Status

BLOCKED-ENV — Day 5 consecutive. Same invalid_grant: Token has been expired or revoked against the same refresh token in google-ads.yaml (mtime unchanged at 2026-04-24 20:00:55 UTC).

• Customer: 3813916687 (SAIL)
• MCC: 8676599345
• Campaign: SAIL - Car Accidents 2026 (23723841732)
• Window attempted: LAST_7_DAYS (would auto-widen to LAST_35_DAYS on rotation)
• adspirer not used
• google-ads SDK 30.1.0; api version v21
• GAQL queries executed: 0 (auth probe failed before query phase)
• Mutations: 0

What changed since Day 4

Nothing. yaml mtime, refresh token, and vault.env (still missing) are identical to yesterday's snapshot. The only change is the day count: Day 4 → Day 5.

Single-step unblock for Sam

1. Rotate the OAuth refresh token in Google Cloud Console (project-claude-489923).
2. Update sail-googleads/google-ads.yaml refresh_token field.
3. Mirror the new value into ~/Documents/Projects/.credentials/vault.env (file does not exist; create it).
4. Optional but recommended: change the OAuth client to Production publishing status to remove the 7-day refresh-token expiry.

QA recommendations (4-way MC, A is recommended)

Q1-2026-04-29: How should Day 5+ blocked-state runs behave?

• A. (Recommended) Suspend the daily gads-search-term-review cron immediately; replace with a tiny gads-credential-health-monitor cron that only runs the auth probe and pings Sam if it succeeds. Lowest noise; auto-resumes once auth recovers.