Improve auth setup project-creation error handling and retry UX

.changeset/improve-tos-guidance-project-create.md

@@ -0,0 +1,8 @@
+---
+"@googleworkspace/cli": patch
+---
+
+Improve `gws auth setup` project creation failures in step 3:
+- Detect Google Cloud Terms of Service precondition failures and show actionable guidance (`gcloud auth list`, account verification, Console ToS URL).
+- Detect invalid project ID format / already-in-use errors and show clearer guidance.
+- In interactive setup, keep the wizard open and re-prompt for a new project ID instead of exiting immediately on create failures.

src/auth_commands.rs

@@ -123,6 +123,7 @@ pub async fn handle_auth_command(args: &[String]) -> Result<(), GwsError> {
         "          --scopes     Comma-separated custom scopes\n",
         "  setup   Configure GCP project + OAuth client (requires gcloud)\n",
         "          --project    Use a specific GCP project\n",
+        "          --login      Run `gws auth login` after successful setup\n",
         "  status  Show current authentication state\n",
         "  export  Print decrypted credentials to stdout\n",
         "  logout  Clear saved credentials and token cache",
@@ -135,7 +136,7 @@ pub async fn handle_auth_command(args: &[String]) -> Result<(), GwsError> {
     }
 
     match args[0].as_str() {
-        "login" => handle_login(&args[1..]).await,
+        "login" => run_login(&args[1..]).await,
         "setup" => crate::setup::run_setup(&args[1..]).await,
         "status" => handle_status().await,
         "export" => {
@@ -148,6 +149,13 @@ pub async fn handle_auth_command(args: &[String]) -> Result<(), GwsError> {
         ))),
     }
 }
+
+/// Run the `auth login` flow.
+///
+/// Exposed for internal orchestration (e.g. `auth setup --login`).
+pub async fn run_login(args: &[String]) -> Result<(), GwsError> {
+    handle_login(args).await
+}
 /// Custom delegate that prints the OAuth URL on its own line for easy copying.
 struct CliFlowDelegate;