CRT/storebound
1
0
Fork 0
Code Issues Pull requests Releases 1 Packages 1 Activity Actions

credential broker: Play tokens from POST /api/google/token (cached, single flight, local key fallback), grants and APIs per package in validate, Play write preflight, apps check and the desktop Accounts view; Google 403 names the API or grant, no retry

Browse source
This commit is contained in:
CRTkafa 2026-10-25 22:50:52 +07:00
parent 304407e523
commit 2c5e30090f
27 changed files with 1145 additions and 43 deletions
Download patch file Download diff file Expand all files Collapse all files

2
docs/README.md
View file

@ -26,6 +26,8 @@ The [README](../README.md) is the short tour; everything in detail lives here.
- [Skills](skills.md)
- [MCP server and the desktop machine interface](mcp.md)
- [Safety model](safety.md)
- [Google access through a credential broker](credential-broker.md): Play tokens and permission checks from a server of
yours, no Google key on the machine
- [Idempotency: every write converges](idempotency.md)
- [Pitfalls: lessons from real use](pitfalls.md)