@joe-broadhead/opencode-gws 0.0.6 → 0.0.8

package/CHANGELOG.md

@@ -2,6 +2,30 @@
 
 All notable changes to this project are documented here. The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and versions follow [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.0.8] - 2026-11-06
+
+### Fixed
+
+- The `/connect` sign-in mark on an account now clears. The plugin read the mark back from
+  `integration.connection.active`, which returns the credential without its status, so it never saw its own report: after
+  Google rejected a sign-in, the account kept asking for a new one in `/gws-status`, the status RPC and `gws_status` once
+  it worked again. It now reads the status from `integration.get`, which projects it.
+
+## [0.0.7] - 2026-11-05
+
+### Added
+
+- Status names any other skill that tells agents to run `gws` in a shell, such as the gws CLI's own `gws-*` skills, which lead around the plugin's plans, approvals and policy. A skill counts when a line in one of its code blocks, or an inline code span, starts with `gws ` and a word (`gws gmail +triage`); prose that only names gws does not. They appear in the status RPC's new `shellSkills`, in a **Shell gws skills** row in `/gws-status` and the dialog, and in a next step to remove each one or move it out of its skills folder.
+
+### Changed
+
+- When no account here can use an admin-only service such as `admin-reports` (the `default` account leaves it out), its refusal's next step and `gws_catalog`'s `unavailable` reason now say the same thing: only a Workspace admin's account with the needed privilege can use it, so add a separate account alias for that admin with `enabledServices` including the service, not the service to an existing account. Before, the next step said to add the service to the plugin's services or to this account, which for anyone who isn't an admin ends in `ADMIN_PRIVILEGE_REQUIRED`.
+- `opencode-gws` says a script creates its own session and keeps its id, never one found through history or a session list, and that an answer that only shows a preview names the tool that would commit it.
+
+### Fixed
+
+- A `fields` mask whose parentheses don't balance is refused with `FIELDS_INVALID`, which names the extra `)` or the unclosed `(`, before gws runs. Google's own error for it names no argument.
+
 ## [0.0.6] - 2026-11-05
 
 ### Fixed

package/README.md

@@ -114,7 +114,7 @@ Members then only run `/connect`, choose Google Workspace, and pick an access le
 | `POLICY_DENIED` | A policy rule or the admin gate refused the call. A deny is final. |
 | `RECIPIENTS_UNKNOWN` | A recipient rule applies, and the plugin could not tell who the send or share reaches. |
 
-A skill of your own named `opencode-gws` or `opencode-gws-recipes` (for example in `~/.claude/skills`) hides the plugin's skill of that name; `/gws-status` names it under **Hidden skills**, and the fix is to move or rename it.
+A skill of your own named `opencode-gws` or `opencode-gws-recipes` (for example in `~/.claude/skills`) hides the plugin's skill of that name; `/gws-status` names it under **Hidden skills**, and the fix is to move or rename it. A skill that tells agents to run `gws` in a shell, such as the gws CLI's own `gws-*` skills, leads them around the plugin's plans and approvals; `/gws-status` names each one under **Shell gws skills**, and the fix is to remove it or move it out of its skills folder.
 
 Each OpenCode server keeps a private work folder, `$TMPDIR/opencode-gws-XXXXXX`, and removes it when it stops. A server that stopped without closing leaves its folder behind; the next start removes such folders once they are a day old and their process is gone.
 

package/dist/index.js

@@ -6571,6 +6571,10 @@ var ErrorCode = {
     meaning: "The request is malformed: a schema violation, a field helpers do not take, a missing field mask on list or search, a relative path, a download on gws_read, or arguments gws rejected.",
     next: "Fix the request as the message says; gws_schema shows the parameters and request body."
   },
+  FIELDS_INVALID: {
+    meaning: "The fields mask's parentheses do not balance, so gws was not called.",
+    next: "Give each '(' one ')' after it, or write a single path with slashes, such as body/content(paragraph/elements/textRun/content), then retry."
+  },
   POLICY_DENIED: {
     meaning: "Plugin policy refused the call: a deny rule, a category the plugin never runs (deploy, watch), the service, recipients, public sharing, the admin gate, or a path outside the allowed roots. A deny is final.",
     next: "Do not work around it; tell the user, who can change the plugin policy."
@@ -7272,6 +7276,223 @@ function helperAdapter(id) {
   return ADAPTERS.get(id);
 }
 
