feat(medium): Add GitHub Actions variables to control Gemini API usage (#9408)

Co-authored-by: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com>
Co-authored-by: arii <342438+arii@users.noreply.github.com>

Author: arii

.github/workflows/gemini-coder.yml

@@ -73,7 +73,7 @@ permissions:
 
 jobs:
   ai-developer:
-    if: (github.event_name == 'workflow_dispatch') || (github.event.label.name == 'auto-code')
+    if: vars.GEMINI_ENABLE_CODER != 'false' && ((github.event_name == 'workflow_dispatch') || (github.event.label.name == 'auto-code'))
     runs-on: self-hosted
 
     steps:

.github/workflows/gemini-triage.yml

@@ -25,7 +25,7 @@ jobs:
   triage:
     # This job runs for new issues.
     # It uses a Gemini agent to analyze the issue and provide a detailed triage.
-    if: github.event_name == 'issues' && github.actor != 'ari-party-bot'
+    if: vars.GEMINI_ENABLE_TRIAGE != 'false' && github.event_name == 'issues' && github.actor != 'ari-party-bot'
     runs-on: self-hosted
     steps:
       - uses: actions/checkout@v4

.github/workflows/pr-quality.yml

@@ -217,6 +217,7 @@ jobs:
         shell: bash
         env:
           GEMINI_API_KEY: ${{ secrets.GEMINI_API_KEY }}
+          GEMINI_ENABLE_SLOP_CHECK: ${{ vars.GEMINI_ENABLE_SLOP_CHECK }}
         run: |
           chmod +x ./scripts/ci-check-slop.sh
           ./scripts/ci-check-slop.sh

.github/workflows/reusable-create-review-issues.yml

@@ -30,6 +30,7 @@ permissions:
 
 jobs:
   create-review-issues:
+    if: vars.GEMINI_ENABLE_REVIEW_ISSUES != 'false'
     runs-on: ubuntu-latest
     name: Create Issues from Gemini Review
 

.github/workflows/reusable-gemini-review.yml

@@ -94,14 +94,15 @@ jobs:
           MAX_COMMENTS: 60
           REVIEW_THROTTLE_MINUTES: 30
           BOT_USERNAME: 'gemini-bot'
+          GEMINI_ENABLE_PR_REVIEW: ${{ vars.GEMINI_ENABLE_PR_REVIEW }}
         run: |
           chmod +x ./scripts/decide-review-strategy.sh
           ./scripts/decide-review-strategy.sh
 
   gemini-review:
     name: Execute Gemini Review
     needs: analyze-changes
-    if: needs.analyze-changes.outputs.needs-review == 'true'
+    if: vars.GEMINI_ENABLE_PR_REVIEW != 'false' && needs.analyze-changes.outputs.needs-review == 'true'
     runs-on: ubuntu-latest
     outputs:
       review_performed: ${{ steps.upload_artifact.outcome == 'success' }}

lib/env.ts

@@ -44,6 +44,12 @@ const envSchema = z
     WEBSOCKET_WATCHDOG_INTERVAL: z.coerce.number().default(30000),
     NEXT_PUBLIC_BLUETOOTH_MAX_RECONNECT_ATTEMPTS: z.coerce.number().default(8),
     GEMINI_MODEL_FALLBACKS: z.string().optional(),
+    GEMINI_ENABLE_TRIAGE: z.string().default('true'),
+    GEMINI_ENABLE_CODER: z.string().default('true'),
+    GEMINI_ENABLE_PR_REVIEW: z.string().default('true'),
+    GEMINI_ENABLE_REVIEW_ISSUES: z.string().default('true'),
+    GEMINI_ENABLE_SLOP_CHECK: z.string().default('true'),
+    GEMINI_RATE_LIMIT_PER_DAY: z.coerce.number().optional(),
     ANALYZE: z.string().optional(),
     TESTING: z.string().optional(),
     IS_DEPLOYMENT: z.string().optional(),

scripts/ci-check-slop.sh

@@ -45,26 +45,32 @@ if ! LOC_STATS=$(git diff --stat "$DIFF_TARGET" 2>&1); then
 fi
 echo "$LOC_STATS"
 
-echo "Requesting Gemini feedback..."
+if [ "${GEMINI_ENABLE_SLOP_CHECK:-true}" == "false" ]; then
+  echo "⚠️ Gemini slop check disabled via GEMINI_ENABLE_SLOP_CHECK" >&2
+  # We still want to generate the report based on the regex detector if it ran,
+  # but we skip the Gemini API call.
+  echo "Gemini feedback skipped (disabled via environment variable)." > "$GEMINI_SLOP_LOG"
+else
+  echo "Requesting Gemini feedback..."
 
