gws-account-switch

name	gws-account-switch
description	Choose a named Google Workspace account alias (`work`, `personal`, `columbia`) for `gws` and switch agents onto the matching exported credentials file. Use when a user wants Gmail or Drive read flows from a specific account or needs a practical multi-account workaround for googleworkspace/cli on this machine.

gws Account Switch

Use this alongside gws-shared, gws-gmail, and gws-drive when the user cares about which account gws should target.

Aliases

• work -> [e-mail]
• personal -> [e-mail]
• columbia -> [e-mail]

Workflow

1. Confirm which alias the user wants if it is not already clear.
2. Check whether ~/.config/gws/accounts/<alias>.json exists.
3. If the alias file is missing, tell the user the account must be initialized first:
   • gws auth login --readonly --services drive,gmail
   • gws-save-account <alias>
4. For commands against a specific mailbox, use:
   • gws-account <alias> gmail +triage
   • gws-account <alias> gmail +read --id <message-id>
   • gws-account <alias> drive files list --params '{"pageSize": 5, "q": "trashed=false"}' --format json
   • gws-account <alias> <service> <resource> ... for raw commands

Notes

• gws-account works by setting GOOGLE_WORKSPACE_CLI_CREDENTIALS_FILE to the alias file before executing gws.
• gws-save-account exports the currently active decrypted credentials into ~/.config/gws/accounts/<alias>.json.
• On this machine, the saved aliases are expected to carry both Gmail read and Drive read scopes.
• Prefer read-only Gmail and Drive flows unless the user explicitly asks for send or file mutation actions.
• Never expose raw credential contents in chat or logs.