+// src/domain/result.ts
+function isApiError(value) {
+  if (Array.isArray(value)) return value.some(isApiError);
+  if (!value || typeof value !== "object") return false;
+  const record3 = value;
+  return "error" in record3 && record3.error !== null && typeof record3.error === "object";
+}
+function parseJson(text4) {
+  const lines = text4.split("\n");
+  const start2 = lines.findIndex((line) => /^[[{]/.test(line.trim()));
+  if (start2 < 0) return void 0;
+  const candidate = lines.slice(start2).join("\n").trim();
+  try {
+    return JSON.parse(candidate);
+  } catch {
+    const parsed = [];
+    for (const line of lines.slice(start2)) {
+      const value = line.trim();
+      if (!/^[[{]/.test(value)) continue;
+      try {
+        parsed.push(JSON.parse(value));
+      } catch {
+      }
+    }
+    return parsed.length > 0 ? parsed : void 0;
+  }
+}
+function inlineCap(maxInlineBytes, mode, requested) {
+  const base2 = mode === "full" ? Math.max(maxInlineBytes, 5 * 1024 * 1024) : maxInlineBytes;
+  return requested === void 0 ? base2 : Math.min(base2, requested);
+}
+function parseResult(result, options) {
+  const text4 = result.stdout.toString("utf8");
+  const parsed = parseJson(text4);
+  const serialized = parsed === void 0 ? text4 : JSON.stringify(parsed);
+  const bytes2 = Buffer.byteLength(serialized);
+  const cap = inlineCap(options.maxInlineBytes, options.mode, options.requestedInlineBytes);
+  const truncated = bytes2 > cap;
+  const empty = text4.trim().length === 0;
+  return {
+    // A successful DELETE commonly returns 204 with no body. Empty output
+    // with exit 0 is success; non-JSON text is not a JSON result.
+    ok: result.exitCode === 0 && (empty || parsed !== void 0 && !isApiError(parsed)),
+    data: parsed,
+    raw: parsed === void 0 ? text4.slice(0, cap) : void 0,
+    truncated,
+    diagnostics: { exitCode: result.exitCode, durationMs: result.durationMs, bytes: bytes2 }
+  };
+}
+function withoutSavedBody(data, next) {
+  if (!data || typeof data !== "object" || Array.isArray(data)) return data;
+  const record3 = data;
+  const keys = Object.keys(record3);
+  if (typeof record3["saved_file"] !== "string" || typeof record3["bytes"] !== "number" || record3["status"] !== "success") return data;
+  if (!keys.every((key) => ["bytes", "mimeType", "saved_file", "status"].includes(key))) return data;
+  if (record3["bytes"] === 0) return "";
+  return {
+    ...typeof record3["mimeType"] === "string" ? { mimeType: record3["mimeType"] } : {},
+    bytes: record3["bytes"],
+    saved: false,
+    ...next ? { next } : {}
+  };
+}
+function itemKey(page2) {
+  if (!page2 || typeof page2 !== "object" || Array.isArray(page2)) return void 0;
+  const record3 = page2;
+  if (Array.isArray(record3["items"])) return "items";
+  const arrays = Object.keys(record3).filter((key) => Array.isArray(record3[key]));
+  return arrays.length === 1 ? arrays[0] : void 0;
+}
+function capPageItems(data, maxItems) {
+  const pages = data === void 0 ? [] : Array.isArray(data) ? data : [data];
+  const keys = pages.map((page2) => itemKey(page2) ?? (isEmptyPage(page2) ? null : void 0));
+  if (keys.some((key) => key === void 0)) return { data: pages, pages: pages.length, capped: false };
+  const kept = [];
+  let items = 0;
+  let capped = false;
+  for (const [index2, page2] of pages.entries()) {
+    if (items >= maxItems) {
+      capped = true;
+      break;
+    }
+    const key = keys[index2];
+    if (!key) {
+      kept.push(page2);
+      continue;
+    }
+    const record3 = page2;
+    const list = record3[key];
+    const room = maxItems - items;
+    if (list.length > room) {
+      const { nextPageToken: _dropped, ...rest } = record3;
+      kept.push({ ...rest, [key]: list.slice(0, room) });
+      items += room;
+      capped = true;
+      break;
+    }
+    kept.push(page2);
+    items += list.length;
+  }
+  return { data: kept, pages: kept.length, items, capped };
+}
+function isEmptyPage(page2) {
+  if (!page2 || typeof page2 !== "object" || Array.isArray(page2)) return false;
+  return !Object.values(page2).some(Array.isArray);
+}
+function redactDryRun(value) {
+  if (Array.isArray(value)) return value.map(redactDryRun);
+  if (value && typeof value === "object") {
+    const out = {};
+    for (const [key, child] of Object.entries(value)) {
+      if (/^(body|raw|content)$/i.test(key)) out[key] = "[redacted]";
+      else out[key] = redactDryRun(child);
+    }
+    return out;
+  }
+  return value;
+}
+function apiErrorOf(result, parsed) {
+  const data = parsed ? parsed.data : parseJson(result.stdout.toString("utf8"));
+  const found = Array.isArray(data) ? data.find(isApiError) : data;
+  if (!isApiError(found)) return void 0;
+  return found.error;
+}
+function stderrText(result) {
+  return result.stderr.toString("utf8").split("\n").filter((line) => line.trim() && !/^Using keyring backend:/i.test(line)).join("\n").trim();
+}
+var EXIT = { auth: 2, validation: 3, discovery: 4, internal: 5 };
+var SCOPE_REASONS = /* @__PURE__ */ new Set(["ACCESS_TOKEN_SCOPE_INSUFFICIENT", "insufficientPermissions"]);
+var PRIVILEGE_REFUSALS = /\bnot authori[sz]ed to (?:read|access|view|list|use|manage|perform)\b|\bcaller does not have access to the customers? reporting data\b/i;
+function privilegeRefused(result, service, parsed) {
+  if (!isAdminService(service)) return false;
+  if (result.timedOut || result.outputCapped || result.exitCode === 0 || result.exitCode === EXIT.auth) return false;
+  const error2 = apiErrorOf(result, parsed);
+  if (error2?.code !== void 0 && error2.code !== 401 && error2.code !== 403) return false;
+  const text4 = [error2?.message, stderrText(result)].filter(Boolean).join("\n");
+  return !/invalid_grant/i.test(text4) && PRIVILEGE_REFUSALS.test(text4);
+}
+function isAdminService(service) {
+  return service.startsWith("admin-");
+}
+var ADMIN_PRIVILEGES = { "admin-reports": "Reports" };
+function privilegeName(service) {
+  const name = service ? ADMIN_PRIVILEGES[service] : void 0;
+  return name ? `the ${name} privilege` : "the admin privilege it needs";
+}
+function adminServiceStep(service) {
