feat: Phase 1 — config, auth, OAuth2 PKCE, CLI scaffold, token store

configs/config.yaml

@@ -0,0 +1,50 @@
+app:
+  name: GoCalGoo
+  env: development
+  log_level: info
+  data_dir: ~/.local/share/gocalgoo
+
+oauth:
+  client_credentials_file: ~/.config/gocalgoo/credentials.json
+  token_store_file: ~/.config/gocalgoo/tokens.json
+  default_port: 53682
+  open_browser: true
+  manual_fallback: true
+  callback_path: /oauth/callback
+
+google:
+  scopes:
+    - https://www.googleapis.com/auth/calendar
+    - https://www.googleapis.com/auth/contacts
+  default_calendar_id: primary
+
+server:
+  bind: 127.0.0.1
+  port: 8080
+  read_timeout: 15s
+  write_timeout: 30s
+  shutdown_timeout: 10s
+
+api:
+  enabled: true
+  base_path: /api/v1
+  auth:
+    oauth_bearer_enabled: true
+    api_key_enabled: true
+
+mcp:
+  enabled: true
+  stdio: true
+  http: true
+  http_path: /mcp
+  protocol_version: "2025-06-18"
+  session_required: true
+
+security:
+  api_keys_file: ~/.config/gocalgoo/api-keys.yaml
+  redact_secrets_in_logs: true
+  require_tls_for_remote_http: false
+
+output:
+  format: table
+  timezone: Africa/Johannesburg