Settings and connections
What a deployment is connected to, and the settings that control sign-in, the model and the free-tier budget.
| Setting | Where | Effect |
|---|---|---|
| MANIFEST_OAUTH_CLIENT_ID | Repository variable | The Google sign-in client. Without it the deployment is read-only. |
| MANIFEST_ALLOWED_EMAILS | Repository variable | Comma-separated addresses that may start runs and decide rules. |
| gemini-api-key | Secret Manager | Used by live runs only, inside the migration job. Never in code or in the API. |
| Model | gemini-3.8-flash | Set per run with MANIFEST_MODEL. |
| Free-tier share | 20% of each limit | The migration job may use 48,000 vCPU-seconds a month. The Settings screen shows this month's use. |