+  return `Only a Workspace admin's account with ${privilegeName(service)} can use ${service}: the user adds a separate account alias for that admin with enabledServices ["${service}"], not the service to an existing account, and signs in to it from /connect.`;
+}
+function adminAccountStep(account2, service) {
+  return `add a separate account alias for a Workspace admin who has ${privilegeName(service)}, with enabledServices ["${service}"], and sign in to it from /connect, or remove ${service} from accounts.${account2}.enabledServices`;
+}
+function authProblem(result, service, parsed) {
+  if (result.timedOut || result.outputCapped) return void 0;
+  if (privilegeRefused(result, service, parsed)) return void 0;
+  const error2 = apiErrorOf(result, parsed);
+  if (result.exitCode === 0 && !error2) return void 0;
+  const reasons = [error2?.reason, ...(error2?.errors ?? []).map((item) => item?.reason), ...(error2?.details ?? []).map((item) => item?.reason)];
+  const text4 = [error2?.message, error2?.status, stderrText(result)].filter(Boolean).join("\n");
+  if (reasons.some((reason) => reason !== void 0 && SCOPE_REASONS.has(reason)) || /insufficient authentication scopes|ACCESS_TOKEN_SCOPE_INSUFFICIENT/i.test(text4)) {
+    return "AUTH_SCOPE_MISSING";
+  }
+  if (error2?.code === 401 || error2?.status === "UNAUTHENTICATED" || reasons.includes("authError") || /invalid_grant|\bUNAUTHENTICATED\b|^error\[auth\]/im.test(text4)) {
+    return "AUTH_REQUIRED";
+  }
+  return void 0;
+}
+var GENERIC_REMEDIATION = {
+  signIn: "sign in to the account again",
+  consent: "sign in again and grant the scope this operation needs",
+  privilege: "add a separate account alias for a Workspace admin who has the admin privilege this operation needs, and sign in to it, or remove the service from enabledServices"
+};
+var DISABLED_REASONS = /* @__PURE__ */ new Set(["accessNotConfigured", "SERVICE_DISABLED"]);
+var CONSOLE_URL = /https:\/\/console\.(?:developers|cloud)\.google\.com\/[^\s"'<>)]+/;
+function disabledApi(result, parsed) {
+  const error2 = apiErrorOf(result, parsed);
+  const reasons = [error2?.reason, ...(error2?.errors ?? []).map((item) => item?.reason), ...(error2?.details ?? []).map((item) => item?.reason)];
+  const text4 = [error2?.message, stderrText(result)].filter(Boolean).join("\n");
+  if (!reasons.some((reason) => reason !== void 0 && DISABLED_REASONS.has(reason)) && !/accessnotconfigured|has not been used|is disabled/i.test(text4)) {
+    return void 0;
+  }
+  const enableUrl = (typeof error2?.enable_url === "string" && CONSOLE_URL.test(error2.enable_url) ? error2.enable_url : CONSOLE_URL.exec(text4)?.[0])?.replace(/[.,;]+$/, "");
+  const project = (enableUrl ? /[?&]project=([\w.:-]+)/.exec(enableUrl)?.[1] : void 0) ?? /\bin project ([\w.:-]+)/.exec(text4)?.[1];
+  return { ...enableUrl ? { enableUrl } : {}, ...project ? { project } : {} };
+}
+function processError(result, parsed, service, remediation = GENERIC_REMEDIATION) {
+  if (result.timedOut) return new GwsError("TIMEOUT", `gws did not finish within the configured execution.timeoutMs (${result.durationMs}ms elapsed)`);
+  if (result.outputCapped) return new GwsError("OUTPUT_LIMIT", "gws output exceeded execution.maxStdoutBytes/maxStderrBytes; narrow fields or pagination");
+  const stderr = stderrText(result);
+  const payload = apiErrorOf(result, parsed);
+  const message = payload?.message || stderr || "gws command failed";
+  if (privilegeRefused(result, service, parsed)) {
+    return new GwsError(
+      "ADMIN_PRIVILEGE_REQUIRED",
+      `Google accepted the sign-in but refused the call, because the account lacks a Workspace admin privilege; signing in again as the same account cannot help (gws: ${message.slice(0, 300)})`,
+      { next: `${remediation.privilege.charAt(0).toUpperCase()}${remediation.privilege.slice(1)}.` }
+    );
+  }
+  const problem = authProblem(result, service, parsed) ?? (result.exitCode === EXIT.auth ? "AUTH_REQUIRED" : void 0);
+  if (problem === "AUTH_SCOPE_MISSING") {
+    return new GwsError("AUTH_SCOPE_MISSING", `the credential lacks a scope for this operation; ${remediation.consent} (gws: ${message.slice(0, 300)})`);
+  }
+  if (problem === "AUTH_REQUIRED") {
+    return new GwsError("AUTH_REQUIRED", `the Google Workspace sign-in is missing or no longer valid; ${remediation.signIn} (gws: ${message.slice(0, 300)})`);
+  }
+  const disabled = disabledApi(result, parsed);
+  if (disabled) {
+    const where = disabled.project ? ` for project ${disabled.project}` : "";
+    const next = disabled.enableUrl ? `Ask the user to open ${disabled.enableUrl} and enable the API${where}, then wait about a minute and retry.` : `Ask the user to enable the API${where} in the Google Cloud console, then wait about a minute and retry.`;
+    return new GwsError("API_DISABLED", message.slice(0, 500), { next, ...disabled.enableUrl ? { enableUrl: disabled.enableUrl } : {} });
+  }
+  if (result.exitCode === EXIT.validation) return new GwsError("GWS_VALIDATION_ERROR", `gws rejected the request: ${message.slice(0, 500)}`);
+  if (result.exitCode === EXIT.discovery) return new GwsError("GWS_DISCOVERY_ERROR", `gws could not load the API description: ${message.slice(0, 500)}`);
+  if (result.exitCode === EXIT.internal) return new GwsError("GWS_INTERNAL_ERROR", `gws failed: ${message.slice(0, 500)}`);
+  return new GwsError("GWS_API_ERROR", message.slice(0, 500));
+}
+
 // src/domain/manifest.ts
 var ROOT = join(dirname(fileURLToPath(new URL("./domain/manifest.js", import.meta.url).href)), "..", "..");
 var SERVICE_ALIASES = {
@@ -7413,9 +7634,7 @@ function unavailableReason(service) {
   if (DELEGATION_SERVICES.includes(service)) {
     return `Needs domain-wide delegation, which a Workspace admin sets up; then the user adds ${service} to accounts.<alias>.enabledServices and its scopes to accounts.<alias>.scopes.`;
   }
-  if (service.startsWith("admin-")) {
-    return `Needs a Workspace admin with the privilege it reads; the user adds a separate account alias for that admin with enabledServices ["${service}"].`;
-  }
+  if (isAdminService(service)) return adminServiceStep(service);
   return `Not enabled for any account; the user can add ${service} to accounts.<alias>.enabledServices.`;
 }
 function unavailableServices(tokens, only, allowed, weak) {
@@ -7959,7 +8178,7 @@ function checkHost(version2, range, allowUntested) {
 }
 
