Gws Gmail

Gmail through isolated gws

REQUIRED: Apply gws-shared before every command. Use its validated profile, isolated environment, and absolute $gws_bin; do not use guessed --profile or --config flags. Reads and searches may proceed only after successful preflight.

Raw Gmail resource access is read-only: restrict messages, threads, drafts, and labels to list/get/search. Inspect those methods with "$gws_bin" schema in the same isolated environment.

• Read and triage are read-only after preflight.
• Route every compose, send, reply, reply-all, and forward through the linked send, reply, reply-all, and forward helper skills. Raw users.messages.send is unavailable. Raw users.drafts.send is permitted only inside one of those helper skills, after explicit user intent to send, for the exact newly created server-side draft whose full fields passed the helper's first validation and immediate unchanged readback. It is unavailable for an existing, user-selected, guessed, or modified draft.

The only permitted mutations outside those helper skills are requested label application/removal, Trash/untrash, and a bounded batch mutation. Each requires explicit user intent and a target preview containing the exact action, explicit alias and verified identity, query snapshot if used, count, exact message/thread IDs, labels being added or removed, and all targets before execution. A query alone never authorizes a mutation.

Raw label create/update/patch/delete and raw draft create/update/delete methods are unavailable. Raw draft list/get remains read-only; raw draft send has only the narrow helper boundary above. Do not invoke users.messages.delete, users.messages.batchDelete, users.settings, watch methods, or non-Gmail commands. Any raw method outside the read-only and narrow mutation allowlists above is unavailable; fail closed.