feat(cloud): enforce host governance budgets

2026-07-13 22:56:31 +08:00
parent 2cd314b183
commit b4803f90e6
28 changed files with 1311 additions and 14 deletions
@@ -36,6 +36,8 @@ class CloudControlConfig:
    login_block_seconds: int = 900
    session_cookie_secure: bool = False
    trust_proxy_headers: bool = False
+    planner_token_reservation_ceiling: int = 4096
+    planner_token_reservation_ttl_seconds: int = 300


 def load_control_config(
@@ -115,6 +117,16 @@ def load_control_config(
            values.get("CLOUD_TRUST_PROXY_HEADERS"),
            default=False,
        ),
+        planner_token_reservation_ceiling=_positive_int(
+            values,
+            "CLOUD_PLANNER_TOKEN_RESERVATION_CEILING",
+            4096,
+        ),
+        planner_token_reservation_ttl_seconds=_positive_int(
+            values,
+            "CLOUD_PLANNER_TOKEN_RESERVATION_TTL_SECONDS",
+            300,
+        ),
    )
    validate_control_config(config)
    return config