# Google Workspace (gws)

## Permissions

### Read freely (no permission needed)
- Gmail: read, search, list emails
- Calendar: check events, upcoming schedule, free/busy
- Drive: list and read files

### Ask first
- Gmail: sending, replying, drafting emails
- Calendar: creating, editing, deleting events
- Drive: editing, moving, uploading files

### Never without explicit permission
- Deleting anything (emails, events, files)
- Sending emails on behalf of the user
- Sharing files/folders with others
- Changing account settings

## Quick Reference

Gmail:
  gws gmail users messages list --params '{"userId": "me", "maxResults": 10}'
  gws gmail users messages get --params '{"userId": "me", "id": "<id>", "format": "metadata", "metadataHeaders": ["Subject", "From", "Date"]}'
  gws gmail users messages get --params '{"userId": "me", "id": "<id>", "format": "full"}'

Calendar:
  gws calendar events list --params '{"calendarId": "primary", "timeMin": "<RFC3339>", "timeMax": "<RFC3339>", "singleEvents": true, "orderBy": "startTime"}'

## Browser Use

API key stored in ~/.bashrc as BROWSER_USE_API_KEY
Endpoint: POST https://api.browser-use.com/api/v3/sessions
Auth header: X-Browser-Use-API-Key

Use for web tasks that need a real browser (login flows, scraping, form filling).
Always ask before using on sites that require the user's credentials.