.dev.vars.example

# Local development only. In production Clawnify injects credentials via the
# in-process CREDENTIALS binding — none of this is needed once deployed.

# ── Recommended: one org token ───────────────────────────────────────────────
# With just this set, @clawnify/connections resolves your REAL org connections
# (Meta, Google, …) over HTTP — no per-service tokens below needed. Grab it from
# the Clawnify dashboard. The org is derived from the token server-side.
# CLAWNIFY_TOKEN=clw_...

# ── OR: bare per-service tokens (fallback when CLAWNIFY_TOKEN is unset) ────────

# ── Meta Ads ────────────────────────────────────────────────────────────────
# Get from: https://developers.facebook.com/tools/explorer/
# Required permissions: ads_read
METAADS_BEARER_TOKEN=your_meta_access_token_here

# ── Google Ads ──────────────────────────────────────────────────────────────
# OAuth2 access token (refreshed by the integrations broker in production)
GOOGLEADS_ACCESS_TOKEN=your_google_oauth_access_token_here
# Developer token from your Google Ads API Center
GOOGLEADS_DEVELOPER_TOKEN=your_developer_token_here
# Manager (MCC) account ID used as login-customer-id, digits only (no dashes)
GOOGLEADS_LOGIN_CUSTOMER_ID=1234567890

# ── AI hints (optional) ───────────────────────────────────────────────────────
# When set, the dashboard upgrades heuristic issues to AI-written recommendations
# via OpenRouter. In production this is injected from the org's BYOK key.
OPENROUTER_API_KEY=your_openrouter_key_here