github.com/openclaw/gogcli

0.42.0 - 2026-09-25

Highlights: Batch editing across Sheets, Docs, Slides, and Forms; native Contacts batch commands; typed Gmail MCP tools; auth_required exit code, allowlist rejection, and correct batch end --continue-on-error exit status.

• Sheets: queue structural edits across commands with --batch, reuse one captured metadata snapshot, and submit an atomic update with explicit endpoint permission and guarded non-atomic recovery. (#1099) — thanks @sebsnyk.
• Sheets: submit atomic structural request arrays with sheets batch-request, preserving explicit JSON values, previewing exact requests, and requiring explicit grants in restricted command policies. (#1108) — thanks @gurgeous.
• Slides: queue native slides, elements, text, and table edits across commands with --batch, then submit one revision-locked atomic update while preserving generated IDs and explicit service permissions. (#1097) — thanks @sebsnyk.
• Forms: queue questions, moves, deletions, and settings with --batch, project append positions under the queue lock, and submit one revision-locked atomic update with explicit service permissions. (#1100) — thanks @sebsnyk.
• Contacts: add native batch get/create/update/delete commands with etag-checked field-specific updates, offline previews, and explicit partial progress; batch dedupe deletion while retaining changed-contact guards. (#1101) — thanks @sebsnyk.
• MCP: add typed Gmail draft and mailbox tools with literal label entries, reject empty runtime tool allowlists, and require separate send and permanent-delete opt-ins that preserve account policies, no-send restrictions, and destructive confirmations. (#1137) — thanks @alex-strattab.
• Gmail: optionally replace genuinely missing quoted inline images with visible placeholders in reply drafts, preserving strict defaults and valid resources and reporting degradation for review. (#1113) — thanks @hashtag1974.
• Auth: return the documented auth_required exit code (4) for expired or revoked OAuth grants, preserving reauthorization advice in unattended and read-only commands. (#1152)
• CLI: reject comma-only runtime command lists instead of silently treating malformed allowlists as unrestricted access; preserve empty overrides and valid CSV lists. (#1157)
• Docs: reject explicitly empty or whitespace-only --batch values before input or authentication, preventing accidental immediate edits when a batch variable is empty. (#1156)
• Docs: return a nonzero exit status when batch end --continue-on-error retains failed requests, while preserving its result summary and successfully applied edits. (#1154)
• Groups: use the documented single-label membership query in listings and backups, preserving native pagination and escaping member identities correctly. (#1059) — thanks @hengshan.
• Sheets: preserve caller cancellation when immediately submitting links set updates. (#1099)
• Sheets: preserve zero IDs, false flags, empty and null values, and unknown fields in lossless sheets raw output, including pretty and wrapped output. (#1155)
• Raw JSON: preserve explicit values and unknown fields across Docs, Slides, Drive, Gmail, Calendar, Forms, Tasks, and People/Contacts; retain Drive redaction and lossless Docs tab projection. (#1158)
• Comments: clarify that quoted Drive API comments are unanchored in Google editors and warn on stderr, including dry runs, while preserving payloads and machine-readable output. (#1160) — thanks @ignacioreyna.

0.41.0 - 2026-09-22

Highlights: Raw RFC822 drafts, Search Console URL inspection, automatic Slides image sizing, and fixes for lost Gmail results, cancellation, and Sheets crashes.

