SECURE OPS

Hit-A-Lick Ops Desk

Public repo (source lives in site/):
github.com/Almightybruce01/Hit-A-Lick
Live dashboard (GitHub Pages):
almightybruce01.github.io/Hit-A-Lick/ops-dashboard.html · …/ops/
Custom domain (if configured on Firebase):
www.hitalick.org/ops-dashboard.html · same file as GitHub Pages — use whichever host you actually deployed.
Hit-A-Lick only: bookmark must be this repo’s path (…/Hit-A-Lick/… on GitHub or your hitalick.org site). If the tab title or URL shows a different product name, delete that bookmark and open one of the links above.

Enter the private ops PIN (from Bruce — same value as Cloud Function secret OPS_DASHBOARD_PIN if you set one). It is checked on the server (X-Ops-Pin). Too many wrong guesses temporarily blocks your network (brute-force protection). Do not put the PIN in GitHub issues or public chat.

PIN API base URL (optional)

Override only for staging or a custom host. Production: https://api-lifnvql5aa-uc.a.run.app (auto-used on github.io when this field is empty).

Giap / co-curator: this screen is PIN-only (not your Firebase password). Bruce shares the same ops PIN with anyone who needs desk access; wrong PIN or rate limits look like “can’t sign in.”
Desktop shortcut (no folder): run bash scripts/install-live-dashboard-desktop.sh → Hit-A-Lick-Ops-Desk.webloc on Desktop
Repo: site/ops-dashboard.html · staff runbook: docs/STAFF_LOGIN_AND_OPS.md · docs/DASHBOARD.md, docs/CURATOR_ACCOUNTS.md

Environment

Markets by sport

Raw ops dashboard JSON

Every ops desk feature

Use Dashboard AI for step-by-step help. Below is the full map of what this page and the app can do.

Lock screen (before unlock)

PIN — sent as X-Ops-Pin; value is the private ops PIN (set server-side with OPS_DASHBOARD_PIN — never commit it).
API base URL — optional. On github.io the desk uses production Cloud Run when empty. Staging or custom hosts: paste origin (no trailing slash). Firebase Hosting with /api rewrite: leave empty for same-origin.

Environment

Loads GET /api/ops/dashboard: Odds API presence, prop market tier, markets by sport (NBA / NFL / MLB / WNBA), raw JSON, ops heartbeat notes.
Use to verify configuration after deploy or secret changes.

All features (this tab)

Reference list of tabs and backend routes; share with staff.

Dashboard AI

POST /api/ops/dashboard-guide with your question; answers with numbered steps for this desk and curator workflows.
With OPENAI_API_KEY on the server: full AI. Without it: static fallback tips (still useful).

AI insights (infrastructure)

GET /api/ops/insights — rule-based diagnostics (Odds API quota, Stripe price env vars, curator emails, etc.).
Optional OpenAI paragraph summarizing risks (same key as Dashboard AI).

Stripe prices

GET /api/billing/pricing-status — which Stripe price IDs are configured (masked). No PIN required for this call on some hosts; desk still useful to view alongside ops.

Props (3 days)

GET /api/props?sport=…&windowDays=3 — same slate as iOS; optional hide-after-tipoff matches HitALick/Props.swift.
POST /api/ops/board/append-legs — append checked legs to Bruce or Giap (deduped by sourceKey).

Curator pool → subscriber boards

Load pool — GET /api/ops/universal-pool (Firestore universal pool).
Check rows, choose lane Bruce Pick's or Giap Pick's, Save to board — POST /api/ops/curator-board/select.
Paid subscribers see these boards in the iOS app Picks tab (bottom bar).
Pool rows are created with owner tools (API / scripts), not by subscribers.

iOS app (not on this page)

Picks — subscribe / view Bruce & Giap boards.
Account → Curator Studio — Bruce (owner) can manage lanes; Giap only the Giap lane.
AI Lab — separate from this ops desk; pick/copilot quota for users; unlimited for staff / eligible subs (see app + functions/ai.js).
Props & slates — live odds/props; props hide after game start (second-half markets need backend tags).

Deploy / checklist tab

Short deploy reminders; full curator steps in docs/CURATOR_ACCOUNTS.md.

Bruce — brucebrian50@gmail.com (owner). Giap — giap.social1@gmail.com (co-curator). Account passwords are only in Firebase Authentication — reset via Firebase console or “Forgot password”; do not paste passwords into the repo or GitHub.

Hit-A-Lick Ops Desk

Prop & infrastructure desk

Environment

Markets by sport

Raw ops dashboard JSON

Rule-based suggestions

AI narrative (if OPENAI_API_KEY on server)

Full insights JSON

Stripe price IDs (masked)

Props — rolling 3-day window

Sample JSON (first event)

Every ops desk feature

Lock screen (before unlock)

Environment

All features (this tab)

Dashboard AI

AI insights (infrastructure)

Stripe prices

Props (3 days)

Curator pool → subscriber boards

iOS app (not on this page)

Deploy / checklist tab

Dashboard AI — walkthrough

Universal pool → Bruce / Giap boards

Checklist after Cursor