2 commits

Author	SHA1	Message	Date
CRT	a108aae53f	mcp --http: --broker-profiles (store keys from the broker vault, memory only), --read-only, project by folder name under the roots	2026-10-29 18:38:11 +07:00
CRT	2c5e30090f	credential broker: Play tokens from POST /api/google/token (cached, single flight, local key fallback), grants and APIs per package in validate, Play write preflight, apps check and the desktop Accounts view; Google 403 names the API or grant, no retry	2026-10-25 22:51:32 +07:00