 // src/domain/version.ts
-var PLUGIN_VERSION = "0.0.6";
+var PLUGIN_VERSION = "0.0.8";
 var PLUGIN_ID = "google-workspace.gws";
 
 // src/host/agents.ts
@@ -8065,6 +8284,7 @@ var status = object2(
     accounts: { type: "array", items: account },
     auditDegraded: { type: "boolean" },
     shadowedSkills: { type: "array", items: object2({ id: text, path: text }, ["id", "path"]) },
+    shellSkills: { type: "array", items: object2({ id: text, path: text }, ["id", "path"]) },
     unguardedAgents: texts,
     permissionsBlock: text,
     nextStep: text
@@ -8094,6 +8314,10 @@ var SHADOWED_LABEL = "Hidden skills";
 function shadowedText(status2) {
   return (status2.shadowedSkills ?? []).map((skill) => `${skill.id} (hidden by ${skill.path})`).join(", ");
 }
+var SHELL_LABEL = "Shell gws skills";
+function shellText(status2) {
+  return (status2.shellSkills ?? []).map((skill) => `${skill.id} (${skill.path})`).join(", ");
+}
 var DELEGATION_LABEL = "Needs domain-wide delegation";
 function delegationText(account2) {
   const services = account2.delegationRequired ?? [];
@@ -8293,220 +8517,6 @@ var PlanStore = class {
   }
 };
 
