gws-shared

Shared authentication, CLI syntax, and output formatting patterns for gws Google Workspace commands. The gws binary must be on $PATH . See the project README for install options. - Supports browser-based OAuth login and service account authentication via GOOGLE_APPLICATION_CREDENTIALS - Global flags enable output format selection (JSON, table, YAML, CSV), dry-run validation, and PII screening via Model Armor - Method flags cover parameterized queries, request bodies, file uploads, multipart operations, and automatic pagination with configurable delays - Built-in security guardrails prevent secret leakage and require user confirmation before write/delete operations - Shell-specific guidance for zsh history expansion and JSON quoting to avoid common command-line parsing errors - Never output secrets (API keys, tokens) directly - Always confirm with user before executing write/delete commands - Prefer --dry-run for destructive operations - Use --sanitize for PII/content safety screening - zsh ! expansion: Sheet ranges like Sheet1!A1 contain ! which zsh interprets as history expansion. Use double quotes with escaped inner quotes instead of single quotes: # WRONG (zsh will mangle the !) gws sheets +read --spreadsheet ID --range 'Sheet1!A1:D10' # CORRECT gws sheets +read --spreadsheet ID --range "Sheet1!A1:D10" - JSON with double quotes: Wrap --params and --json values in single...