Devlog: Google Workspace Integration

This week I worked on integrating Google Workspace into Zero-Assist, allowing the AI to securely access services like Gmail, Google Drive, Google Docs, and Google Sheets after the user grants permission.

The ZeroClaw engine already supports Google Workspace CLI (GWS), but it was originally built for desktop Linux and expects a desktop environment with GWS already installed. Since Zero-Assist runs inside an Alpine Linux sandbox on Android using PRoot, that approach doesn’t work directly.

Instead of rewriting the integration, I kept the existing architecture and adapted it for Android.

What I Implemented

I modified the sandbox installation process so that GWS is installed automatically whenever the user installs the standard sandbox packages. This means users don’t need to manually install or configure the CLI.

Inside the app, I added a new Google Workspace plugin under:

Connections → Plugins → Installed → Google Workspace

When the user signs in, the Android app completes the OAuth flow and generates the required Google Workspace configuration files.

To bridge Android and the Linux sandbox, I use the existing Android ↔ PRoot bridge. The plan is:

User Login
    ↓
Android creates GWS credentials
    ↓
Credentials copied into PRoot sandbox
    ↓
Sandbox GWS CLI uses the same credentials
    ↓
AI can access approved Google services

This keeps authentication native while allowing the Linux CLI to work without requiring the user to touch the terminal.

Google Cloud Setup

I also created a dedicated Google Cloud Console project for Zero-Assist.

The project uses a Web Application OAuth client, which is required by the Google Workspace CLI authentication flow. I enabled the necessary APIs, including:

• Gmail API
• Google Drive API
• Google Docs API
• Google Sheets API

More APIs can be enabled as additional integrations are added.

Current Problem

The authentication flow itself works correctly, and users can successfully sign in.

The issue is that the generated credential/configuration files are not being copied correctly into the Linux sandbox. Because of this, the sandboxed GWS CLI cannot find the required authentication files, causing every Google Workspace command to fail.

The current challenge isn’t OAuth—it’s reliably synchronizing credentials between Android and the PRoot environment.

Once this bridge is working, users will simply sign in once, choose which Google services they want to grant access to, and Zero-Assist will be able to securely interact with those services without any manual setup. note:This devlog is written with hands and then passed to the chatgpt to format it with the .md because im very lazy to play with those colons and #’s