-// src/domain/result.ts
-function isApiError(value) {
-  if (Array.isArray(value)) return value.some(isApiError);
-  if (!value || typeof value !== "object") return false;
-  const record3 = value;
-  return "error" in record3 && record3.error !== null && typeof record3.error === "object";
-}
-function parseJson(text4) {
-  const lines = text4.split("\n");
-  const start2 = lines.findIndex((line) => /^[[{]/.test(line.trim()));
-  if (start2 < 0) return void 0;
-  const candidate = lines.slice(start2).join("\n").trim();
-  try {
-    return JSON.parse(candidate);
-  } catch {
-    const parsed = [];
-    for (const line of lines.slice(start2)) {
-      const value = line.trim();
-      if (!/^[[{]/.test(value)) continue;
-      try {
-        parsed.push(JSON.parse(value));
-      } catch {
-      }
-    }
-    return parsed.length > 0 ? parsed : void 0;
-  }
-}
-function inlineCap(maxInlineBytes, mode, requested) {
-  const base2 = mode === "full" ? Math.max(maxInlineBytes, 5 * 1024 * 1024) : maxInlineBytes;
-  return requested === void 0 ? base2 : Math.min(base2, requested);
-}
-function parseResult(result, options) {
-  const text4 = result.stdout.toString("utf8");
-  const parsed = parseJson(text4);
-  const serialized = parsed === void 0 ? text4 : JSON.stringify(parsed);
-  const bytes2 = Buffer.byteLength(serialized);
-  const cap = inlineCap(options.maxInlineBytes, options.mode, options.requestedInlineBytes);
-  const truncated = bytes2 > cap;
-  const empty = text4.trim().length === 0;
-  return {
-    // A successful DELETE commonly returns 204 with no body. Empty output
-    // with exit 0 is success; non-JSON text is not a JSON result.
-    ok: result.exitCode === 0 && (empty || parsed !== void 0 && !isApiError(parsed)),
-    data: parsed,
-    raw: parsed === void 0 ? text4.slice(0, cap) : void 0,
-    truncated,
-    diagnostics: { exitCode: result.exitCode, durationMs: result.durationMs, bytes: bytes2 }
-  };
-}
-function withoutSavedBody(data, next) {
-  if (!data || typeof data !== "object" || Array.isArray(data)) return data;
-  const record3 = data;
-  const keys = Object.keys(record3);
-  if (typeof record3["saved_file"] !== "string" || typeof record3["bytes"] !== "number" || record3["status"] !== "success") return data;
-  if (!keys.every((key) => ["bytes", "mimeType", "saved_file", "status"].includes(key))) return data;
-  if (record3["bytes"] === 0) return "";
-  return {
-    ...typeof record3["mimeType"] === "string" ? { mimeType: record3["mimeType"] } : {},
-    bytes: record3["bytes"],
-    saved: false,
-    ...next ? { next } : {}
-  };
-}
-function itemKey(page2) {
-  if (!page2 || typeof page2 !== "object" || Array.isArray(page2)) return void 0;
-  const record3 = page2;
-  if (Array.isArray(record3["items"])) return "items";
-  const arrays = Object.keys(record3).filter((key) => Array.isArray(record3[key]));
-  return arrays.length === 1 ? arrays[0] : void 0;
-}
-function capPageItems(data, maxItems) {
-  const pages = data === void 0 ? [] : Array.isArray(data) ? data : [data];
-  const keys = pages.map((page2) => itemKey(page2) ?? (isEmptyPage(page2) ? null : void 0));
-  if (keys.some((key) => key === void 0)) return { data: pages, pages: pages.length, capped: false };
-  const kept = [];
-  let items = 0;
-  let capped = false;
-  for (const [index2, page2] of pages.entries()) {
-    if (items >= maxItems) {
-      capped = true;
-      break;
-    }
-    const key = keys[index2];
-    if (!key) {
-      kept.push(page2);
-      continue;
-    }
-    const record3 = page2;
-    const list = record3[key];
-    const room = maxItems - items;
-    if (list.length > room) {
-      const { nextPageToken: _dropped, ...rest } = record3;
-      kept.push({ ...rest, [key]: list.slice(0, room) });
-      items += room;
-      capped = true;
-      break;
-    }
-    kept.push(page2);
-    items += list.length;
-  }
-  return { data: kept, pages: kept.length, items, capped };
-}
-function isEmptyPage(page2) {
-  if (!page2 || typeof page2 !== "object" || Array.isArray(page2)) return false;
-  return !Object.values(page2).some(Array.isArray);
-}
-function redactDryRun(value) {
-  if (Array.isArray(value)) return value.map(redactDryRun);
-  if (value && typeof value === "object") {
-    const out = {};
-    for (const [key, child] of Object.entries(value)) {
-      if (/^(body|raw|content)$/i.test(key)) out[key] = "[redacted]";
-      else out[key] = redactDryRun(child);
-    }
-    return out;
-  }
-  return value;
-}
-function apiErrorOf(result, parsed) {
-  const data = parsed ? parsed.data : parseJson(result.stdout.toString("utf8"));
-  const found = Array.isArray(data) ? data.find(isApiError) : data;
-  if (!isApiError(found)) return void 0;
-  return found.error;
-}
-function stderrText(result) {
-  return result.stderr.toString("utf8").split("\n").filter((line) => line.trim() && !/^Using keyring backend:/i.test(line)).join("\n").trim();
-}
-var EXIT = { auth: 2, validation: 3, discovery: 4, internal: 5 };
-var SCOPE_REASONS = /* @__PURE__ */ new Set(["ACCESS_TOKEN_SCOPE_INSUFFICIENT", "insufficientPermissions"]);
-var PRIVILEGE_REFUSALS = /\bnot authori[sz]ed to (?:read|access|view|list|use|manage|perform)\b|\bcaller does not have access to the customers? reporting data\b/i;
-function privilegeRefused(result, service, parsed) {
-  if (!isAdminService(service)) return false;
-  if (result.timedOut || result.outputCapped || result.exitCode === 0 || result.exitCode === EXIT.auth) return false;
-  const error2 = apiErrorOf(result, parsed);
-  if (error2?.code !== void 0 && error2.code !== 401 && error2.code !== 403) return false;
-  const text4 = [error2?.message, stderrText(result)].filter(Boolean).join("\n");
-  return !/invalid_grant/i.test(text4) && PRIVILEGE_REFUSALS.test(text4);
-}
-function isAdminService(service) {
-  return service.startsWith("admin-");
-}
-var ADMIN_PRIVILEGES = { "admin-reports": "Reports" };
-function privilegeName(service) {
-  const name = service ? ADMIN_PRIVILEGES[service] : void 0;
-  return name ? `the ${name} privilege` : "the admin privilege it needs";
-}
-function adminAccountStep(account2, service) {
-  return `add a separate account alias for a Workspace admin who has ${privilegeName(service)}, with enabledServices ["${service}"], and sign in to it from /connect, or remove ${service} from accounts.${account2}.enabledServices`;
-}
-function authProblem(result, service, parsed) {
-  if (result.timedOut || result.outputCapped) return void 0;
-  if (privilegeRefused(result, service, parsed)) return void 0;
-  const error2 = apiErrorOf(result, parsed);
-  if (result.exitCode === 0 && !error2) return void 0;
-  const reasons = [error2?.reason, ...(error2?.errors ?? []).map((item) => item?.reason), ...(error2?.details ?? []).map((item) => item?.reason)];
-  const text4 = [error2?.message, error2?.status, stderrText(result)].filter(Boolean).join("\n");
-  if (reasons.some((reason) => reason !== void 0 && SCOPE_REASONS.has(reason)) || /insufficient authentication scopes|ACCESS_TOKEN_SCOPE_INSUFFICIENT/i.test(text4)) {
-    return "AUTH_SCOPE_MISSING";
-  }
