ptd-budget
The PTD Group budget, over A2A only. This dashboard renders no figures — the sheet pipeline is not built yet.
Google service account
Update credentials
Paste the whole service-account key JSON from GCP. It is validated before anything is written, stored at mode 600 in the data directory, and never echoed back — only the resulting identity is shown. No copy of the previous key is kept: a stray copy of a private key is worse than re-downloading one from GCP.
Model
Set credentials
Stored under data/ at mode 600, never echoed back, and in force from the next request — nothing restarts. This overrides the environment; clearing it falls back to the environment rather than to an outage. The first real call is the proof a credential works: this service cannot verify one without spending money.
Authorization
Budget sheet
Access log
The only record that a budget read happened — auth-service writes nothing when a token is used. Refusal reasons are shown here and are never returned to the caller.