Secrets status

Secrets stay in .env / GOOGLE_SECRETS_DIR. Never stored in DB.

Google login redirect URI (add in Google Cloud Console):

Ads link redirect URI:

Users & roles

admin · manager · sales · viewer — each unlocks different CRM tabs/APIs.

New user email Name Role viewer sales manager admin Password (optional if Google-only)

Google Ads / GA4 link

1) Env must have developer token + OAuth client id/secret.
2) Click Link Google Ads + GA4 (creates token.json on volume).
3) Then Sync Google now.

When to poll Google Ads Sync every N hours (0 = disable schedule) Days of history per sync Sync enabled Yes No Lead AI verify interval (minutes)

Account IDs Google Ads customer ID Login / MCC customer ID GA4 property ID

Daily manager PDF / Gmail

Weekly tasks · pacing · Ads Editor CSV

Last sync