fix(adk): fast-follow fixes for ADK v2 CLI, MCP subprocess propagation, and credential auto-detection

.gitignore

@@ -132,8 +132,10 @@ celerybeat.pid
 *.sage.py
 
 # Environments
-.env
+.env*
+.envrc
 .venv
+.gcloud/
 env/
 venv/
 ENV/
@@ -212,4 +214,7 @@ app_data.db
 .gemini/
 
 # devcontainer
-.devcontainer/
+.devcontainer/
+
+# IDE / Project tools
+.cm_project

README.md

@@ -159,7 +159,7 @@ You can also use environment files with uvx:
 ## Client Configurations
 The MCP servers from this repo can be used with the following clients
 1. Cline, Claude Desktop, and other MCP supported clients
-2. [Google ADK(Agent Development Kit)](https://google.github.io/adk-docs/) Agents (a prebuilt agent is provided, details [below](#using-the-prebuilt-google-adk-agent-as-client))
+2. [Google ADK(Agent Development Kit)](https://google.github.io/adk-docs/) Agents (a prebuilt agent is provided, details [below](#using-the-google-adk-autonomous-soc-agent))
 3. [Google SecOps Extension](https://google.github.io/mcp-security/google_secops_extension.html) - Install our example extension for Gemini CLI to get specialized security skills (Triage, Investigate, Hunt).
 
 The configuration for Claude Desktop and Cline is the same (provided below for [uv](#using-uv-recommended) and [pip](#using-pip)).  We use the stdio transport.
@@ -172,7 +172,7 @@ It can be run locally via an interactive CLI REPL or launched as a FastAPI servi
 
 ```bash
 cd run-with-google-adk
-cp sample.env .env
+cp .env.example .env
 
 # Interactive terminal investigation REPL
 uv run mcp-security-agent chat

docs/usage_guide.md

@@ -50,7 +50,7 @@ The repository provides a prebuilt Autonomous Security Operations Center (SOC) A
 
 ```bash
 cd run-with-google-adk
-cp sample.env .env
+cp .env.example .env
 
 # Interactive terminal investigation REPL
 uv run mcp-security-agent chat

run-with-google-adk/.env.example

@@ -0,0 +1,35 @@
+# Google Cloud & LLM Settings
+GOOGLE_CLOUD_PROJECT=
+GOOGLE_CLOUD_LOCATION=us-central1
+GOOGLE_GENAI_USE_VERTEXAI=False
+GOOGLE_API_KEY=
+GOOGLE_MODEL=gemini-2.5-flash
+
+# MCP Server Enablement Flags
+# (SCC uses Google Cloud ADC. SecOps, GTI, and SOAR auto-enable when credentials below are populated.
+# You can explicitly set LOAD_*_MCP to Y or N to override auto-detection.)
+LOAD_SCC_MCP=Y
+# LOAD_SECOPS_MCP=
+# LOAD_GTI_MCP=
+# LOAD_SECOPS_SOAR_MCP=
+
+# Credentials & Service Account Impersonation
+SECOPS_SA_PATH=
+GOOGLE_APPLICATION_CREDENTIALS=
+SECOPS_IMPERSONATE_SERVICE_ACCOUNT=
+
+# Google SecOps (Chronicle SIEM) Settings - Populating enables SecOps MCP
+CHRONICLE_PROJECT_ID=
+CHRONICLE_CUSTOMER_ID=
+CHRONICLE_REGION=us
+
+# Google Threat Intelligence (GTI / VirusTotal) - Populating enables GTI MCP
+VT_APIKEY=
+
+# SecOps SOAR Settings - Populating enables SOAR MCP
+SOAR_URL=
+SOAR_APP_KEY=
+
+# Runtime Settings
+STDIO_PARAM_TIMEOUT=60.0
+MINIMAL_LOGGING=N