Deactivate Gmail integrations with unrecoverable watch errors

deactivate_broken_gmail_integrations.rb

# Deactivate Gmail integrations that failed watch renewal due to unrecoverable errors:
#   - failedPrecondition: Mail service not enabled
#   - PERMISSION_DENIED: Request had insufficient authentication scopes
#
# Set dry_run = false below to execute

dry_run = true

BROKEN_IDS = [
  81530,  # failedPrecondition: Mail service not enabled
  98276,  # PERMISSION_DENIED: insufficient authentication scopes
].freeze

ActsAsTenant.without_tenant do
  integrations = Integration.where(id: BROKEN_IDS)

  integrations.each do |integration|
    print "Integration #{integration.id} (account #{integration.account_id}): "

    if dry_run
      puts "would deactivate (currently #{integration.deactivated_at? ? 'already deactivated' : 'active'})"
      next
    end

    if integration.deactivated_at?
      puts 'already deactivated — skip'
      next
    end

    integration.update!(deactivated_at: Time.current)
    puts "deactivated"
  end
end

puts "(dry run — set dry_run = false to execute)" if dry_run