{"name":"winfakt-dashboard-auth","role":"OAuth proxy for the Winfakt Dashboard macOS app","endpoints":{"POST /login-start":"returns Google auth URL + state","GET  /oauth-callback":"pm7-auth → app custom-scheme bridge (302)","POST /login-exchange":"code + state → JWT + refresh token + user + permissions","POST /refresh":"refreshToken → new access token","POST /me":"Authorization: Bearer → user info + permissions","POST /logout":"refreshToken → revoke","GET  /stat/:feature":"Authorization: Bearer → server-side permission check → forwards to data worker"}}