-  if (error2?.code === 401 || error2?.status === "UNAUTHENTICATED" || reasons.includes("authError") || /invalid_grant|\bUNAUTHENTICATED\b|^error\[auth\]/im.test(text4)) {
-    return "AUTH_REQUIRED";
-  }
-  return void 0;
-}
-var GENERIC_REMEDIATION = {
-  signIn: "sign in to the account again",
-  consent: "sign in again and grant the scope this operation needs",
-  privilege: "add a separate account alias for a Workspace admin who has the admin privilege this operation needs, and sign in to it, or remove the service from enabledServices"
-};
-var DISABLED_REASONS = /* @__PURE__ */ new Set(["accessNotConfigured", "SERVICE_DISABLED"]);
-var CONSOLE_URL = /https:\/\/console\.(?:developers|cloud)\.google\.com\/[^\s"'<>)]+/;
-function disabledApi(result, parsed) {
-  const error2 = apiErrorOf(result, parsed);
-  const reasons = [error2?.reason, ...(error2?.errors ?? []).map((item) => item?.reason), ...(error2?.details ?? []).map((item) => item?.reason)];
-  const text4 = [error2?.message, stderrText(result)].filter(Boolean).join("\n");
-  if (!reasons.some((reason) => reason !== void 0 && DISABLED_REASONS.has(reason)) && !/accessnotconfigured|has not been used|is disabled/i.test(text4)) {
-    return void 0;
-  }
-  const enableUrl = (typeof error2?.enable_url === "string" && CONSOLE_URL.test(error2.enable_url) ? error2.enable_url : CONSOLE_URL.exec(text4)?.[0])?.replace(/[.,;]+$/, "");
-  const project = (enableUrl ? /[?&]project=([\w.:-]+)/.exec(enableUrl)?.[1] : void 0) ?? /\bin project ([\w.:-]+)/.exec(text4)?.[1];
-  return { ...enableUrl ? { enableUrl } : {}, ...project ? { project } : {} };
-}
-function processError(result, parsed, service, remediation = GENERIC_REMEDIATION) {
-  if (result.timedOut) return new GwsError("TIMEOUT", `gws did not finish within the configured execution.timeoutMs (${result.durationMs}ms elapsed)`);
-  if (result.outputCapped) return new GwsError("OUTPUT_LIMIT", "gws output exceeded execution.maxStdoutBytes/maxStderrBytes; narrow fields or pagination");
-  const stderr = stderrText(result);
-  const payload = apiErrorOf(result, parsed);
-  const message = payload?.message || stderr || "gws command failed";
-  if (privilegeRefused(result, service, parsed)) {
-    return new GwsError(
-      "ADMIN_PRIVILEGE_REQUIRED",
-      `Google accepted the sign-in but refused the call, because the account lacks a Workspace admin privilege; signing in again as the same account cannot help (gws: ${message.slice(0, 300)})`,
-      { next: `${remediation.privilege.charAt(0).toUpperCase()}${remediation.privilege.slice(1)}.` }
-    );
-  }
-  const problem = authProblem(result, service, parsed) ?? (result.exitCode === EXIT.auth ? "AUTH_REQUIRED" : void 0);
-  if (problem === "AUTH_SCOPE_MISSING") {
-    return new GwsError("AUTH_SCOPE_MISSING", `the credential lacks a scope for this operation; ${remediation.consent} (gws: ${message.slice(0, 300)})`);
-  }
-  if (problem === "AUTH_REQUIRED") {
-    return new GwsError("AUTH_REQUIRED", `the Google Workspace sign-in is missing or no longer valid; ${remediation.signIn} (gws: ${message.slice(0, 300)})`);
-  }
-  const disabled = disabledApi(result, parsed);
-  if (disabled) {
-    const where = disabled.project ? ` for project ${disabled.project}` : "";
-    const next = disabled.enableUrl ? `Ask the user to open ${disabled.enableUrl} and enable the API${where}, then wait about a minute and retry.` : `Ask the user to enable the API${where} in the Google Cloud console, then wait about a minute and retry.`;
-    return new GwsError("API_DISABLED", message.slice(0, 500), { next, ...disabled.enableUrl ? { enableUrl: disabled.enableUrl } : {} });
-  }
-  if (result.exitCode === EXIT.validation) return new GwsError("GWS_VALIDATION_ERROR", `gws rejected the request: ${message.slice(0, 500)}`);
-  if (result.exitCode === EXIT.discovery) return new GwsError("GWS_DISCOVERY_ERROR", `gws could not load the API description: ${message.slice(0, 500)}`);
-  if (result.exitCode === EXIT.internal) return new GwsError("GWS_INTERNAL_ERROR", `gws failed: ${message.slice(0, 500)}`);
-  return new GwsError("GWS_API_ERROR", message.slice(0, 500));
-}
-
 // src/host/commands.ts
 var COMMANDS = {
   status: { name: "gws-status", description: "Google Workspace: sign-in, access, pending plans, setup steps, and unguarded agents" },
@@ -8574,6 +8584,7 @@ function formatStatus(status2, plans = [], now = Date.now()) {
   if (setup.length > 0) lines.push(...setup, "");
   lines.push(...planLines(plans, now), "");
   if (status2.shadowedSkills?.length) lines.push(`${SHADOWED_LABEL}: ${shadowedText(status2)}`);
+  if (status2.shellSkills?.length) lines.push(`${SHELL_LABEL}: ${shellText(status2)}`);
   lines.push(`Tools: gws tools for ${status2.services.join(", ") || "no services"} (${status2.gws.version})`);
   if (status2.unguardedAgents.length === 0) {
     lines.push("Agents without default rules: none");
@@ -9443,6 +9454,15 @@ function integrationTokenProvider(ctx, config2, ids) {
     return { access: credential.access, grantedScopes: signIn.grantedScopes };
   };
 }
+async function showsNeedsAuth(ctx, integrationID, connectionID) {
+  try {
+    const { data } = await ctx.integration.get({ integrationID });
+    const shown = data.connections?.find((item) => item.type === "credential" && item.id === connectionID);
+    return shown?.type === "credential" && shown.status?.status === "needs_auth";
+  } catch {
+    return false;
+  }
+}
 function integrationConnection(ctx, ids) {
   const lifetime = new Lifecycle();
   return async (account2, signal) => {
@@ -9450,7 +9470,7 @@ function integrationConnection(ctx, ids) {
     if (!id) return { connected: false, needsAuth: false };
     const connection = await lifetime.wait(() => ctx.integration.connection.active(id), signal);
     if (!connection) return { connected: false, needsAuth: false };
-    const needsAuth = connection.status?.status === "needs_auth";
+    const needsAuth = connection.type === "credential" && await lifetime.wait(() => showsNeedsAuth(ctx, id, connection.id), signal);
     let credential;
     try {
       credential = await lifetime.wait(() => ctx.integration.connection.resolve(connection), signal);
@@ -9510,6 +9530,20 @@ function ownSkillPath(id) {
 function shadowedSkills(listed) {
   return listed.filter((skill) => SKILL_IDS.includes(skill.id) && skill.path !== ownSkillPath(skill.id)).map((skill) => ({ id: skill.id, path: skill.path }));
 }
+var SHELL_LINE = /^\s*(?:\$\s+)?gws\s+\S/;
+var SHELL_SPAN = /`gws\s+[^`\s][^`]*`/;
+function shellSkills(listed) {
+  return listed.filter((skill) => skill.path !== ownSkillPath(skill.id) && teachesShell(skill.content ?? "")).map((skill) => ({ id: skill.id, path: skill.path }));
+}
+function teachesShell(content) {
+  if (SHELL_SPAN.test(content)) return true;
+  let fenced = false;
+  for (const line of content.split(/\r?\n/)) {
+    if (/^\s*(```|~~~)/.test(line)) fenced = !fenced;
+    else if (fenced && SHELL_LINE.test(line)) return true;
+  }
+  return false;
+}
 function skillLister(ctx) {
   return async () => {
     const directory = ctx.location?.directory;
@@ -9548,11 +9582,14 @@ async function registerSkills(ctx, config2) {
 }
 
