flags

const AICallCapName = "ai_call_cap"

AICallCapName bounds how many LLM-backed calls a single user can make per day (trip advice, drive efficiency). Read by the AI budget gate before each call. Fail-open: a missing row or a non-positive limit means "no cap" — this is a cost backstop, not a security control, so it must never brick the feature.

const DefaultPollInterval = 10 * time.Second

DefaultPollInterval is how often the Store refreshes its in-memory snapshot from Postgres. Chosen so a flipped flag takes effect in roughly the time a human can notice — on the same order as a Prometheus scrape interval.

const KillSwitchName = "rivian_upstream_paused"

KillSwitchName is the flags.name value for the Rivian upstream kill switch. Exported so tests and admin handlers can reference the same string the poller does.

const SignupCapName = "signup_cap"

SignupCapName gates how many user accounts can exist at once. Read in the OIDC callback before users.insert; existing users signing back in are exempt.

const SleepSafeName = "sleep_safe_vehicles"

SleepSafeName lists the vehicles whose non-essential Rivian subscriptions are parked while the car reports it is asleep (see rivian.StateMonitor's sleep gate). An operator switch, flipped over psql with no deploy, e.g.:

INSERT INTO flags (name, value, updated_by)
VALUES ('sleep_safe_vehicles', '{"vehicles":["01-242521064"]}', 'ops')
ON CONFLICT (name) DO UPDATE SET value = EXCLUDED.value, updated_at = now();

{"all": true} applies it to every vehicle.

const TripPlannerEnabledName = "trip_planner_enabled"

TripPlannerEnabledName is the flags.name value gating the trip planner UI + endpoints. Default-off: when the row is missing or the JSON decodes to {enabled:false}, the planner stays hidden.