Struct GoogleWorkspaceConfig 

pub struct GoogleWorkspaceConfig {
    pub enabled: bool,
    pub allowed_services: Vec<String>,
    pub allowed_operations: Vec<GoogleWorkspaceAllowedOperation>,
    pub credentials_path: Option<String>,
    pub default_account: Option<String>,
    pub rate_limit_per_minute: u32,
    pub timeout_secs: u64,
    pub audit_log: bool,
}

Google Workspace CLI (gws) tool configuration ([google_workspace] section).

Defaults

• enabled: false (tool is not registered unless explicitly opted-in).
• allowed_services: empty vector, which grants access to the full default service set: drive, sheets, gmail, calendar, docs, slides, tasks, people, chat, classroom, forms, keep, meet, events.
• allowed_operations: empty vector, which preserves the legacy behavior of allowing any resource/method under the allowed service set.
• credentials_path: None (uses default gws credential discovery).
• default_account: None (uses the gws active account).
• rate_limit_per_minute: 60.
• timeout_secs: 30.
• audit_log: false.

Compatibility

Configs that omit the [google_workspace] section entirely are treated as GoogleWorkspaceConfig::default() (disabled, all defaults allowed). Adding the section is purely opt-in and does not affect other config sections.

Rollback / Migration

To revert, remove the [google_workspace] section from the config file (or set enabled = false). No data migration is required; the tool simply stops being registered.

Fields

enabled: bool

Enable the google_workspace tool. Default: false.

allowed_services: Vec<String>

Restrict which Google Workspace services the agent can access.

When empty (the default), the full default service set is allowed (see struct-level docs). When non-empty, only the listed service IDs are permitted. Each entry must be non-empty, lowercase alphanumeric with optional underscores/hyphens, and unique.

allowed_operations: Vec<GoogleWorkspaceAllowedOperation>

Restrict which resource/method combinations the agent can access.

When empty (the default), all methods under allowed_services remain available for backward compatibility. When non-empty, the runtime denies any (service, resource, sub_resource, method) combination that is not explicitly listed. sub_resource is optional per entry: an entry without it matches only 3-segment gws calls; an entry with it matches only calls that supply that exact sub_resource value.

Each entry’s service must appear in allowed_services when that list is non-empty; config validation rejects entries that would never match at runtime.

credentials_path: Option<String>

Path to service account JSON or OAuth client credentials file.

When None, the tool relies on the default gws credential discovery (gws auth login). Set this to point at a service-account key or an OAuth client-secrets JSON for headless / CI environments.

default_account: Option<String>

Default Google account email to pass to gws --account.

When None, the currently active gws account is used.

rate_limit_per_minute: u32

Maximum number of gws API calls allowed per minute. Default: 60.

timeout_secs: u64

Command execution timeout in seconds. Default: 30.

audit_log: bool

Enable audit logging of every gws invocation (service, resource, method, timestamp). Default: false.

Trait Implementations

impl Clone for GoogleWorkspaceConfig

fn clone(&self) -> GoogleWorkspaceConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for GoogleWorkspaceConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for GoogleWorkspaceConfig

fn default() -> Self

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for GoogleWorkspaceConfig

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl JsonSchema for GoogleWorkspaceConfig

fn schema_name() -> Cow<'static, str>

The name of the generated JSON Schema.

fn schema_id() -> Cow<'static, str>

Returns a string that uniquely identifies the schema produced by this type.

fn json_schema(generator: &mut SchemaGenerator) -> Schema

Generates a JSON Schema for this type.

fn inline_schema() -> bool

Whether JSON Schemas generated for this type should be included directly in parent schemas, rather than being re-used where possible using the $ref keyword.

impl Serialize for GoogleWorkspaceConfig

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.