
  • The People page gains the Members/Groups tabs.

Code notes:

  • The legacy Workspace Settings page tree becomes unreachable and is deleted (Preferences/Capabilities/Integrations sections, restrict-publishing info row, legacy ContextItem variants of the settings toggles).
  • The workspace default-agent picker (still gated by the separate workspace_default_agent flag, used by 2 workspaces without admin_governance) is ported to the governance page's Features section instead of being deleted with the legacy page.
  • admin_governance_skill_publication is a separate flag and is untouched.
  • buildersOnly plumbing in ManageUsersPanel/MemberSelectionTable no longer has callers; left for the builder-deprecation cleanup series.
  • Stale admin_governance rows in feature_flags are ignored at read time (FeatureFlagResource.listForWorkspace filters on the whitelist), so no migration is needed.

Follow-up candidates:

  • Governance-page visibility for the restrict_agents_publishing(_to_admins) flags (their info-only row lived on the legacy page; enforcement is unchanged).

Risks

Blast radius: all workspace admin surfaces for workspaces without the flag (settings/governance pages, members & invitations, role provisioning, nav).
Risk: standard

Deploy Plan

  • deploy front
  • optional cleanup afterwards: delete stale admin_governance rows from feature_flags

Admin governance ships to all workspaces: drop the flag, keep the
governance rendering everywhere, and delete the legacy Workspace
Settings page tree that becomes unreachable.
@vercel

vercel Bot commented Jul 28, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

2 Skipped Deployments
Project Deployment Actions Updated (UTC)
playground Ignored Ignored Preview Jul 28, 2026 7:47pm
storybook Ignored Ignored Preview Jul 28, 2026 7:47pm

Request Review

@dust-agent dust-agent Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Coding Rules LGTM \o/

@github-actions

github-actions Bot commented Jul 28, 2026

Copy link
Copy Markdown
Contributor
Warnings
⚠️

Files in front-api/routes/ have been modified and the PR has the documentation-ack label.
Don't forget to run npm -w front-api run docs and use the Deploy OpenAPI Docs Github action to update https://docs.dust.tt/reference.

Generated by 🚫 dangerJS against 4cf72e6

@philipperolet philipperolet added sdk-ack Used to acknowledge that you are not breaking the public API. documentation-ack Used to acknowledge that documentation is up-to-date with this PR labels Jul 28, 2026
…v matcher

- Port WorkspaceDefaultAgentPicker to the governance page (Features
  section), still gated by the workspace_default_agent flag: two
  workspaces use it without admin_governance and would have lost the UI.
- Redirect the legacy /w/[wId]/workspace route to /governance.
- Drop the stale /w/[wId]/workspace pattern from the Admin tab matcher.
selectedRole,
isAdminGovernanceEnabled
);
// `builder` is deprecated: display it as a regular member.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this and other related comms can be removed on the PR cleaning isBuilder for good

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation-ack Used to acknowledge that documentation is up-to-date with this PR sdk-ack Used to acknowledge that you are not breaking the public API.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant