refactor(adk): modernize run-with-google-adk to ADK v2 package with CLI and FastAPI

.gitignore

@@ -184,9 +184,9 @@ python-sdk/
 secops-wrapper/
 
 # integration test auth config
-config.py
-llm.py
-config.json
+/config.py
+/llm.py
+/config.json
 
 # Firebase Studio
 .idx/

README.md

@@ -164,9 +164,24 @@ The MCP servers from this repo can be used with the following clients
 
 The configuration for Claude Desktop and Cline is the same (provided below for [uv](#using-uv-recommended) and [pip](#using-pip)).  We use the stdio transport.
 
-### Using the prebuilt Google ADK agent as client
+### Using the Google ADK Autonomous SOC Agent
 
-Please refer to the [README file](./run-with-google-adk/README.md) for both - locally running the prebuilt agent and [Cloud Run](https://cloud.google.com/run) deployment.
+The repository includes a prebuilt Autonomous Security Operations Center (SOC) Agent powered by Google ADK v2 and the Model Context Protocol in [`run-with-google-adk`](./run-with-google-adk/README.md).
+
+It can be run locally via an interactive CLI REPL or launched as a FastAPI service for Google Cloud Run:
+
+```bash
+cd run-with-google-adk
+cp sample.env .env
+
+# Interactive terminal investigation REPL
+uv run mcp-security-agent chat
+
+# Web UI and Cloud Run REST API server
+uv run mcp-security-agent serve --port 8080
+```
+
+For full setup, architecture details, and Cloud Run deployment guides, see the [ADK Agent Guide](./run-with-google-adk/README.md).
 
 ## MCP Client Config Locations
 

docs/development_guide.md

@@ -11,6 +11,10 @@ mcp-security/
 ├── docs/                 # Documentation
 │   ├── servers/          # Server-specific documentation
 │   └── img/              # Images for documentation
+├── run-with-google-adk/   # Autonomous SOC Agent (Google ADK v2 & MCP)
+│   ├── src/              # Package source (mcp_security_agent)
+│   ├── static/           # Web UI frontend assets
+│   └── tests/            # Hermetic unit test suite
 ├── server/               # Server implementations
 │   ├── gti/              # Google Threat Intelligence server
 │   ├── scc/              # Security Command Center server

docs/index.md

@@ -25,11 +25,12 @@ If you're new to this project, we recommend starting with the [Usage Guide](usag
 - **[Development Guide](development_guide.md)** - Learn how to contribute to or extend the project
 - **[GitHub Repository](https://github.com/google/mcp-security)** - Access the project's source code and contribute.
 
-## MCP Servers
+## MCP Servers & Agents
 
-Each server provides different capabilities:
+Each component provides different capabilities:
 
 - [**Remote MCP Server**](remote_server.md) - Fully managed, enterprise-ready MCP server for Google SecOps (Recommended)
+- [**Autonomous SOC Agent (Google ADK v2)**](../run-with-google-adk/README.md) - Prebuilt autonomous security operations agent with CLI REPL, FastAPI server, and native MCP multi-transport
 
 - [Google Threat Intelligence (GTI) Server](servers/gti_mcp.md) - Access threat intelligence about IoCs, malware, and threat actors
 - [Security Command Center (SCC) Server](servers/scc_mcp.md) - Manage cloud security posture and vulnerabilities