• Dependencies: retain patched gRPC 1.83.2 with Google API 0.298 to avoid GHSA-2v4p-qf9q-27wj; gog does not use the affected xDS server. (#1150)
• Gmail: stage and replace raw RFC822 drafts, retrieve their MIME, and preview safely offline; bound raw draft/send input to 35 MiB while preserving no-send policies. (#1126) — thanks @darkamenosa.
• Search Console: add searchconsole inspect for per-URL index status via the URL Inspection API (coverage state, indexing/page-fetch/robots.txt state, canonical, sitemaps, last crawl time), using the existing webmasters OAuth scope. (#1094) — thanks @laihenyi.
• Slides: derive either missing image dimension from local files or anonymously readable public HTTPS images, preserving explicit size pairs and documenting the public-fetch requirement. (#1112) — thanks @sebsnyk.
• Sheets: return an error instead of crashing when append responses omit update metadata, without retrying the potentially completed write. (#1142) — thanks @SebTardif.
• Calendar: show failed Zoom meeting cleanup alongside a failed Calendar write, preserving both causes through CLI error formatting. (#1144) — thanks @SebTardif.
• Gmail: fail thread searches when a detail fetch fails instead of silently returning partial results after a discarded retry. (#1138) — thanks @SebTardif.
• Gmail: accumulate repeated --add and --remove label flags across thread, message, batch, and label modifications while preserving literal comma/backslash splitting and normalization. (#1139) — thanks @ShacharBialick.
• Gmail: inspect Pub/Sub notifications matching the saved watch cursor so pending history changes can reach the hook. (#1140) — thanks @kazuyuki-eguchi.
• API: honor in-flight command cancellation in YouTube, Chat unread lookups and sends, and People profile and relation requests. (#1145) — thanks @SebTardif.
• API: honor api list --plain with stable, sanitized TSV columns while preserving default and JSON catalog responses. (#1141, #1146) — thanks @postoso and @goutamadwant.
• API: close upload bodies when the circuit breaker rejects a request or retry buffering fails, preventing leaked files and streams. (#1136)
• Apps Script: keep file names within one TSV field in appscript content, escaping line breaks instead of splitting output rows. (#1091) — thanks @haosdent.
• Docs: identify the queued batch UUID in revision-mismatch errors so it can be inspected or aborted. (#1143) — thanks @SebTardif.
• Search Console: preserve permission-denied exit codes when adding API setup or scope guidance. (#1094)
• Dependencies: refresh Google/MCP clients and protocol modules, gofumpt, Node 26/Corepack, pnpm 11, Docker build pins, and tracking-worker Vite, PostCSS, Undici, Nano ID, and tooling pins while retaining Go 1.26 compatibility and release-age limits. (#1134, #1148)
• CI: verify the Go 1.26 minimum, worker types, and generated skills; avoid duplicate pull-request test runs and repair remote validation setup. (#1131, #1147)

0.40.0 - 2026-09-11

Highlights: Preserve Slides styling, format paragraphs, and reuse cached Discovery documents; duplicate or inspect individual spreadsheet tabs and sort Drive files.

• Slides: preserve leading text styling during insert-text --replace, including template inheritance, with revision protection and correct empty-target and UTF-16 handling. (#1111, #1122) — thanks @sebsnyk.
• Slides: add paragraph-style for shape and table-cell alignment, spacing, indentation, and direction, with explicit field masks and zero-value support. (#1098, #1123) — thanks @sebsnyk.
• API: cache Discovery documents for 24 hours with bounded disk usage, isolated endpoint/version keys, and explicit --no-cache bypass; keep API responses and authorization checks uncached. (#1106, #1121) — thanks @gurgeous.
• Sheets: duplicate a tab within its spreadsheet, with an explicit destination name and optional insertion index. (#1102, #1116) — thanks @gurgeous.
• Sheets: filter raw API reads by exact tab title with --sheet, including A1-like names and apostrophes, while retaining spreadsheet metadata and the grid-data opt-in. (#1104, #1115) — thanks @gurgeous.
• Drive: add opt-in ls --sort and --order controls while preserving the existing modification-time default and native pagination. (#1105, #1117) — thanks @gurgeous.
• Slides: delete several page elements in one guarded API batch, retain single-element output compatibility, and document replacing WordArt elements. (#1109) — thanks @sebsnyk.
• Sheets: preserve zero-valued dimension indices so inserting before the first row or column succeeds. (#1107, #1114) — thanks @gurgeous.
• Docs: replace the reserved default alias command with the account manager's Set default action and explain account-selection precedence. (#1092, #1093) — thanks @gianpaj and @goutamadwant.
• Dependencies: refresh Go networking, authentication and cryptography modules and tracking-worker tooling, including the patched Sharp dependency, while retaining Go 1.26 compatibility and the worker's 24-hour release-age policy.
• Tooling: refresh goimports and deadcode to x/tools v0.50.0 while retaining the Go 1.26 minimum. (#1120)

0.39.1 - 2026-09-05

Highlights

• Backups: stop repeated page tokens across Drive, Calendar, Contacts, Tasks, Groups, Admin, Keep, Workspace, and Apps Script without adding new page limits; retain earlier ACL and membership rows on ordinary API failures. (#1078, #1079, #1080, #1081, #1082, #1087) — thanks @SebTardif.
• Calendar: stop cyclic recurring-instance lookups while preserving success as soon as the requested occurrence is found. (#1084, #1087) — thanks @SebTardif.
• Gmail: stop cyclic query scans before bulk message changes or automatic replies, including empty result pages. (#1086, #1087) — thanks @SebTardif.
• Drive and Contacts: stop tree, inventory, disk-usage, and contact-dedupe scans on repeated page tokens before emitting a partial report or applying contact changes. (#1083, #1085, #1087) — thanks @SebTardif.
• Docs: stop open-comment scans when Drive repeats a page token, preserving first-open-page results. (#1087) — thanks @SebTardif.
• Dependencies: refresh Google API support modules, tracking worker tooling and Undici, pnpm, and the Pages deployment action while retaining Go 1.26 compatibility.
• MCP: update the protocol SDK to 1.0 while preserving existing stdio clients.

0.39.0 - 2026-09-03

Highlights

• AdSense: add explicitly opted-in read-only account, inventory, and report commands, including saved reports and validated reporting timezones. (#1047) — thanks @ptz0n.
• Chat: search messages across Workspace spaces with paging, formatted text, optional read-state metadata, and read-only/untrusted-output support; unavailable read state stays unknown. (#1069, #1068) — thanks @wrgrant.
• Auth: explicitly select a Google Cloud quota project with --quota-project or GOG_QUOTA_PROJECT, preserving default auth behavior and forwarding the setting through Gmail watch and MCP requests. (#1056, #1055) — thanks @prateek.
• Gmail: expose flattened reply_to in message JSON and default metadata reads, including sanitized messages and threads, with untrusted-content wrapping support. (#1057) — thanks @hashtag1974.
• Docs: accept the A3 page-size preset in docs page-layout and docs write, preserving the current page mode unless explicitly changed. (#1050) — thanks @ryo-touch.

Fixes and maintenance

• Chat: wrap formattedText in existing raw Chat and Discovery API JSON responses when --wrap-untrusted is enabled, preserving ordinary JSON output. (#1069) — thanks @wrgrant.
• Docs: preserve underscores in enum values and environment-variable names in rendered command references instead of treating them as emphasis. (#1073)
• Dependencies: refresh Google API clients, Goldmark, and Go cryptography dependencies while retaining Go 1.26 compatibility.

Validation notes

• Live-tested Docs A3, Gmail Reply-To output, and quota-project opt-in boundaries with existing account grants. Successful Workspace Chat search, AdSense publisher reports, and valid quota-project requests remain unverified; their local regression coverage and expected account/scope failures were checked.

0.38.3 - 2026-09-02

• Chat: wrap flattened sender display names in message and thread listings when --wrap-untrusted is enabled, preserving ordinary JSON output. (#1069) — thanks @wrgrant.
• Releases: reject an existing generic Unreleased section before the post-release helper changes the changelog or development version.
• Build: update the preferred Go toolchain and pinned Docker builder to Go 1.27.1 while retaining Go 1.26 compatibility.
• Backup: stop Chat and Classroom pagination loops while preserving already-fetched Classroom child rows when a later ordinary API request fails. (#1063) — thanks @SebTardif.
• Drive: reject repeated page tokens during drive sync push scans before writing files or emitting a partial plan. (#1065) — thanks @SebTardif.
• Drive: stop permission audits and bulk permission preflights on repeated page tokens without partial audit output or permission writes. (#1066) — thanks @SebTardif.
• CLI: isolate baked safety-profile locked flags, output precedence, and diagnostic notes per command invocation, fixing shared locked-flag state races. (#1067)
• Gmail: document the HTML-body workaround for drafts that Gmail web rewraps when sending, without changing MIME defaults. (#1064, #1058) — thanks @daveotero.

0.38.2 - 2026-09-02

• Gmail: preserve direct --access-token / GOG_ACCESS_TOKEN authentication in gmail watch serve push handlers without requiring stored OAuth credentials; token expiry and refresh behavior remain unchanged. (#1042) — thanks @bill-starfoundry.
• Gmail: stop --from-contact fallback lookup with a clear error when Google repeats a page token, while preserving exact-match and ambiguity checks across all pages. (#1045) — thanks @SebTardif.
• People/Contacts: stop raw email-identifier lookup when Google repeats a page token, preserving unique-resource matching and ambiguity checks without partial output. (#1044) — thanks @SebTardif.
• Contacts: stop contact exports safely when group listings repeat a page token, preserving vCard categories across all pages without writing a partial export. (#1046) — thanks @SebTardif.
• Backup: update age encryption to reject headers larger than 2 MiB or containing more than 1024 recipient stanzas when reading encrypted shards. (#1053)
• Docs: validate page-layout sizes and margins before dry-run, and preview the resolved document-style request used for execution. (#1052, #1051) — thanks @ryo-touch.
• HTTP: cap Google Retry-After delays at 60 seconds per retry, including numeric values that exceed integer or duration limits. (#1043) — thanks @SebTardif.
• Sheets: preserve zero-valued sheet, row, and column indexes in Connected Sheets refresh status references, keeping A1 anchors identifiable. (#1041, #938) — thanks @ryo-touch.
• Dependencies: prefer Go 1.27 while retaining Go 1.26 compatibility, refresh Google and MCP SDKs, update tracking worker dependencies and Go tooling, and refresh Docker build actions. (#1040, #1053)
• API: resolve service-hosted Discovery documents such as Meet v2 after a default-directory 404, preserving explicit overrides and Google request-host safeguards. (#1049, #1048) — thanks @goutamadwant.

0.38.1 - 2026-08-25

• Gmail: send exact prebuilt RFC822 messages with verified sender/account guards, normalized thread IDs, and content-safe offline dry runs. (#1032, #1029) — thanks @higginz777.
• Auth: add least-privilege Gmail send and read-send authorization, reject read-only/send conflicts, and preserve narrow Gmail grants during reauthorization. (#1033) — thanks @higginz777.
• Downloads: honor explicit new output directories for Drive, Docs/Sheets/Slides exports, Docs tabs, Photos, and Photos Picker without changing existing defaults or overwrite protections. (#1036)
• Gmail: honor attachment-download dry runs for threads and drafts without opening account credentials, fetching messages, or writing files. (#1035)
• Security: redact authenticated Git remotes and configured API keys from backup/config command output and dry-run previews. (#1035)
• Sheets: reject missing Connected Sheets refresh replies without claiming success or retrying a potentially billable execution. (#1037)
• Backup: honor dry-run for all backup push commands without authenticating, fetching Google data, creating local caches or checkpoints, or changing Git repositories. (#1034)
• Auth: make remote authorization dry runs side-effect-free instead of creating OAuth state or exposing authorization URLs. (#1034)
• Config: preserve concurrent account aliases, client mappings, and security settings by keeping every configuration update inside its shared file lock. (#1034)

0.38.0 - 2026-08-25

• Sheets: add the full BigQuery Connected Sheets lifecycle—create, update, refresh, and safely delete data sources—with explicit billing and authorization, protected SQL previews, correct source matching, and reliable extract reads. (#938, #1001) — thanks @ryo-touch.
• Gmail: never silently drop a requested quoted message when sending, replying, forwarding, or creating drafts; surface fetch failures and warn when the original has no quotable text. (#996) — thanks @malob.
• Calendar: add --no-reminders when creating or updating events and correctly clear custom overrides when restoring calendar-default reminders. (#1002, #1016) — thanks @sorenisanerd.
• Gmail/Calendar: stop safely when Google repeats a pagination token, preventing stalled listings and resumed Gmail backups. (#1004) — thanks @SebTardif.
• Apps Script: pull project source and inspect deployments and versions without mutating remote projects. (#1018) — thanks @haosdent.
• Chat: include user mentions and emoji-reaction summaries in message-list JSON while preserving existing text output. (#1000) — thanks @Ben-Living.
• Slides: skip and unskip slides and expose their visibility without changing existing plain-text output. (#1009) — thanks @marnunez.
• Auth: explain Google Account and OAuth requirements, preserve enabled services during reauthorization, and provide client-specific repair guidance when credentials are missing. (#1014, #1015, #1017) — thanks @coeur-de-loup.
• Config: prevent intermittent Windows access-denied errors by safely serializing concurrent configuration updates.
• Output: clarify that --results-only unwraps command output before --select applies field projection. (#1007)
• Security: bound Google HTTP clients, Gmail watch listeners, and local OAuth callbacks so stalled, slow, or oversized requests cannot hang the CLI. (#995, #998)
• Security: harden HTML sanitization, untrusted-output allocation, tracking encryption, and live-evaluation session identifiers without changing public output formats. (#1011, #1012, #1013)
• Security: restrict GitHub Actions repository tokens to the minimum read-only permissions required by CI. (#1010)

