Settings and connections

What a deployment is connected to, and the settings that control sign-in, the model and the free-tier budget.

SettingWhereEffect
MANIFEST_OAUTH_CLIENT_IDRepository variableThe Google sign-in client. Without it the deployment is read-only.
MANIFEST_ALLOWED_EMAILSRepository variableComma-separated addresses that may start runs and decide rules.
gemini-api-keySecret ManagerUsed by live runs only, inside the migration job. Never in code or in the API.
Modelgemini-3.8-flashSet per run with MANIFEST_MODEL.
Free-tier share20% of each limitThe migration job may use 48,000 vCPU-seconds a month. The Settings screen shows this month's use.