auth

var AllScopes = []string{
	gmail.GmailModifyScope,
	calendar.CalendarReadonlyScope,
	calendar.CalendarEventsScope,
	people.ContactsScope,
	people.UserinfoProfileScope,
	drive.DriveReadonlyScope,
	drive.DriveMetadataScope,
}

AllScopes contains all OAuth scopes used by the application. Gmail uses the modify scope for organizational operations (label, archive, star, mark read/unread). The modify scope is a superset of readonly — it includes all read access. Calendar uses both readonly (for calendar list metadata) and events (for RSVP/color operations). Note: calendar.events also permits event creation, which is an accepted trade-off for RSVP/color support. The architecture test (TestNoDestructiveAPIMethodsInProductionCode) prevents accidental misuse. Contacts uses the full contacts scope for group management and starring. The contacts scope is a superset of contacts.readonly — it includes all read access. Profile is required for people/me (names, emailAddresses fields) used by `gro me` and init verification.

var ScopeDescriptions = map[string]string{
	gmail.GmailModifyScope:         "Gmail Modify — read messages, plus label, archive, star, and mark read/unread. No send or delete access.",
	gmail.GmailReadonlyScope:       "Gmail Read-Only — read messages and metadata.",
	calendar.CalendarReadonlyScope: "Calendar Read-Only — read calendars and events.",
	calendar.CalendarEventsScope:   "Calendar Events — read and update events (RSVP, color). No calendar settings access.",
	people.ContactsScope:           "Contacts — read contacts and groups, plus manage group membership and starring.",
	people.ContactsReadonlyScope:   "Contacts Read-Only — read contacts and groups.",
	people.UserinfoProfileScope:    "Profile — read the authenticated user's name and email address (required for 'gro me').",
	drive.DriveReadonlyScope:       "Drive Read-Only — read files and metadata.",
	drive.DriveMetadataScope:       "Drive Metadata — read and update file metadata (star/unstar). No file content write access.",
}

ScopeDescriptions maps OAuth scope URLs to human-friendly descriptions.