Operator Portal
Dashboards, governance and RBAC administration stay behind authenticated operator routes.
Portal Session
Browser signs in with Google, then exchanges id_token for a same-origin VIDRAI BFF session cookie.
{\n "status": "anonymous"\n}Operator API Surface
/api/app/overview/api/app/governance/api/app/rbac