gws auth login does not include Google Keep scope

[rubensmau]

Body:
When running gws auth login, the interactive scope selection menu shows 9 scopes but does not include https://www.googleapis.com/auth/keep, even when keep is explicitly listed in the gws mcp -s services.
Steps to reproduce:

Run gws auth login
Observe the scope selection menu — Keep scope is absent
Run gws keep notes list → returns 403 Request had insufficient authentication scopes

Expected behavior:
When keep is a supported service (gws mcp -s keep works), its required OAuth scope should be included in the auth login flow automatically.
Workaround attempted:
bash
GOOGLE_WORKSPACE_CLI_EXTRA_SCOPES="https://www.googleapis.com/auth/keep" gws auth login
The env var GOOGLE_WORKSPACE_CLI_EXTRA_SCOPES does not appear to be supported — Keep scope still missing from the menu.
Environment:

OS: Ubuntu (WSL2 on Windows 11)
gws version: gws --version
Node: node --version
Sonnet 4.6

[schoberwirt]

Same problem. Keep was the one thing I actually was the most excited for.

[GLunPy]

Same issue here

[sangwook-kim]

same issue. I look forward to this scope to be included.

[defel]

Damn it, I thought this was just a small bug, but keep is intentionally not included, as API access is only enabled for enterprise with service-account access.

Here it is filtered out for OAuth2 auth: https://github.com/googleworkspace/cli/blob/main/src/setup.rs#L288-L294

Here is the issue on the Google issue tracker:
https://issuetracker.google.com/issues/263769283?pli=1

And while opening up this API, please also add API-Access for NotebookLM 🙏thanks google

[jadbox]

I agree with @defel. Please do not be a gatekeeper on my Keep notes. This is not an Enterprise feature!

Edit: At least allow this feature if I am a Google One subscriber.