 // src/host/rpc.ts
-function nextStep(accounts, shadowed, agents) {
+function nextStep(accounts, shadowed, shell, agents) {
   const account2 = accounts.find((entry) => entry.nextStep);
   if (account2?.nextStep) return accounts.length > 1 ? `${account2.alias}: ${account2.nextStep}` : account2.nextStep;
   const [skill] = shadowed;
   if (skill) return `Move or rename the skill at ${skill.path}: its id ${skill.id} hides the plugin's own skill.`;
+  const why = "run gws in a shell, which skips plans, approvals and policy.";
+  if (shell.length === 1) return `Remove the skill at ${shell[0].path}, or move it out of its skills folder: it tells agents to ${why}`;
+  if (shell.length > 1) return `Remove the ${shell.length} skills listed under ${SHELL_LABEL}, or move them out of their skills folders: they tell agents to ${why}`;
   if (agents.length > 0) return UNGUARDED_NEXT_STEP;
   return void 0;
 }
@@ -9565,8 +9602,10 @@ function statusSource(runtime, listAgents, listSkills = async () => []) {
   return async (signal) => {
     const base2 = await runtime.status(signal);
     const agents = unguardedAgents(await runtime.wait(() => listAgents(), signal));
-    const shadowed = shadowedSkills(await runtime.wait(() => listSkills(), signal));
-    const next = nextStep(base2.accounts, shadowed, agents);
+    const skills = await runtime.wait(() => listSkills(), signal);
+    const shadowed = shadowedSkills(skills);
+    const shell = shellSkills(skills);
+    const next = nextStep(base2.accounts, shadowed, shell, agents);
     return {
       version: base2.version,
       host: base2.host,
@@ -9576,6 +9615,7 @@ function statusSource(runtime, listAgents, listSkills = async () => []) {
       accounts: base2.accounts,
       auditDegraded: base2.auditDegraded,
       ...shadowed.length > 0 ? { shadowedSkills: shadowed } : {},
+      ...shell.length > 0 ? { shellSkills: shell } : {},
       unguardedAgents: agents,
       ...agents.length > 0 ? { permissionsBlock: permissionsBlock(agents) } : {},
       nextStep: next ?? NOTHING_TO_DO
@@ -9867,7 +9907,7 @@ var COMMIT_CATEGORIES2 = [
   { category: "admin", description: "Commits one admin plan from gws_plan. Refused unless the plugin's admin setting allows the operation." }
 ];
 async function compactStatus(status2, signal) {
-  const { unguardedAgents: unguardedAgents2, permissionsBlock: _block, shadowedSkills: _shadowed, auditDegraded, ...rest } = await status2(signal);
+  const { unguardedAgents: unguardedAgents2, permissionsBlock: _block, shadowedSkills: _shadowed, shellSkills: _shell, auditDegraded, ...rest } = await status2(signal);
   const count = unguardedAgents2.length;
   return {
     ...rest,
@@ -11460,6 +11500,7 @@ function buildCommand(entry, request, config2, options) {
       { next: "Retry with fields naming only what the user needs; gws_schema shows the response fields." }
     );
   }
+  if (typeof params["fields"] === "string") checkMask(params["fields"]);
   if (request.upload && entry.httpMethod === "GET") {
     throw new GwsError("GWS_VALIDATION_ERROR", `${entry.id} is a read and cannot upload media`);
   }
@@ -11517,6 +11558,14 @@ function buildCommand(entry, request, config2, options) {
     }
   };
 }
+function checkMask(mask) {
+  let open3 = 0;
+  for (const [index2, char] of [...mask].entries()) {
+    if (char === "(") open3 += 1;
+    else if (char === ")" && --open3 < 0) throw new GwsError("FIELDS_INVALID", `'${mask}' has an extra ')' at character ${index2 + 1}`);
+  }
+  if (open3 > 0) throw new GwsError("FIELDS_INVALID", `'${mask}' leaves ${open3} '(' unclosed`);
+}
 function redactParams(params) {
   const out = {};
   for (const [key, value] of Object.entries(params)) {
@@ -11896,8 +11945,11 @@ var METHOD_FIELDS = ["params", "body", "fields", "pagination", "upload", "downlo
 var PLAN_INSTEAD = "Call gws_plan with the same request, then commit with the tool named by the plan's category.";
 var SAVE_INSTEAD = "Google answered with a body that is not JSON. To save it, plan the same request with download.path, then commit it with gws_export.";
 var ADDRESS_TTL_MS = 10 * 60 * 1e3;
-function policyError(decision, account2) {
+function policyError(decision, account2, service) {
   const detail = decision.violations.join("; ");
+  if (service && isAdminService(service) && decision.violations.includes("service-disabled")) {
+    return new GwsError(decision.code, detail, { next: adminServiceStep(service) });
+  }
   if (decision.code === "ACCOUNT_DOMAIN_UNKNOWN") {
     return new GwsError("ACCOUNT_DOMAIN_UNKNOWN", detail, {
       next: `Ask the user to set accounts.${account2}.domains to the account's email domains, or to enable Gmail, Drive or Calendar for '${account2}' so the plugin can read its address.`
@@ -11935,7 +11987,7 @@ var Operations = class {
   visible(service) {
     if (!this.runtime.isVisible(service)) {
       throw new GwsError("POLICY_DENIED", `service '${service}' is not in the model-facing services list`, {
-        next: "Tell the user; they can add the service to the plugin's services option."
+        next: isAdminService(service) ? adminServiceStep(service) : "Tell the user; they can add the service to the plugin's services option."
       });
     }
   }
@@ -11988,7 +12040,7 @@ var Operations = class {
       }
       const facts = { recipients: recipientPlan(entry.id, "read", request).known, accountDomains: this.runtime.config.accounts[request.account]?.domains };
       const decision2 = evaluatePolicy(this.runtime.config, entry, "read", request, facts);
-      if (decision2.effect === "deny") throw policyError(decision2, request.account);
+      if (decision2.effect === "deny") throw policyError(decision2, request.account, entry.service);
       return { category: "read", decision: decision2 };
     }
     const category = helper ? helperCategory(helper, request.input) : effectiveCategory(entry, request);
@@ -11997,7 +12049,7 @@ var Operations = class {
       throw new GwsError("POLICY_DENIED", `'${entry.id}' is ${category} and cannot be planned for commit`, { next: "Tell the user the plugin never runs it." });
     }
     const decision = evaluatePolicy(this.runtime.config, entry, category, request, "pending");
-    if (decision.effect === "deny") throw policyError(decision, request.account);
+    if (decision.effect === "deny") throw policyError(decision, request.account, entry.service);
     if (category === "admin" && (!this.runtime.config.admin.enabled || decision.effect !== "allow")) {
       throw new GwsError("POLICY_DENIED", "admin operations require admin.enabled, an allowed service, and a reason when one is required");
     }
@@ -12031,7 +12083,7 @@ var Operations = class {
     const target = "method" in found ? { account: account2, operation: found.method.id, service: found.method.service, entry: found.method } : { account: account2, operation: found.helper.id, service: found.helper.service, helper: found.helper };
     if (!profile.enabledServices.includes(target.service)) {
       throw new GwsError("POLICY_DENIED", `service '${target.service}' is not enabled for '${account2}'`, {
-        next: `Use an account that enables ${target.service}, or ask the user to add it to accounts.${account2}.enabledServices.`
+        next: isAdminService(target.service) ? adminServiceStep(target.service) : `Use an account that enables ${target.service}, or ask the user to add it to accounts.${account2}.enabledServices.`
       });
     }
     this.visible(target.service);
@@ -12109,7 +12161,7 @@ var Operations = class {
     const recipientsPlan = recipientPlan(entry.id, category, request);
     const facts = await this.policyFacts(resolved, category, recipientsPlan, ctx);
     const decision = evaluatePolicy(this.runtime.config, entry, category, request, facts);
-    if (decision.effect === "deny") throw policyError(decision, request.account);
+    if (decision.effect === "deny") throw policyError(decision, request.account, entry.service);
     const limits = fileLimits(decision);
     let dryRunArgv;
     let commitArgv;