v0.37.0 - 2026-08-14

• Gmail: emit sanitized message headers and bodies once in gmail get --json --sanitize-content, while retaining the message envelope and --results-only unwrapping. (#986) — thanks @ronny-rentner.
• Sheets: add read-only Connected Sheets discovery, full data-source descriptions and execution status, plus bounded reads for anchored data-source tables (extracts) behind an explicitly opted-in BigQuery scope. (#938) — thanks @ryo-touch.

v0.36.0 - 2026-08-13

Highlight: Gmail grows full draft-side reply workflows — reply, reply-all,
and forward compose real drafts (never auto-sending), with address-aware
recipient validation.

• Gmail: add draft-only reply, reply-all, and forward workflows with shared send-side composition, no-send compatibility, and address-aware recipient validation. (#977) — thanks @malob.
• Gmail: add opt-in exact-or-lower-bound match counts to thread and message searches without treating Gmail's result estimate as exact. (#983, #984) — thanks @chrischall.
• Auth: offer one-time re-authorization for expired or revoked stored OAuth refresh tokens after interactive confirmation, while preserving non-interactive recovery guidance. (#973) — thanks @inamiy.
• Calendar: anchor --days at an explicit --from, preserve calendar-day windows across DST, and reject conflicting window flags instead of silently discarding them. (#981) — thanks @frankhli843.
• Safety: allow custom baked profiles to lock boolean CLI flags against command-line, environment, and config overrides without echoing the locked value in override errors. (#976) — thanks @ronny-rentner.
• Dependencies: update Kong, Google protobuf/genproto, Cloudflare Workers types, and pnpm to their latest releases.

0.35.0 - 2026-08-09

• Install: move the Go module to github.com/openclaw/gogcli; new releases install with go install github.com/openclaw/gogcli/cmd/gog@latest instead of the former github.com/steipete/gogcli path.
• Security: carry forward the golang.org/x/text (GO-2026-5970) and gRPC-Go (GO-2026-6061) advisory remediations prepared for the tagged but unpublished 0.34.2 release.
• Docs: add opt-in --locate and --tab to docs comments list, resolving all comment locations from one shared document fetch. (#961, #965) — thanks @ryo-touch.
• Gmail: allow GOG_GMAIL_AUTO_FROM_ADDRESSED_ALIAS to enable the existing addressed-alias sender policy for replies and reply-context drafts. (#964) — thanks @ronny-rentner.
• Gmail: add opt-in compact 0-based attachment references across search, message, thread, draft, and download workflows. (#963) — thanks @ronny-rentner.
• Gmail: add opt-in attachment metadata to message search in JSON and text output without rendering decoded bodies. (#962) — thanks @ronny-rentner.
• Security: redact credentials embedded in Gmail watch hook URLs, including userinfo, path, query, and fragment components, unless --show-secrets is set. (#960) — thanks @bunlongheng.
• Gmail: add guarded single-message RFC822/EML import from a file or stdin, with labels, internal-date, spam, calendar-processing, and parse-only dry-run controls. (#956) — thanks @holgergruenhagen.
• Gmail: warn before a draft update replaces an existing rich-text body with plain text only, while keeping JSON stdout clean. (#955) — thanks @mcinteerj.
• Dependencies: update the Google API and OpenTelemetry stacks, Go developer tools, pnpm, and email-tracking worker toolchain to their latest policy-eligible releases.
• Docs: rewrite the README as a concise front door and move task examples into a dedicated guide.