Aurora G&SConsole

SDN Sanctions List

The reference data an OFAC/SDN screening runs against. Download the current SDN.CSV, ALT.CSV, and (optionally) ADD.CSV from OFAC's SDN list page and upload them here. Each upload creates a new, permanent snapshot — nothing is ever overwritten or deleted, so a past screening can always be traced back to the exact list it ran against.

Users Import CSV + Quick lead + Add user

Pending customers

One queue for every human who still needs an account. Resolve each row into an existing account or a new one (no email required — adding it later activates their sign-in), or dismiss junk with a reason. MGC winners land here automatically when their bidder isn't linked yet.

Sell access requests

A complete profile no longer unlocks selling by itself — a customer must request access and an admin must approve it. Pending requests are listed oldest first. Approval-email delivery and any ambiguous SMTP outcomes are controlled here too.

Account linking

Connects transactional submissions (sell, pay‑me, shipping) to a customer account — auto‑linking confident email/phone matches and creating an account where none exists (no email is ever sent). Anything ambiguous is queued below for a decision. Re-runnable and idempotent.

Shipping info → accounts

Copies each customer's latest shipping‑form submission onto their account (shipping address + delivery preferences) so MGC and BIN packing slips print what the customer typed. Submissions from signed‑in customers sync automatically; guest and older submissions are only applied here (or via the review queue), since a public form that merely matches a customer's email shouldn't silently change their address. By default only accounts missing a shipping address are filled — tick Overwrite to replace existing addresses with the latest form. Run Account linking first so submissions have an account to sync to.

Form submissions

In-house inbox for every form on the site. Submissions land here (and as a JSON file on the server) — the legacy Google Sheet is no longer written to.

Inbox

Email conversations with customers, threaded per person. Replies send from the office mailbox and land back here; the Gmail inbox stays the untouched archive (attachments open there).

Dealer offsets (BID/ASK)

Manual spot overrides

Enable a row to pin a metal's spot to your manual price. Disable to return to upstream live spot. Use sparingly.

Calculator defaults

Global defaults per metal. Customers can override these on their own account via /settings.html.

Purity tables

Product catalogs

Payment preferences — how I pay customers

Drives the customer’s “How I prefer to be paid” dropdown on the account page. Adding a label here makes it selectable; removing it (or unchecking Active) hides it from the dropdown. Customers who previously chose a removed label keep that value until they edit their profile.

Trading calendar

Normal Globex hours are automatic — you only need to add exceptions here (early closes, holidays, special opens). Times are Central Time (CT).

Set / correct a session lock

Use this to lock a session that already closed (e.g. an early close), or to correct a previously recorded lock.

System controls

Staff access — clerk role

Search for a customer account and grant or revoke clerk access to the staff console. Granting requires a typed confirmation. (Admins are managed separately.)

Staff access — manager role

Search for an account and grant or revoke manager access — everything in this console except this Config tab, the Email Config tab, and API Clients. Granting requires a typed confirmation. (Admins are managed separately.)

Staff access — compliance role

Search for an account and grant or revoke compliance access — the full Compliance tab (OFAC/SDN log, 8300 filings, AML monthly reviews, pre-audit reviews) plus the Users tab in view-only + OFAC-screening form. No other tab. Granting requires a typed confirmation. (Admins are managed separately.)

Site configuration

The sections below are admin-managed and saved to the database when you click Save.

Polling intervals & site settings

Price feed provider (owner only)

Host and API key for the upstream metals-price feed. Switch providers (e.g. while WhosDavid is in maintenance) without a redeploy — both share the same /v1/latest contract. The saved key is never shown; leave the key field blank to keep it unchanged.

MGC Live

MGC Live auction listings are managed in the dedicated MGC tab above.

API clients

Issue and manage API keys for the read-only /v1 API. Each key carries scopes: downstream:read (the default) grants the five data endpoints (/v1/latest, /v1/change, /v1/locks, /v1/mgc/listings, /v1/mgc/stats); office:read grants the Office awareness API (/v1/office/events, /v1/office/state), which carries no customer data; office:records grants the Office records API (/v1/office/customers, /v1/office/records, /v1/office/documents) and is the only scope that reaches customer names, contact details, addresses, history, and internal notes — every read is logged per record; office:replica grants the Office replica API (/v1/office/replica/*), which downloads the nightly sanitized database snapshot — customer display names and the whole transaction history in one file, to a device outside this server's deletion machinery. Tick it only for the office device, and only if that device is disk-encrypted; every download is logged. A key is shown once at creation — copy it then; it is stored only as a hash and can never be retrieved again. Revoke stops a key immediately (rotate = revoke + create).