ScopeHold App
Sign in and land in the first live MVP dashboard.
This milestone is intentionally narrow: authenticate with Google, create a workspace, create a project, and confirm the shell is using real data.
Shared secret custody for humans and agents.
Real session cookies and hosted database state.
Thin app flow now, deeper secret management next.
Authentication
Continue with Google
Google redirects to the API callback, the API issues the session cookie, and then you return to the dashboard.
Local dev redirect: http://localhost:4000/auth/google/callback