Cost rate card
Per-call rates used to compute costEstimate on every usage entry. Customer SPA picks up edits on next page load.
Alerts
Daily ops digest (Cloud Function on cron, sends one email per day to the configured operator address). Trial expiry, threshold, and anomaly checks are folded into the same email.
Maintenance
One-shot ops actions. Run dry-run first to see scope, then commit.
Recomputes costEstimate on every studios/{sid}/usage/{ymd}/{ts} entry that's currently 0. Existing non-zero values are pinned to the rate card active at write time and stay untouched. Safe to re-run.
Vendor secrets (Secret Manager)
Read-only status of the platform's vendor API keys. Rotation is CLI-only: firebase functions:secrets:set <NAME> --project hell-unleashed-cms, then redeploy the functions that bind the secret.
| Secret | Last rotated | Versions | Status |
|---|---|---|---|
| ANTHROPIC_API_KEY | — | — | loading… |
| OPENAI_API_KEY | — | — | loading… |
| GOOGLE_AI_KEY | — | — | loading… |
| GITHUB_TOKEN | — | — | loading… |
Platform integrations
Operator-shared platform config under platform/integrations/* — edited here, consumed by every studio. Secrets (e.g. GitHub token) live in Secret Manager; only public IDs/handles are stored in the DB.
Token lives in Secret Manager (GITHUB_TOKEN) — see Vendor secrets above. Only the repo coordinates are stored here.