flags

const (
	DefaultHoldCheckEvery = 5 * time.Minute
	DefaultHoldMax        = 30 * time.Minute
)

Hold timing defaults and bounds.

const AICallCapName = "ai_call_cap"

AICallCapName bounds how many LLM-backed calls a single user can make per day (trip advice, drive efficiency). Read by the AI budget gate before each call. Fail-open: a missing row or a non-positive limit means "no cap" — this is a cost backstop, not a security control, so it must never brick the feature.

const DCFCAutoNetworkName = "dcfc_auto_network"

DCFCAutoNetworkName gates DC fast charge network auto-detection with user verification (verify states, confirm, push). Same shape as AudienceState; off when the row is missing or malformed.

const DefaultPollInterval = 10 * time.Second

DefaultPollInterval is how often the Store refreshes its in-memory snapshot from Postgres. Chosen so a flipped flag takes effect in roughly the time a human can notice — on the same order as a Prometheus scrape interval.

const InactiveAccountPurgeName = "inactive_account_purge"

InactiveAccountPurgeName gates the deletion of accounts that never connected a vehicle (warned at day 90, deleted at day 120). Off when the row is missing or malformed. Enable it only after the privacy policy that promises the rule is published:

{"dry_run": true}        count candidates in the log, send and delete nothing
{"users": ["<uuid>"]}    act on those accounts only (a rehearsal)
{"all": true}            act on every eligible account

const KillSwitchName = "rivian_upstream_paused"

KillSwitchName is the flags.name value for the Rivian upstream kill switch. Exported so tests and admin handlers can reference the same string the poller does.

const RivianReceiptsName = "rivian_receipts"

RivianReceiptsName gates the sync of Rivian's charging receipts (what Rivian billed per session) into charges.receipt_*. Same shape as AudienceState; off when the row is missing or malformed, so the extra upstream calls start only for the users the operator names:

INSERT INTO flags (name, value, updated_by)
VALUES ('rivian_receipts', '{"users":["<user uuid>"]}', 'ops')
ON CONFLICT (name) DO UPDATE SET value = EXCLUDED.value, updated_at = now();

const SignupCapName = "signup_cap"

SignupCapName gates how many user accounts can exist at once. Read in the OIDC callback before users.insert; existing users signing back in are exempt.

const SleepSafeName = "sleep_safe_vehicles"

SleepSafeName lists the vehicles whose non-essential Rivian subscriptions are parked while the car reports it is asleep (see rivian.StateMonitor's sleep gate). An operator switch, flipped over psql with no deploy, e.g.:

INSERT INTO flags (name, value, updated_by)
VALUES ('sleep_safe_vehicles', '{"vehicles":["01-000000000"]}', 'ops')
ON CONFLICT (name) DO UPDATE SET value = EXCLUDED.value, updated_at = now();

{"all": true} applies it to every vehicle; "except" opts vehicles back out (a control group): {"all": true, "except": ["01-…"]}.

const StatementEmailName = "statement_email_enabled"

StatementEmailName gates the monthly statement email (operator flag; the user's own opt-in is separate). Same shape as AudienceState.

const TripPlannerEnabledName = "trip_planner_enabled"

TripPlannerEnabledName is the flags.name value gating the trip planner UI + endpoints. Default-off: when the row is missing or the JSON decodes to {enabled:false}, the planner stays hidden.

const WakeSafetyName = "wake_safety"

WakeSafetyName holds the battery-drain experiment's wake-safety switches (D2). All off when the row is missing. Each switch selects vehicles like sleep_safe_vehicles (all / vehicles / except), so an experiment can run on a treatment group with the rest as control. Flipped over psql with no deploy, picked up within the poll interval:

INSERT INTO flags (name, value, updated_by)
VALUES ('wake_safety', '{"capture_off":{"all":true},
        "hold_asleep":{"vehicles":["01-…"]},"hold_check_every":"5m"}', 'ops')
ON CONFLICT (name) DO UPDATE SET value = EXCLUDED.value, updated_at = now();

A malformed value is logged and read as all-off, never blocking the other flags. See WakeSafetyState.