# gws — Google Workspace CLI
# Copy this file to .env and uncomment the variables you need.
# All variables are optional. See README.md for details.

# ── Authentication ────────────────────────────────────────────────
# Pre-obtained OAuth2 access token (highest priority; bypasses all credential loading)
# GOOGLE_WORKSPACE_CLI_TOKEN=

# Path to OAuth credentials JSON (user or service account)
# GOOGLE_WORKSPACE_CLI_CREDENTIALS_FILE=

# ── OAuth Client ──────────────────────────────────────────────────
# OAuth client ID and secret (alternative to saving client_secret.json)
# GOOGLE_WORKSPACE_CLI_CLIENT_ID=
# GOOGLE_WORKSPACE_CLI_CLIENT_SECRET=

# ── Configuration ─────────────────────────────────────────────────
# Override the config directory (default: ~/.config/gws)
# GOOGLE_WORKSPACE_CLI_CONFIG_DIR=

# ── Model Armor (response sanitization) ──────────────────────────
# Default Model Armor template (overridden by --sanitize flag)
# GOOGLE_WORKSPACE_CLI_SANITIZE_TEMPLATE=
# Sanitization mode: warn (default) or block
# GOOGLE_WORKSPACE_CLI_SANITIZE_MODE=warn

# ── Helpers ───────────────────────────────────────────────────────
# GCP project ID fallback for gmail watch and events subscribe (overridden by --project)
# GOOGLE_WORKSPACE_PROJECT_ID=
