Campaign ops for agencies and advertisers.

Ops tools, not autopilot. No spend without an explicit confirm.

• Developer token is Test Account access until Basic Access is approved. Production MCC reads can fail or be limited.
• New Search, Display, Performance Max, Demand Gen, Video, Shopping, App, Hotel, Local, and Local Services campaigns are created PAUSED. Dry-run (validateOnly) is the default and preferred path.
• No enable/go-live action. A paused campaign with a budget still cannot spend until separately enabled outside this app.
• Listings sync is read-only. It pulls campaign / ad group / ad / keyword snapshots into Neon and never enables, unpauses, or mutates live Ads status.
• Metrics sync is read-only. It pulls campaign budget and spend snapshots into Neon and never enables, unpauses, mutates status, or spends.
• Safe campaign edit is validateOnly first. Apply requires typing EDIT SAFE. Name, budget, bids, and targeting-safe fields only. Status ENABLED / enable / unpause / go-live are refused.
• Import copies a cached Google campaign into an Adrunr create-type draft. Dry-run preview is the default. Import never enables, unpauses, or applies live Ads — imported drafts stay on the PAUSED create path.
• Performance reports are read-only. They roll up cached CampaignMetricSnapshot rows or a googleAds:search and never enable, unpause, mutate live Ads, or spend. Cached ENABLED is a snapshot only.
• GA4 Connect is advertiser OAuth. Adrunr lists properties the connected user can access, binds one google_analytics ExternalAccount, and runs a read-only 7-day sessions report. Key events stay Coming soon. No spend.
• Pause and Delete confirms require typing PAUSE CAMPAIGN or DELETE CAMPAIGN. Live mutate is gated (Coming soon — use Google Ads). Adrunr will not enable later. Re-enable only in Google Ads.