Operator console
run the app without code.

01What the console does

• Settings → Firestore. The console is the only writer of the app's configuration. On every save, and once at start, it writes config/public (served to the app by the API's /v1/config) and config/private (read only by Cloud Functions: provider keys, feed URLs, AI key, RPC overrides, store verification and ad reporting keys). Each write bumps version and sets updatedAt.
• Invalid lines are skipped, never guessed. A news source without a URL, a waterfall that names a network without that format, a sponsored slot that ends before it starts: each is left out and listed on the Status page.
• Server-side access only. It uses the Firebase Admin SDK on the server. The browser never talks to Firestore.
• Keys are write-only. Only the owner can set them. They are encrypted with ADMIN_SECRET_KEY, never shown again, never sent to the browser and written only to config/private. Each key has a Test button.
• Money switches default to off: ads and every placement, Pro, in-app purchases, affiliates and sponsored slots. Every number has a hard minimum and maximum.
• Every write is audited in the kit's append-only audit log.

What it never does: it never writes a backend field (proStore, alertsCount, stats, purchases and so on), never sends a push message itself, never deletes a user's alert, never shows a key it stored, and never estimates, converts or projects revenue (admin/README.md, test admin/test/writers.test.ts).

02Environment variables

Copy admin/.env.example to admin/.env (never commit it) or set these in your host's environment.

03Run it and create the owner

cd admin
npm ci
cp .env.example .env   # fill in ADMIN_SECRET_KEY and GOOGLE_APPLICATION_CREDENTIALS
npm start              # http://localhost:8790/admin

1. Find the setup codeOn first start the log prints a one-time setup code. Each start before an owner exists prints a new one; any printed code works.
2. Create the ownerOpen /admin, choose Create the owner, enter the code, your e-mail and a password of 12 or more characters.
3. Add your teamUnder Team, add managers and viewers.
4. Fill in the sections in this orderLegal (privacy and terms URLs), Data providers (a free CoinGecko Demo key lifts the rate limit), News sources, AI summaries (optional), then the money sections when you are ready. Status shows what is still missing.

Compiled build instead of tsx: npm run build && npm run start:dist.

04Roles and sign-in security

The kit adds two-factor sign-in codes, a lockout after 5 failed sign-ins within 15 minutes, settings history and export/import (vendored Admin Kit 0.4.0, admin/vendor/mikodes-admin/; do not edit those files, fixes arrive with product updates).

05Deploy options

cd admin
docker build -t cryptotracker-admin .
docker run -p 8790:8790 -v cryptotracker-admin-data:/app/data --env-file .env cryptotracker-admin

Put HTTPS in front of it (a reverse proxy or the platform's TLS). The session cookie is marked Secure over HTTPS and the server honours x-forwarded-proto.

06Settings sections

07Product pages

08Public demo console

To show the console to others without Firebase, run a separate instance with ADMIN_DATA=sample and ADMIN_DEMO_PASSWORD=<a password you publish>. Visitors sign in as demo@cryptotracker.demo, a viewer. No owner exists and every write answers 403. Sample users, alerts and campaigns are labelled "Sample" (ids start with sample-). The sample has no revenue at all, no news headlines, no provider usage and no sponsored or affiliate numbers. Its settings produce exactly the demo app's configuration (firebase/functions/src/api/demo-config.ts, checked by admin/test/sample.test.ts). Never set these two variables on your real console.

09Tests

cd admin
npm test                # manifest, defaults = contract, config mapping, writers, checks, revenue, sample, page routes
npm run test:emulator   # real writes against the Firestore emulator (needs the Firebase CLI and Java)
npm run build           # TypeScript check + compile to dist/

When these docs were written, npm test reported 65 passing tests (9 emulator tests are skipped without the emulator), checked again at the 2.0.0 release commit.