-# Generate Diff (limit size to 100KB to be safe)
-if [ -z "$DIFF_ERROR" ]; then
+  # Generate Diff (limit size to 100KB to be safe)
+  if [ -z "$DIFF_ERROR" ]; then
     # Capture diff to file, respecting size limit
     if ! git diff "$DIFF_TARGET" | head -c "$DIFF_MAX_SIZE" > "$DIFF_FILE"; then
-         echo "Diff generation failed." > "$DIFF_FILE"
+      echo "Diff generation failed." > "$DIFF_FILE"
     else
-         # Check if we hit the limit
-         ACTUAL_SIZE=$(wc -c < "$DIFF_FILE")
-         if [ "$ACTUAL_SIZE" -ge "$DIFF_MAX_SIZE" ]; then
-             echo "⚠️  Warning: Diff truncated to ${DIFF_MAX_SIZE} bytes." >&2
-             echo "... (Diff truncated at ${DIFF_MAX_SIZE} bytes) ..." >> "$DIFF_FILE"
-         fi
+      # Check if we hit the limit
+      ACTUAL_SIZE=$(wc -c < "$DIFF_FILE")
+      if [ "$ACTUAL_SIZE" -ge "$DIFF_MAX_SIZE" ]; then
+        echo "⚠️  Warning: Diff truncated to ${DIFF_MAX_SIZE} bytes." >&2
+        echo "... (Diff truncated at ${DIFF_MAX_SIZE} bytes) ..." >> "$DIFF_FILE"
+      fi
     fi
-else
+  else
     echo "Diff generation skipped due to previous error: $DIFF_ERROR" > "$DIFF_FILE"
-fi
+  fi
 
-cat > "$TASK_FILE" <<EOF
+  cat > "$TASK_FILE" <<EOF
 Review the following code changes for "slop" (low-quality, repetitive, or filler content).
 We have already run a regex-based detector.
 
@@ -86,20 +92,21 @@ Please provide a concise assessment of the changes.
 Keep your response short and focused on quality/slop.
 EOF
 
-if [ -z "$GEMINI_API_KEY" ]; then
-  echo "⚠️ GEMINI_API_KEY not set. Skipping Gemini feedback." >&2
-  echo "Gemini feedback skipped (missing API key)." > "$GEMINI_SLOP_LOG"
-else
-  echo "Invoking Gemini client..."
-  GEMINI_EXIT_CODE=0
-  pnpm tsx scripts/gemini-client.ts \
-    --task-file "$TASK_FILE" \
-    --context "$DIFF_FILE" \
-    --output "$GEMINI_SLOP_LOG" || GEMINI_EXIT_CODE=$?
-
-  if [ $GEMINI_EXIT_CODE -ne 0 ]; then
-    echo "⚠️ Gemini client failed. Continuing with available reports." >&2
-    echo "Gemini feedback unavailable (client failed)." > "$GEMINI_SLOP_LOG"
+  if [ -z "$GEMINI_API_KEY" ]; then
+    echo "⚠️ GEMINI_API_KEY not set. Skipping Gemini feedback." >&2
+    echo "Gemini feedback skipped (missing API key)." > "$GEMINI_SLOP_LOG"
+  else
+    echo "Invoking Gemini client..."
+    GEMINI_EXIT_CODE=0
+    pnpm tsx scripts/gemini-client.ts \
+      --task-file "$TASK_FILE" \
+      --context "$DIFF_FILE" \
+      --output "$GEMINI_SLOP_LOG" || GEMINI_EXIT_CODE=$?
+
+    if [ $GEMINI_EXIT_CODE -ne 0 ]; then
+      echo "⚠️ Gemini client failed. Continuing with available reports." >&2
+      echo "Gemini feedback unavailable (client failed)." > "$GEMINI_SLOP_LOG"
+    fi
   fi
 fi
 

scripts/decide-review-strategy.sh

@@ -31,6 +31,14 @@ SKIP_REASON="no criteria met"
 
 # --- Main Logic ---
 
+# Check 0: Gemini Review Enablement
+if [[ "${GEMINI_ENABLE_PR_REVIEW:-true}" == "false" ]]; then
+  echo "::info::Gemini review is disabled via GEMINI_ENABLE_PR_REVIEW."
+  echo "needs-review=false" >> "$GITHUB_OUTPUT"
+  echo "skip-reason=Gemini review is disabled" >> "$GITHUB_OUTPUT"
+  exit 0
+fi
+
 # Check 1: Manual Override
 # A manual trigger (e.g., a specific comment) always forces a review, bypassing all other checks.
 if [[ "$TRIGGER_EVENT" == "comment" && ( "$COMMENT_BODY" == *@gemini-bot* || "$COMMENT_BODY" == *@jules* ) ]]; then

tests/unit/decide-review-strategy.bats

@@ -103,6 +103,18 @@ setup() {
   assert_output "skip-reason" "quality failure with no detailed report (likely static analysis)"
 }
 
+@test "should skip review when GEMINI_ENABLE_PR_REVIEW is false" {
+  export GEMINI_ENABLE_PR_REVIEW="false"
+  export TRIGGER_EVENT="pull_request"
+  export ACTION_TYPE="opened"
+
+  run_script
+
+  [ "$status" -eq 0 ]
+  assert_output "needs-review" "false"
+  assert_output "skip-reason" "Gemini review is disabled"
+}
+
 # Helper function to assert the output of the script
 assert_output() {
   local key="$1"