package/dist/tui.js

@@ -47,6 +47,7 @@ var status = object(
     accounts: { type: "array", items: account },
     auditDegraded: { type: "boolean" },
     shadowedSkills: { type: "array", items: object({ id: text, path: text }, ["id", "path"]) },
+    shellSkills: { type: "array", items: object({ id: text, path: text }, ["id", "path"]) },
     unguardedAgents: texts,
     permissionsBlock: text,
     nextStep: text
@@ -67,11 +68,12 @@ var isRecord = (value) => typeof value === "object" && value !== null && !Array.
 var isStrings = (value) => Array.isArray(value) && value.every((entry) => typeof entry === "string");
 var optional = (value, check) => value === void 0 || check(value);
 var isText = (value) => typeof value === "string";
+var isSkills = (value) => Array.isArray(value) && value.every((skill) => isRecord(skill) && isText(skill["id"]) && isText(skill["path"]));
 function isAccount(value) {
   return isRecord(value) && isText(value["alias"]) && MODES.includes(value["mode"]) && isStrings(value["services"]) && typeof value["connected"] === "boolean" && optional(value["integrationID"], isText) && optional(value["needsAuth"], (entry) => entry === true) && optional(value["access"], (entry) => ACCESS.includes(entry)) && optional(value["clientSource"], (entry) => CLIENT_SOURCES.includes(entry)) && optional(value["grantedScopes"], isStrings) && optional(value["missingScopes"], isStrings) && optional(value["delegationRequired"], isStrings) && optional(value["nextStep"], isText);
 }
 function isStatus(value) {
-  return isRecord(value) && isText(value["version"]) && isRecord(value["host"]) && (value["host"]["version"] === null || isText(value["host"]["version"])) && isText(value["host"]["range"]) && typeof value["host"]["tested"] === "boolean" && STATES.includes(value["state"]) && isRecord(value["gws"]) && isText(value["gws"]["path"]) && isText(value["gws"]["version"]) && isStrings(value["services"]) && Array.isArray(value["accounts"]) && value["accounts"].every(isAccount) && optional(value["auditDegraded"], (entry) => typeof entry === "boolean") && optional(value["shadowedSkills"], (entry) => Array.isArray(entry) && entry.every((skill) => isRecord(skill) && isText(skill["id"]) && isText(skill["path"]))) && isStrings(value["unguardedAgents"]) && optional(value["permissionsBlock"], isText) && isText(value["nextStep"]);
+  return isRecord(value) && isText(value["version"]) && isRecord(value["host"]) && (value["host"]["version"] === null || isText(value["host"]["version"])) && isText(value["host"]["range"]) && typeof value["host"]["tested"] === "boolean" && STATES.includes(value["state"]) && isRecord(value["gws"]) && isText(value["gws"]["path"]) && isText(value["gws"]["version"]) && isStrings(value["services"]) && Array.isArray(value["accounts"]) && value["accounts"].every(isAccount) && optional(value["auditDegraded"], (entry) => typeof entry === "boolean") && optional(value["shadowedSkills"], isSkills) && optional(value["shellSkills"], isSkills) && isStrings(value["unguardedAgents"]) && optional(value["permissionsBlock"], isText) && isText(value["nextStep"]);
 }
 function connectionLabel(account2) {
   if (account2.connected) return "connected";
@@ -85,6 +87,10 @@ var SHADOWED_LABEL = "Hidden skills";
 function shadowedText(status2) {
   return (status2.shadowedSkills ?? []).map((skill) => `${skill.id} (hidden by ${skill.path})`).join(", ");
 }
+var SHELL_LABEL = "Shell gws skills";
+function shellText(status2) {
+  return (status2.shellSkills ?? []).map((skill) => `${skill.id} (${skill.path})`).join(", ");
+}
 var DELEGATION_LABEL = "Needs domain-wide delegation";
 function delegationText(account2) {
   const services = account2.delegationRequired ?? [];
@@ -338,6 +344,25 @@ function StatusBody(props) {
         });
       }
     }), null);
+    _$insert(_el$6, _$createComponent(Show, {
+      get when() {
+        return props.status.shellSkills?.length;
+      },
+      get children() {
+        return _$createComponent(Row, {
+          label: SHELL_LABEL,
+          get value() {
+            return shellText(props.status);
+          },
+          get fg() {
+            return tone("warning");
+          },
+          get muted() {
+            return muted();
+          }
+        });
+      }
+    }), null);
     _$insert(_el$6, _$createComponent(Row, {
       label: "Tools",
       get value() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@joe-broadhead/opencode-gws",
-  "version": "0.0.6",
+  "version": "0.0.8",
   "description": "Unofficial OpenCode plugin for Google Workspace (gws CLI)",
   "type": "module",
   "license": "MIT",
@@ -52,10 +52,10 @@
     "docs:coverage": "node scripts/generate-docs.mjs"
   },
   "optionalDependencies": {
-    "@joe-broadhead/opencode-gws-bin-darwin-arm64": "0.0.6",
-    "@joe-broadhead/opencode-gws-bin-darwin-x64": "0.0.6",
-    "@joe-broadhead/opencode-gws-bin-linux-arm64-gnu": "0.0.6",
-    "@joe-broadhead/opencode-gws-bin-linux-x64-gnu": "0.0.6"
+    "@joe-broadhead/opencode-gws-bin-darwin-arm64": "0.0.8",
+    "@joe-broadhead/opencode-gws-bin-darwin-x64": "0.0.8",
+    "@joe-broadhead/opencode-gws-bin-linux-arm64-gnu": "0.0.8",
+    "@joe-broadhead/opencode-gws-bin-linux-x64-gnu": "0.0.8"
   },
   "devDependencies": {
     "@babel/core": "7.29.7",

package/skills/opencode-gws/SKILL.md

@@ -39,7 +39,7 @@ If `gws_catalog` returns `unavailable`, or finds nothing for a service, this set
 ## Change: plan, then commit
 
 1. `gws_plan` with the same request shape as a read. Nothing changes yet. It returns `planId`, a redacted `preview` and `category`.
-2. Show the preview. If the user only asked to see what would happen, stop here and say nothing changed.
+2. Show the preview. If the user only asked to see what would happen, stop here: say nothing changed, and name the tool that would commit it, where the user would approve it.
 3. Commit with the tool for the plan's category, passing only `{"planId": "..."}`.
 
 | Category | Tool | Asks |
@@ -77,4 +77,4 @@ If `gws_status` shows `unguardedAgentCount` above 0, tell the user once to run `
 
 ## Scripts
 
-For a job that runs without you, such as a cron job, a script can call the RPC `google-workspace.gws.tools`. Its methods `status`, `catalog`, `schema`, `read` and `plan` take the same input as the tools, and `describe` lists them. It runs as a session that names an agent, under that agent's rules. Create the session once with `opencode api post /api/session` and a body such as `{"title":"digest","agent":"build"}`, then call `opencode api post /api/rpc/google-workspace.gws.tools/read` with `{"input": {"sessionID": "...", "input": {...}}}`. A script can plan but never commit. A call its rules would ask about is refused with `PERMISSION_DENIED`, because no one is there to answer.
+For a job that runs without you, such as a cron job, a script can call the RPC `google-workspace.gws.tools`. Its methods `status`, `catalog`, `schema`, `read` and `plan` take the same input as the tools, and `describe` lists them. It runs as a session that names an agent, under that agent's rules. Create a session for the script once with `opencode api post /api/session` and a body such as `{"title":"digest","agent":"build"}`, and keep its `data.id`. Never borrow a session found through history or a session list: the script would run as that session's agent, under its rules. Then call `opencode api post /api/rpc/google-workspace.gws.tools/read` with `{"input": {"sessionID": "...", "input": {...}}}`. A script can plan but never commit. A call its rules would ask about is refused with `PERMISSION_DENIED`, because no one is there to answer.